Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: BghzchHdTpbmXRDSYZdEHEoJryyNk+PsjbrXNOi7qDA=
Subject key identifier: 5C:1E:F9:BA:C7:C9:A3:3C:91:F0:22:FD:F3:28:26:54:B5:01:1E:07
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 01A05968FFC5287D98A5205DCB79198BDA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1A36
Signing time: Mon 31 Aug 2026 20:00:48 +0000
Manifest this update: Mon 31 Aug 2026 20:00:48 +0000
Manifest next update: Tue 01 Sep 2026 20:00:48 +0000
Files and hashes: 1: 1-lozbj90cEVrWfLXpW3TMtR_PG4.roa (hash: yo16aFrNe1K/8qY2QGw1QDgUIGMnW024P9x1aOJw2jM=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: ZEYyIiSYeJDDXeML5CiDqpDTPEA/3vQRZSIMTvTwNNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:68:ff:c5:28:7d:98:a5:20:5d:cb:79:19:8b:da:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Aug 31 20:00:48 2026 GMT
Not After : Sep 1 20:00:48 2026 GMT
Subject: CN=5c1ef9bac7c9a33c91f022fdf3282654b5011e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:4d:0a:41:54:68:ed:cd:c8:72:3c:f4:b4:
34:45:d4:98:f2:74:61:38:0c:50:92:82:93:bd:7e:
e0:3f:dd:97:37:c7:76:c8:3b:23:89:58:5c:b6:cc:
e1:c3:a4:3a:ef:c7:02:c1:3a:37:4e:43:2e:ad:28:
3c:e8:5a:66:82:f9:d1:7b:59:65:ba:b4:38:c0:46:
53:6c:97:6b:34:97:2c:f3:da:8c:8d:36:db:0d:27:
95:6e:23:ce:62:e4:07:f2:8c:b2:2e:a7:e0:7b:e6:
6f:fe:a8:c9:f2:6d:a6:cc:94:35:03:fd:4e:05:28:
0e:c2:8f:16:3f:05:f1:97:c8:3c:e5:d9:3c:ca:f0:
b3:78:a5:54:cd:57:3c:c0:9d:a8:af:c3:7e:2a:ed:
40:56:bb:ea:d7:20:bf:ec:ec:76:62:4c:9c:e6:dd:
e0:3f:63:34:93:3a:bd:1c:90:32:a4:c4:31:4b:2b:
09:f5:89:a9:bc:2b:51:f7:41:81:17:c9:3f:06:f7:
67:f7:a9:b3:cf:4f:ef:0f:77:97:ae:ab:c7:f5:17:
05:60:d1:22:40:6a:70:b9:f9:19:c1:a2:dd:c5:b5:
49:d2:3c:0d:1b:14:57:82:8d:9f:a1:94:a8:6c:3a:
d4:03:a2:51:e9:7d:49:97:3e:6c:3b:f2:a3:14:3b:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1E:F9:BA:C7:C9:A3:3C:91:F0:22:FD:F3:28:26:54:B5:01:1E:07
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:af:5b:cb:28:3a:dd:9f:a5:2c:f8:a2:89:d1:36:f2:c8:dd:
02:b7:d4:d1:61:3b:df:2d:b1:8b:7a:c5:7b:82:28:e3:40:61:
01:1a:aa:d1:92:46:d5:0b:e3:06:1c:05:44:f6:28:e0:5d:e5:
1a:f3:12:63:1b:c7:81:49:89:5b:e8:fe:95:d5:c7:8b:7a:5e:
fd:2e:a1:2c:47:fb:40:f2:51:3a:09:88:98:03:38:9c:54:0c:
44:95:cf:a9:ca:c7:eb:41:c6:6a:07:c9:dd:e7:b4:14:47:cc:
fa:5c:ce:f7:9f:2a:2e:89:40:85:55:ba:4f:f4:ab:9d:54:4c:
e7:fd:98:68:a2:f7:48:d1:e9:a9:e8:42:3a:4c:f9:0d:1d:07:
3c:16:0f:7a:b7:c4:1f:60:3f:d4:f1:99:13:e3:6b:ad:1a:e5:
d7:9f:f1:67:cd:90:89:74:b1:03:7e:bb:6e:19:83:9b:86:53:
3c:65:20:7e:50:05:48:ad:2d:b6:c9:62:fa:da:8f:6e:e0:96:
2a:98:df:52:77:50:ee:92:78:56:2e:e6:03:3e:4b:d6:7d:a7:
ca:97:00:d0:c2:15:25:01:8b:73:0b:34:1d:78:7a:23:c7:bb:
10:1b:4d:64:a8:a3:37:b2:40:df:af:d0:87:89:4b:f0:db:aa:
f2:70:7d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:22:17 2026 by rpki-client