Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: uNtTxgh++StgHNd7bFfUvf4sQpSe+YJBmEzn4HAOOQE=
Subject key identifier: 08:37:E5:B1:33:15:00:F3:60:63:68:0A:45:40:6E:B2:42:16:BB:EE
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 01A06E396B7AFB34C8ABE5ED5D7780E73BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 095C
Signing time: Fri 04 Sep 2026 21:00:51 +0000
Manifest this update: Fri 04 Sep 2026 21:00:51 +0000
Manifest next update: Sat 05 Sep 2026 21:00:51 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: b57o7OjdXLqtqBu09t1+fFzcUwo2xGmcc6nO+hjhWCc=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:6b:7a:fb:34:c8:ab:e5:ed:5d:77:80:e7:3b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Sep 4 21:00:51 2026 GMT
Not After : Sep 5 21:00:51 2026 GMT
Subject: CN=0837e5b1331500f36063680a45406eb24216bbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:d9:5a:14:cd:4e:6e:09:de:8c:45:9d:76:
23:cb:6c:9f:2c:a4:0c:23:ea:a0:90:26:c2:15:2c:
60:4a:e9:02:0f:1e:ef:53:25:37:e4:ae:ed:07:c0:
03:48:57:cc:72:cf:d0:82:eb:c7:a6:61:ae:ff:ba:
b8:9b:8f:5a:81:6d:dc:5b:dc:19:28:90:c0:31:f5:
2c:9f:eb:e8:a1:9d:c2:bb:cc:38:47:5f:ba:cb:95:
3c:cb:ec:54:db:2f:5d:f4:37:d6:11:7a:80:ad:39:
66:45:ad:6a:e2:74:93:ac:43:b5:38:ac:9e:90:17:
39:f2:48:19:97:9b:dd:c8:66:71:c9:a0:e2:57:25:
a9:43:d3:91:f5:da:dd:4f:ea:13:d2:26:21:21:35:
3c:31:2a:07:0e:93:c3:f3:59:42:dd:4f:a4:83:62:
28:10:2b:dd:d8:9e:fb:73:9a:e2:bc:91:72:0e:86:
71:63:cf:5e:0f:d9:fc:c3:a6:c7:9b:fa:5e:9f:b9:
48:43:4d:f6:e5:1d:5d:03:10:97:ef:f4:4e:15:1b:
b0:3d:f4:df:43:79:04:00:0e:45:06:44:61:21:7e:
0c:0b:a2:91:9f:07:cf:2f:6e:85:29:a4:1a:f2:d8:
51:5d:f4:07:9f:b4:f0:f1:37:3b:d1:e2:c6:5f:51:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:37:E5:B1:33:15:00:F3:60:63:68:0A:45:40:6E:B2:42:16:BB:EE
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b3:6c:90:1f:aa:da:b0:7f:51:69:b8:60:b3:b6:27:58:bc:
4f:40:b8:db:1c:b0:07:b5:46:94:b5:bc:b0:6f:d8:41:a6:6d:
0d:9e:ef:2a:5b:b5:3e:5a:15:37:c5:73:9e:2a:f2:45:de:f8:
c1:31:0f:13:2a:ce:13:08:7e:12:99:8d:8f:ef:9b:d6:19:9f:
49:62:d8:af:5d:e7:eb:2a:91:ec:29:3e:7d:98:c2:f7:ab:9a:
0d:46:00:6f:f6:19:74:d4:9b:0e:66:25:1d:b2:0c:dd:77:bf:
22:a0:7b:e9:9e:31:55:57:7f:e9:e1:3b:5f:7d:6e:f4:c7:fa:
59:e3:68:ca:f8:db:5e:f0:13:23:e3:4e:1d:e0:c6:b6:b4:2c:
19:f8:94:7c:e7:e3:52:a0:12:e8:6d:be:6c:7d:57:07:81:0e:
75:33:64:30:ab:45:41:c2:a6:e8:f4:56:10:73:d4:39:2c:5b:
13:99:2d:44:80:c0:4d:9f:1c:20:35:b9:97:f4:37:d8:a3:e6:
88:d7:39:eb:f7:2f:08:02:49:8f:91:fe:32:af:1c:52:43:02:
9d:10:62:9a:7c:de:0e:7a:d7:18:92:f3:fe:04:ba:42:1d:cf:
a5:81:15:e4:3c:01:12:30:27:6e:4e:92:9c:ca:f2:38:8c:84:
f5:e3:5c:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuOWt6+zTIq+XtXXeA5zvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2
NWFkMTEwHhcNMjYwOTA0MjEwMDUxWhcNMjYwOTA1MjEwMDUxWjAzMTEwLwYDVQQD
EygwODM3ZTViMTMzMTUwMGYzNjA2MzY4MGE0NTQwNmViMjQyMTZiYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vfZWhTNTm4J3oxFnXYjy2yfLKQM
I+qgkCbCFSxgSukCDx7vUyU35K7tB8ADSFfMcs/QguvHpmGu/7q4m49agW3cW9wZ
KJDAMfUsn+vooZ3Cu8w4R1+6y5U8y+xU2y9d9DfWEXqArTlmRa1q4nSTrEO1OKye
kBc58kgZl5vdyGZxyaDiVyWpQ9OR9drdT+oT0iYhITU8MSoHDpPD81lC3U+kg2Io
ECvd2J77c5rivJFyDoZxY89eD9n8w6bHm/pen7lIQ0325R1dAxCX7/ROFRuwPfTf
Q3kEAA5FBkRhIX4MC6KRnwfPL26FKaQa8thRXfQHn7Tw8Tc70eLGX1F50wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg35bEzFQDzYGNoCkVAbrJCFrvuMB8GA1UdIwQY
MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt
ZDdiMmFkMDFhMWQ3LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3
LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErNskB+q
2rB/UWm4YLO2J1i8T0C42xywB7VGlLW8sG/YQaZtDZ7vKlu1PloVN8VzniryRd74
wTEPEyrOEwh+EpmNj++b1hmfSWLYr13n6yqR7Ck+fZjC96uaDUYAb/YZdNSbDmYl
HbIM3Xe/IqB76Z4xVVd/6eE7X31u9Mf6WeNoyvjbXvATI+NOHeDGtrQsGfiUfOfj
UqAS6G2+bH1XB4EOdTNkMKtFQcKm6PRWEHPUOSxbE5ktRIDATZ8cIDW5l/Q32KPm
iNc56/cvCAJJj5H+Mq8cUkMCnRBimnzeDnrXGJLz/gS6Qh3PpYEV5DwBEjAnbk6S
nMryOIyE9eNcQw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:18:09 2026 by rpki-client