Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: Ju9sd3JsiVfulrDKo4JcF1YWss2rrrdcOlYyNaY7Ec8=
Subject key identifier: DC:CD:06:E3:C9:F8:0B:80:2B:3B:23:6A:93:B3:27:29:C6:06:42:E6
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 019E97038EACDB82E01B3433176BDDD6BE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 0868
Signing time: Fri 05 Jun 2026 09:00:53 +0000
Manifest this update: Fri 05 Jun 2026 09:00:53 +0000
Manifest next update: Sat 06 Jun 2026 09:00:53 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: oAJA0/R4dTWuGOro5I6LAiRNcAhSnwzqfxQBkzD9lIk=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:03:8e:ac:db:82:e0:1b:34:33:17:6b:dd:d6:be:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Jun 5 09:00:53 2026 GMT
Not After : Jun 6 09:00:53 2026 GMT
Subject: CN=dccd06e3c9f80b802b3b236a93b32729c60642e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:a8:35:a3:4b:3a:12:67:58:d9:35:2d:e3:
64:8f:51:83:05:5d:94:3c:92:45:57:f4:1d:08:b3:
51:3e:1b:b9:c7:e5:5e:ff:44:a3:ee:fe:3f:15:d7:
19:3a:b6:39:bc:11:4a:7e:0b:f3:07:95:33:d7:1c:
fc:7e:61:71:50:93:0a:a1:33:eb:78:d9:fd:09:1d:
4e:88:26:9a:9b:4c:8a:d7:55:45:4a:a3:1a:ee:17:
9d:9d:f9:1a:32:73:95:55:7d:83:aa:6d:f2:ae:96:
aa:fc:24:df:5b:e6:f5:a9:62:8f:94:ff:79:40:48:
1b:42:7b:d8:11:e5:5a:fb:67:4c:64:a7:7c:f7:5e:
dc:da:50:f8:cc:a0:a3:f8:75:02:7f:0d:23:41:22:
a4:d4:f0:82:6a:47:41:fb:15:58:c9:5a:d0:14:14:
11:ca:b3:cf:53:25:3d:c2:d3:a2:6d:a6:21:19:11:
41:65:95:5a:2b:05:11:15:7f:e0:05:c6:4f:5f:01:
13:b8:95:01:76:3c:95:5f:06:d4:2a:63:25:c2:e5:
0e:82:96:18:c8:94:01:ff:8b:5f:31:7b:a0:ec:d6:
69:24:ba:39:f4:65:47:49:97:22:67:f9:a4:dc:10:
4a:3e:9b:a2:96:50:11:33:6d:e3:43:17:f9:e8:78:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:06:E3:C9:F8:0B:80:2B:3B:23:6A:93:B3:27:29:C6:06:42:E6
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b8:87:8d:3e:1b:82:97:c0:23:e3:f2:43:fe:56:67:fb:e5:
db:35:07:ab:d3:a4:de:89:d7:68:5c:a3:ce:b1:41:51:5f:97:
e7:aa:f8:ce:a1:8f:5d:6a:69:7f:74:73:90:60:35:af:28:3b:
55:1c:d9:86:9e:b6:76:ce:a1:c4:9e:24:be:0b:60:75:6c:01:
a0:9a:ff:ba:a0:2c:74:79:11:c9:bd:f0:2f:ac:2f:3b:c1:d6:
57:e2:a9:d2:cb:97:17:df:4c:ca:9d:47:12:46:5a:3f:96:e3:
f7:c9:32:98:f8:8a:84:a7:00:ad:5e:c4:cb:42:73:9e:84:84:
24:b6:0c:51:23:0a:b7:99:bb:1b:3c:f6:3e:8b:8a:14:2c:50:
29:8f:4d:1b:ed:62:6d:9d:78:e0:d4:6c:9a:3d:82:ba:25:31:
e3:2e:e5:00:31:40:fa:63:b9:b0:4e:d4:68:81:78:61:f1:6f:
fc:e9:0f:f6:a1:72:b2:4c:48:22:c0:b1:cb:49:25:cd:97:17:
28:8b:1b:5f:9e:fb:f3:84:e2:25:e0:b9:11:62:c0:b9:b0:70:
74:7c:7c:60:fa:82:3c:75:c5:ab:2e:a2:00:70:70:be:42:e5:
9d:16:e6:9c:ea:05:58:c8:2a:d4:be:f3:21:17:3a:e3:3e:07:
29:a5:01:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 19:23:10 2026 by rpki-client