Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: LCdt/ZzJP0W7LXOPrJIJA6+ChD5QbtPWbE8HngBV8Bg=
Subject key identifier: 22:F7:27:A0:2D:2C:AA:FD:0B:62:1B:24:06:7E:8E:DF:C8:FC:98:90
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019F71AB4C7FAC66109A9B1C1426BCC23FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 19BE
Signing time: Fri 17 Jul 2026 20:01:19 +0000
Manifest this update: Fri 17 Jul 2026 20:01:19 +0000
Manifest next update: Sat 18 Jul 2026 20:01:19 +0000
Files and hashes: 1: 1-lozbj90cEVrWfLXpW3TMtR_PG4.roa (hash: yo16aFrNe1K/8qY2QGw1QDgUIGMnW024P9x1aOJw2jM=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: C4NEAnN6CqsJgTuqme81wlG/ycJezKMpijYsXL19Qjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:ab:4c:7f:ac:66:10:9a:9b:1c:14:26:bc:c2:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jul 17 20:01:19 2026 GMT
Not After : Jul 18 20:01:19 2026 GMT
Subject: CN=22f727a02d2caafd0b621b24067e8edfc8fc9890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:4d:b0:89:b9:5c:3b:40:55:08:41:1a:60:
4a:46:1e:0c:9c:17:3d:f5:43:af:09:7e:d8:63:30:
ea:fc:1a:60:d3:2d:35:ed:98:d6:d1:50:a2:f1:19:
1c:3f:5e:39:3a:1c:04:a1:bd:99:41:a1:3e:79:af:
98:f1:3e:a5:f4:52:98:ea:02:d9:78:8f:c5:5e:ca:
aa:3c:f7:a0:bb:49:e6:da:6b:36:fc:ef:e8:53:ad:
12:56:36:e3:a0:21:41:95:91:e9:93:4d:52:34:7a:
c6:58:f4:a7:2b:3d:4c:20:cd:11:87:d3:a7:02:8a:
34:44:eb:3f:9d:f5:e1:53:db:31:40:dd:9a:d0:b0:
a5:cf:96:27:89:ab:54:9b:93:e6:8b:14:2b:c3:87:
d7:b6:e4:fa:f9:30:7a:89:e9:bb:38:da:99:92:83:
2e:1b:c4:d3:90:00:f0:eb:1e:c8:3c:37:b5:e6:af:
26:59:73:8c:2b:e4:2b:34:9a:23:18:0f:66:11:ee:
85:e1:b6:14:8e:37:a2:df:53:75:52:e1:56:1e:d5:
b4:6f:c8:6e:cf:1f:f0:6f:ad:13:44:56:e7:d0:02:
c6:c0:9f:a7:3d:f3:15:6b:61:2e:79:37:3d:ad:8c:
25:32:02:b3:36:8b:79:dc:7e:f8:0d:d1:1a:aa:fe:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F7:27:A0:2D:2C:AA:FD:0B:62:1B:24:06:7E:8E:DF:C8:FC:98:90
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:71:c7:88:53:f9:f2:bf:a8:2f:4b:17:0c:af:84:87:ac:75:
04:8a:00:f2:e9:f2:43:98:7d:8c:d1:6f:d8:ab:45:24:8a:50:
2b:10:b9:7d:27:72:69:1f:94:9c:23:03:1d:bb:68:4f:5d:ec:
d2:5a:3d:3c:73:6b:f0:9a:cf:7f:d7:2b:da:b6:77:71:f9:a8:
8a:f0:44:32:9e:42:53:6e:95:95:bc:3d:6f:10:b9:18:34:94:
2f:98:92:b7:ca:3a:01:7e:c2:3a:cc:79:66:66:19:65:40:e9:
61:8c:79:a8:f8:58:ed:62:bd:80:46:10:26:6e:aa:c5:4a:0a:
36:1a:e3:11:19:64:a2:47:67:45:c5:fa:b3:0e:73:1a:81:1f:
29:64:42:ec:32:4f:09:71:4f:6a:42:ce:81:f1:e2:05:50:07:
03:5e:a2:ba:c0:1f:0e:80:45:4f:aa:00:34:56:c7:3b:8f:d0:
9d:b5:02:8d:93:fa:2b:6b:3e:76:74:eb:2d:72:32:5a:67:ab:
ce:5e:dd:7e:9a:a8:00:dd:e8:39:6e:25:54:af:02:e2:9f:01:
0f:27:8d:d4:02:c2:ff:5a:47:62:21:85:e2:e4:f8:a5:74:7a:
e4:3f:2c:19:f8:e0:4a:b7:eb:2f:99:55:37:fd:ee:b8:d4:20:
c3:e2:27:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:51:57 2026 by rpki-client