Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: ywSPz19qEv6GTX/t9YBLNxyA4FyXOKtf4OejFy8VNOE=
Subject key identifier: D6:62:54:67:2A:13:A1:F7:A9:6D:55:D4:6A:70:DE:C5:BE:D5:C1:E3
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 01A158540BCB405DC861563560605DA41B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1ABA
Signing time: Tue 20 Oct 2026 08:01:05 +0000
Manifest this update: Tue 20 Oct 2026 08:01:05 +0000
Manifest next update: Wed 21 Oct 2026 08:01:05 +0000
Files and hashes: 1: 1-lozbj90cEVrWfLXpW3TMtR_PG4.roa (hash: yo16aFrNe1K/8qY2QGw1QDgUIGMnW024P9x1aOJw2jM=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: 0iYb+aPx++rwrLFYs81pc5ZLj22DP8BPkGbabOluiPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:54:0b:cb:40:5d:c8:61:56:35:60:60:5d:a4:1b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Oct 20 08:01:05 2026 GMT
Not After : Oct 21 08:01:05 2026 GMT
Subject: CN=d66254672a13a1f7a96d55d46a70dec5bed5c1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:f0:dd:a2:bc:72:24:d2:a9:3c:6f:3b:d3:
a6:ca:57:e0:23:a2:98:dd:cf:aa:25:23:38:cd:19:
13:dc:ef:1f:df:a8:87:4d:64:ca:63:01:7c:7c:ff:
8e:a7:6f:42:c5:af:4a:73:a4:83:ec:71:b3:14:2d:
f4:e7:1f:d4:96:f7:99:fa:7c:44:55:11:16:8c:55:
8e:d9:28:a9:d5:88:1f:fd:6c:65:37:df:82:06:7b:
67:32:63:f8:2a:ff:ef:bc:e6:5a:14:da:ba:86:12:
ce:59:d6:2e:e9:4e:93:62:ec:06:46:a0:17:7e:8b:
6a:7f:60:89:17:62:c2:43:81:55:fa:ae:d2:ac:de:
c6:96:36:52:d6:e0:77:ae:63:44:55:72:34:5e:12:
3d:81:60:a8:5c:ca:f7:85:54:15:3b:30:43:1c:dc:
c1:62:28:2b:a5:8b:19:c4:6c:f7:2d:ae:8c:f1:48:
0f:92:66:fa:fc:dc:e4:bd:8a:7d:13:9e:9d:e8:77:
0a:24:82:1a:d3:20:99:a8:13:1d:6d:07:58:9b:c6:
cc:35:94:84:2a:5d:2d:53:48:4a:58:f5:cd:8a:a1:
35:7d:dc:9c:02:dc:ac:8f:c6:44:09:25:f1:44:c0:
e6:21:ef:6e:f2:aa:5e:59:fa:46:b5:91:2d:4a:b4:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:62:54:67:2A:13:A1:F7:A9:6D:55:D4:6A:70:DE:C5:BE:D5:C1:E3
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:09:7b:4b:d6:54:f6:41:b8:c5:f5:b4:f3:d0:bf:4d:38:
51:6d:3b:fa:0b:e5:23:77:32:16:26:c8:0d:4b:2d:11:5a:eb:
9d:23:71:44:aa:3d:d5:7d:dc:8f:b6:78:f9:47:24:7f:cf:84:
6f:1b:c9:e3:25:b3:ef:71:c0:18:0a:0f:43:33:a3:13:4a:a9:
1e:d7:b7:74:b8:50:8d:8a:5f:b3:21:c3:27:a8:78:e7:87:e0:
7a:89:94:9b:03:b5:29:2d:7b:ff:bc:31:ec:14:dc:6f:d2:29:
50:ef:62:0d:75:be:98:21:00:f1:d1:94:ab:69:8a:6b:2d:a9:
9e:de:0e:9b:0d:eb:33:24:13:67:c7:8d:9c:65:17:be:d5:d9:
2d:2c:11:c1:77:3e:4d:ef:37:eb:02:a4:e7:5e:fa:c0:b4:7b:
0d:05:2b:b6:c3:99:26:91:a3:b8:4c:2d:9c:bc:77:1e:11:a0:
49:21:fa:d9:09:74:ed:de:57:d6:cd:16:4a:9f:82:87:bd:31:
3f:16:f5:ff:e7:0a:4c:6d:ea:6f:4a:bb:89:69:09:f9:c3:7d:
a7:13:84:23:b1:6d:65:19:99:c8:ee:ba:01:ba:24:bf:5c:c8:
27:0e:05:11:55:18:78:12:e2:b1:97:a0:03:17:55:b7:42:05:
e1:a5:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:21:23 2026 by rpki-client