Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: 6Z4qOmq3aWNaMSH7vNwUQL+cAKkdHuVI7HCoeXDCQxw=
Subject key identifier: 21:FB:17:92:5C:EE:8C:40:74:77:30:01:B0:F8:9A:3D:A5:D3:23:A9
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019CECA6A36B8C3D2EC9752279BEE5BE5D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 1872
Signing time: Sat 14 Mar 2026 14:01:09 +0000
Manifest this update: Sat 14 Mar 2026 14:01:09 +0000
Manifest next update: Sun 15 Mar 2026 14:01:09 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: jobMb9K9Nutc4uEgWxtHLZAo3m7srjJ6K5YjJbffwvg=)
2: DGuA7DOyGXAn98oCAGhbl48323g.roa (hash: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk=)
3: cNdUG1i54zJ-DiyzAbYp5hI1_Yw.roa (hash: Zs9p0r7/OlghiUl1YzqqCjoM6IGWezmYkoL5qYs5XiU=)
4: fmcwhaidzArdA6kvh0y-Aej9y88.roa (hash: bKNi3L38o7bRnB56dZw/HCV46FJZnj7F35iWZ5QhbjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:a6:a3:6b:8c:3d:2e:c9:75:22:79:be:e5:be:5d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Mar 14 14:01:09 2026 GMT
Not After : Mar 15 14:01:09 2026 GMT
Subject: CN=21fb17925cee8c4074773001b0f89a3da5d323a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:0c:56:7f:88:15:81:83:42:b6:a6:37:be:
d2:df:bc:bc:77:b8:db:2e:49:3d:4e:a9:d5:29:1f:
5f:85:10:16:e8:1a:55:0c:b6:81:7f:4c:03:b9:9d:
6b:1b:fb:ec:51:5e:16:86:e7:ba:e5:e1:5a:86:07:
7b:e3:29:ba:20:a5:8b:5e:8c:c6:33:d5:33:1e:8a:
7d:38:cd:e5:76:9d:e7:07:29:ba:9e:08:79:bd:f6:
da:12:31:15:f9:b8:cf:1b:92:85:47:15:38:af:3f:
44:d7:fb:45:3a:f5:1b:fb:b4:ac:f1:a9:dc:d8:b0:
06:60:f1:e4:3b:f0:06:7d:41:21:83:76:93:67:f9:
df:3a:66:db:1a:c4:4a:b1:3d:c1:2d:c7:96:74:05:
62:37:cf:a7:64:1a:90:24:0c:51:9b:66:4d:74:4c:
69:23:1a:a9:ad:69:22:e7:54:d9:eb:f4:9b:15:92:
89:00:a4:8e:ee:f8:99:09:bb:ce:2f:35:32:b6:3d:
54:3c:90:26:eb:00:e6:50:bc:27:2e:a9:92:27:c8:
bc:6a:d2:61:7c:d7:f1:b6:20:2d:b2:2d:5e:7d:df:
88:2f:ae:33:6a:dc:f4:85:7d:11:b6:3e:4e:0c:f8:
eb:56:35:9a:72:5b:a7:83:c5:06:6f:cb:24:2c:94:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FB:17:92:5C:EE:8C:40:74:77:30:01:B0:F8:9A:3D:A5:D3:23:A9
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4c:17:ff:8a:e0:3c:ce:d9:e2:6f:bd:1d:2f:d1:51:55:70:
6a:9f:8f:3a:30:c1:27:f5:9f:60:e6:fc:4b:be:81:22:96:fc:
98:70:ed:83:ed:b5:f6:e9:b6:11:d2:55:ed:22:05:61:65:da:
f0:f2:4d:a6:d4:e8:11:63:92:64:7d:47:07:7f:e1:c2:84:a8:
e7:8b:82:2a:d4:a4:0e:a9:1c:71:60:e5:19:4b:58:f5:51:4d:
8b:3a:d8:50:4c:7e:f0:b2:cf:e3:1d:04:8b:d5:ae:a0:34:0b:
3e:af:31:74:34:d7:9e:d9:0c:26:ef:00:fc:3e:89:6e:43:19:
22:b3:45:63:fd:57:21:85:be:30:1a:6f:79:a6:57:6c:28:fd:
5e:e3:84:4f:03:ab:04:41:b8:e2:2f:8b:7d:e3:1b:83:ec:77:
0d:57:a0:c8:ad:97:6f:8f:da:9f:bc:ee:18:b9:d7:05:7c:30:
74:e1:17:c6:09:01:c0:55:09:5d:86:08:16:58:4b:78:a6:12:
35:f9:6e:70:f6:d1:33:16:7a:bf:5a:39:73:40:58:9e:2c:b2:
e2:cb:b5:b3:2e:ce:1b:d7:37:bb:0e:28:01:eb:7c:20:ed:76:
1c:6c:f1:48:29:b0:0a:38:f5:f2:34:17:b7:bb:a9:a3:6f:99:
a1:7d:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:38:40 2026 by rpki-client