Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier: Aecp/YWWq7s1a+ldvW0q95ukqwaGA8uLppELVXwrq+w=
Subject key identifier: C8:83:8A:35:B6:5F:64:D6:61:3B:84:68:77:D4:CC:05:9E:AC:DF:D0
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 019D37F7101D4CD4BBFE0E4FDBC540DF8084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number: 10F7
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: 7JTMQURN2_pHQGeTlN5cBKnAiak.roa (hash: ArfyrR2wyEV/9BCepj0BUymEyLecGYVpjZ/467WPvZ0=)
2: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: 2GwDRjlMwzKGEhBkciX58R8GUDmlLZ29dOHLan+DFa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:10:1d:4c:d4:bb:fe:0e:4f:db:c5:40:df:80:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=c8838a35b65f64d6613b846877d4cc059eacdfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:26:18:71:af:c9:45:7f:6f:e4:16:04:94:
78:77:5e:59:19:64:09:dd:e5:2a:c2:29:e7:90:20:
aa:85:d4:3e:31:c2:54:4c:af:57:dd:42:d8:da:49:
cc:3d:d8:b2:7b:3f:11:37:a5:83:2a:b1:96:01:0d:
32:37:43:b4:5e:39:1a:b8:5b:e7:fc:8c:d6:d8:8c:
1b:d6:14:87:14:fc:b4:4f:f6:3f:6e:f1:38:97:93:
42:61:99:61:cb:e6:e4:90:5a:60:22:9a:0e:74:06:
67:08:7f:98:be:e3:7c:15:37:f7:af:ce:69:7e:60:
55:9a:0b:96:82:45:fd:37:06:82:a0:8a:2d:9f:d9:
f3:ea:47:7c:cc:49:1b:e3:08:dc:c0:0f:cf:8b:14:
96:d2:09:c6:d9:99:54:09:c6:a3:ce:59:ec:85:b8:
07:5b:06:65:7e:84:1d:ba:5e:55:03:56:7d:b9:23:
58:77:ea:23:cd:0f:d1:c5:ed:9e:f9:58:41:80:f2:
3d:b1:b9:55:43:b3:c6:4d:47:36:be:92:b8:7b:9b:
24:ee:cd:cb:dc:4a:10:f0:3b:af:1c:45:eb:06:3c:
0a:c6:21:56:95:b5:e9:3a:cb:e7:11:62:0f:80:b3:
0f:9b:93:d0:bb:51:c1:48:5b:86:99:7e:b9:5c:7c:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:83:8A:35:B6:5F:64:D6:61:3B:84:68:77:D4:CC:05:9E:AC:DF:D0
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ba:95:72:c2:68:78:52:38:af:4c:44:45:7e:e0:ce:94:d8:
ab:95:c3:45:b1:0b:de:e2:68:c3:9a:25:5a:34:b8:bd:c0:ef:
37:bc:d8:5f:43:d8:81:94:33:23:74:1b:da:0d:31:a2:ee:55:
7d:0e:76:9b:0a:f7:42:3f:73:98:ab:67:2f:a9:7c:1c:c0:ef:
8c:9d:ed:85:63:a9:96:bc:14:c0:ac:69:90:b0:06:7e:09:a8:
98:af:04:e0:92:5c:ae:b7:65:32:ac:2a:c5:d5:b4:1c:cc:0e:
c2:c5:42:43:14:fd:9b:ea:a3:97:3f:6c:a1:29:f3:13:cf:92:
d3:c6:41:e4:91:be:51:c5:1d:fe:58:9a:d2:fd:ca:c4:dc:3c:
fb:e0:36:1e:24:fb:53:ba:6a:31:5d:62:78:c6:92:6e:95:38:
a3:9a:64:76:9b:80:7f:d2:03:d6:4b:94:d8:08:ee:8e:e2:4a:
24:7f:2a:ab:78:ba:11:05:31:9b:3b:cb:ee:ca:7e:0f:21:42:
16:a6:db:42:e5:73:f5:61:be:87:77:b8:ee:ed:1f:5f:19:49:
16:c1:08:d1:17:6e:64:e0:4e:e7:e2:8a:37:a4:5f:b3:5b:04:
23:58:51:38:c2:dd:fa:67:1e:86:38:74:b5:ce:45:56:77:e8:
c7:87:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:35 2026 by rpki-client