Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: H8mxlQvmfgaeLHmMmnUj+mQk/2gKc+Qna4JTYMCcVHw=
Subject key identifier: 7F:43:F8:58:C5:97:DE:DD:95:D2:47:1A:D8:26:D2:AE:77:E1:B9:F5
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 019D389C1DED9932DEDB660799628C04ABC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 0518
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: 3xjO+ALsZYQU61YD6gipgBxP6dXNE5ljpPEIwZ4wmWE=)
2: x7f937Xy_FUIHRQkUrkm9MCxGxs.roa (hash: 0WmyBcbNw17aY5NG33htiVCGPfaVOrCshbMwX66ND3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1d:ed:99:32:de:db:66:07:99:62:8c:04:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=7f43f858c597dedd95d2471ad826d2ae77e1b9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:3e:0b:38:7b:56:ca:dc:6c:ca:3c:fd:23:
44:eb:ff:f1:15:87:99:35:a2:8f:d9:3c:4b:d1:e1:
ae:fc:bc:ab:af:6a:b7:74:4e:b3:ee:83:50:4c:b8:
63:69:7b:83:84:17:e0:af:6e:3b:ac:2d:66:c0:ea:
41:6a:1f:cf:93:39:4e:46:b2:71:03:8a:ea:fe:87:
62:10:2f:d2:d4:13:fc:70:cf:cc:21:7b:c9:c0:0f:
8b:65:0b:d3:4d:0d:06:0f:e9:16:63:58:b3:05:93:
73:ff:b5:89:e3:52:f5:26:b8:50:cf:fb:e0:f0:85:
ec:67:88:76:29:0a:f3:cf:8b:e0:3b:f6:bb:f1:42:
c8:b2:ae:75:2c:dc:66:11:00:fb:0a:ae:17:1c:81:
df:6e:ca:ea:bb:06:b1:d5:74:14:9b:98:37:5e:09:
d3:3b:ec:29:9f:f1:78:2c:90:ef:12:21:e7:47:e8:
09:29:13:a1:ef:51:84:c1:ae:0b:b8:03:a2:39:fc:
57:ca:86:79:2e:a8:fc:cc:fc:1f:52:8e:b7:5d:77:
e2:6f:bf:e0:24:f8:09:52:6a:62:91:fd:bf:d5:6b:
4b:42:53:8f:f7:50:78:96:e3:2b:ed:73:36:1f:b3:
ab:c2:f2:46:a1:d3:72:63:7f:b7:10:80:40:c4:2e:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:F8:58:C5:97:DE:DD:95:D2:47:1A:D8:26:D2:AE:77:E1:B9:F5
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:65:52:14:93:1e:e7:54:97:b5:00:2b:7a:a4:26:2c:a7:6e:
d5:a3:db:cc:58:c6:20:74:90:b4:f5:85:b9:cb:56:55:18:f2:
9a:98:3c:a9:82:2f:82:50:49:ce:7b:dd:12:0c:22:9a:f4:ca:
8f:ab:94:87:e4:0c:f7:72:d4:63:17:6c:b8:ed:1f:e2:8d:8c:
69:ff:67:0b:01:03:a0:0a:97:3f:08:a5:1e:a7:ce:83:4d:b5:
72:26:99:80:b5:c2:7c:87:39:61:1f:20:67:e4:ef:da:33:4b:
f7:ce:76:68:a0:ff:b4:0d:10:7a:76:83:e9:45:ed:f0:89:82:
d4:82:de:8e:74:d1:9c:c8:1d:54:4f:c6:2c:ec:20:4a:88:b2:
76:c7:5c:43:36:e0:b0:fd:0e:fd:c3:01:5b:34:6b:21:89:04:
ce:92:10:1e:72:a4:09:fd:a9:66:2a:29:bb:6f:54:49:f6:87:
15:af:82:9a:f4:6f:ce:d5:98:4d:50:94:16:b3:3b:19:f9:29:
55:f6:3f:2f:e6:89:b7:b2:a2:e2:e8:47:01:93:63:87:09:d0:
93:44:91:98:b9:32:10:79:5d:23:f9:26:3f:d0:e8:0d:f6:b4:
a2:74:50:11:f0:2c:35:a5:57:d0:e9:c2:e0:0a:9c:78:14:7a:
d1:d1:65:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:20 2026 by rpki-client