Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: rmCFbuMLVKebTOr4KyGvH171Kwn2wNpberBXrLWUPZw=
Subject key identifier: 2E:77:28:44:85:2D:C2:94:59:E1:84:F8:FC:85:9F:AE:6A:47:77:4E
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 01A17F61DDD915DD83FEFBC172C2D157365C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0ED4
Signing time: Tue 27 Oct 2026 22:01:22 +0000
Manifest this update: Tue 27 Oct 2026 22:01:22 +0000
Manifest next update: Wed 28 Oct 2026 22:01:22 +0000
Files and hashes: 1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: gYqATrKnt4FBfJNaQuuKQE3S3tlcP6bfBWnIkEQwBs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:dd:d9:15:dd:83:fe:fb:c1:72:c2:d1:57:36:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Oct 27 22:01:22 2026 GMT
Not After : Oct 28 22:01:22 2026 GMT
Subject: CN=2e772844852dc29459e184f8fc859fae6a47774e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:fc:4f:d3:3a:7e:33:73:78:df:ff:e3:eb:
12:2e:04:7a:15:b0:8e:92:fc:b9:f9:08:eb:85:0f:
88:4d:c4:c7:ad:81:ad:a8:97:d9:80:84:39:db:1a:
61:90:72:5f:23:f3:ee:52:68:8f:81:a1:a2:09:ed:
ed:cc:c2:a2:ae:f6:54:d4:87:45:ed:18:5c:38:03:
44:ce:2e:ea:c6:03:75:2e:61:c3:57:6b:3a:db:5b:
1a:1d:60:9e:c8:39:c5:83:41:c8:76:0a:9e:42:0d:
12:10:34:be:3f:ca:23:c0:96:26:36:ad:64:0d:84:
95:58:3c:42:48:90:19:0a:16:c2:d5:2c:a1:99:48:
c4:f2:b4:e1:a7:bd:45:37:c3:52:65:a3:8e:a8:d8:
7d:9a:36:82:ce:17:9b:a6:8c:3d:98:b4:06:dd:4f:
fe:98:87:85:78:2a:94:e9:e4:3d:0d:51:e3:91:a6:
80:c2:20:93:53:24:99:62:91:7a:02:b0:c9:f5:58:
44:7a:c5:8a:a2:8c:ff:df:a5:58:37:68:5c:e9:83:
e8:c9:62:ea:da:6c:64:6d:da:5d:02:df:5a:01:98:
ce:e6:f0:70:8d:1a:16:4d:e5:3f:4e:58:f9:3f:8c:
60:00:c8:ee:fb:2b:f8:1d:b0:b7:3c:bd:d3:0d:26:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:28:44:85:2D:C2:94:59:E1:84:F8:FC:85:9F:AE:6A:47:77:4E
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a3:f5:2b:13:e0:8f:9c:f4:a4:6d:21:fa:51:74:de:6c:a5:
75:56:f3:1a:49:5b:19:26:83:c3:57:80:9d:cc:dc:7a:1c:fd:
1c:39:ff:46:a4:23:e9:50:9c:de:60:4f:22:84:0f:dd:42:9c:
20:f9:22:d0:b7:91:98:ff:96:89:29:7d:56:9e:91:4b:91:3d:
37:a9:7f:bf:6b:c0:04:ff:4a:cb:16:7b:ea:9f:7d:0a:74:f5:
22:28:4f:26:82:56:95:7e:4f:92:a0:7d:d6:d4:9b:a6:6d:c0:
1d:87:96:35:00:bf:91:0c:ef:94:29:06:3d:79:e1:93:20:6a:
19:a7:1b:58:6f:3a:83:6c:5b:32:ca:ae:2f:f2:a0:98:e0:67:
b0:5c:f3:7f:c1:9c:07:46:05:27:a2:77:80:93:b2:a7:78:dc:
4d:64:52:15:e2:48:75:76:e5:37:66:f4:56:75:34:5b:3c:24:
a9:7e:c9:da:7e:04:2b:12:fc:db:09:d3:98:6a:ce:c4:4e:d5:
38:bd:40:57:e9:bf:bf:8e:6a:cf:46:b6:c6:0d:27:b7:a4:53:
ad:d2:ae:fe:16:8a:39:3b:16:43:b9:55:1d:be:69:b0:70:85:
2a:b7:19:41:8f:04:6f:2a:a5:12:07:f0:3e:f6:66:32:38:e1:
1c:86:9e:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/Yd3ZFd2D/vvBcsLRVzZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjQyZTBhN2I2MGNmZGViOGUwZTAzZmY5YWVjMzNlNWFi
N2QyYzgwHhcNMjYxMDI3MjIwMTIyWhcNMjYxMDI4MjIwMTIyWjAzMTEwLwYDVQQD
EygyZTc3Mjg0NDg1MmRjMjk0NTllMTg0ZjhmYzg1OWZhZTZhNDc3NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSH8T9M6fjNzeN//4+sSLgR6FbCO
kvy5+QjrhQ+ITcTHrYGtqJfZgIQ52xphkHJfI/PuUmiPgaGiCe3tzMKirvZU1IdF
7RhcOANEzi7qxgN1LmHDV2s621saHWCeyDnFg0HIdgqeQg0SEDS+P8ojwJYmNq1k
DYSVWDxCSJAZChbC1SyhmUjE8rThp71FN8NSZaOOqNh9mjaCzhebpow9mLQG3U/+
mIeFeCqU6eQ9DVHjkaaAwiCTUySZYpF6ArDJ9VhEesWKooz/36VYN2hc6YPoyWLq
2mxkbdpdAt9aAZjO5vBwjRoWTeU/Tlj5P4xgAMju+yv4HbC3PL3TDSYTSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC53KESFLcKUWeGE+PyFn65qR3dOMB8GA1UdIwQY
MBaAFIokLgp7YM/euODgP/muwz5at9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUt
OGE4ZDRjNjkxOGI0LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUtOGE4ZDRjNjkxOGI0
LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKP1KxPg
j5z0pG0h+lF03myldVbzGklbGSaDw1eAnczcehz9HDn/RqQj6VCc3mBPIoQP3UKc
IPki0LeRmP+WiSl9Vp6RS5E9N6l/v2vABP9KyxZ76p99CnT1IihPJoJWlX5PkqB9
1tSbpm3AHYeWNQC/kQzvlCkGPXnhkyBqGacbWG86g2xbMsquL/KgmOBnsFzzf8Gc
B0YFJ6J3gJOyp3jcTWRSFeJIdXblN2b0VnU0WzwkqX7J2n4EKxL82wnTmGrOxE7V
OL1AV+m/v45qz0a2xg0nt6RTrdKu/haKOTsWQ7lVHb5psHCFKrcZQY8EbyqlEgfw
PvZmMjjhHIaeLQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:19:35 2026 by rpki-client