Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: u4XheDaPdweS5An1A2kzoEaFk15vZrkzbYS8GH2JIvE=
Subject key identifier: D8:0B:3C:C3:42:0C:9D:08:6F:54:33:CF:8F:8E:22:61:EB:5F:FB:C3
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 01A14F19A7B50BF73B61DA132A006F22FFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 1A0A
Signing time: Sun 18 Oct 2026 13:00:43 +0000
Manifest this update: Sun 18 Oct 2026 13:00:43 +0000
Manifest next update: Mon 19 Oct 2026 13:00:43 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: DaazaTtMV5zT+PSpTcrmAUfC8ABnPOVfVPitQmW4Eys=)
2: QUUpppZp8zDauROlkLTIxTpgwLI.roa (hash: vNvKmsocx19OQxUrXw+Gpw/TAekcVNyvpJWdw+KQgl4=)
3: SJN4UDeqb6HWQeOP376NU5tUT20.roa (hash: ICpgkmijNdYF1JR0QFMMhNCUo8HlJ8VNUR8ILZMvpx0=)
4: WQi9aeWdurT9-hHS7mROPDZYtcE.roa (hash: SUNRs+2w8tLnWlynSNIymsCFNztOm0IbuLsyyjPTui8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:19:a7:b5:0b:f7:3b:61:da:13:2a:00:6f:22:ff:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Oct 18 13:00:43 2026 GMT
Not After : Oct 19 13:00:43 2026 GMT
Subject: CN=d80b3cc3420c9d086f5433cf8f8e2261eb5ffbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:40:72:88:57:be:86:1f:c2:ac:96:0f:90:
81:72:fd:bb:b3:00:b5:0f:12:c4:7b:23:73:b6:a5:
72:6e:82:ba:4c:8f:be:af:9e:c0:e0:3c:7f:6f:ff:
31:9d:28:3a:dd:5b:64:d3:e4:0e:17:b3:e1:cd:9a:
ed:9d:3e:a0:5b:13:05:39:04:13:42:9d:ab:ef:41:
ac:42:53:19:71:50:6c:b1:a2:b3:1d:ce:43:3f:01:
62:dc:f5:12:a4:e0:f5:de:ad:a5:d1:fd:c2:09:3e:
31:fe:32:7e:49:4a:b8:b5:96:88:a7:a9:a3:d1:66:
9e:39:1c:82:78:76:e2:3a:f1:22:a2:7e:30:0a:16:
8c:d8:cf:7c:51:da:97:ef:da:d8:18:84:23:e2:bb:
dd:65:21:4b:97:2c:87:a8:b9:bc:d8:07:77:2b:a8:
33:03:c9:c5:18:68:66:40:6e:8b:c9:c8:6f:ed:fb:
c4:0b:f3:6f:90:89:94:ea:b4:c7:f9:cd:46:e0:ce:
8a:a4:87:bb:be:e5:f6:9a:9e:35:e5:71:55:3d:76:
98:d6:bd:a9:c3:72:66:e6:92:d3:f9:bc:2f:aa:c1:
73:cf:d5:b8:3f:83:7b:3b:06:a3:31:97:99:b8:b7:
da:06:70:ec:6b:90:90:fa:dd:50:81:12:d7:7e:07:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0B:3C:C3:42:0C:9D:08:6F:54:33:CF:8F:8E:22:61:EB:5F:FB:C3
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3a:97:bb:7e:64:99:c6:49:56:fe:7b:b2:10:e9:01:64:e9:
5e:50:ff:6b:0d:53:7e:39:be:c9:b6:33:18:2f:84:68:20:e9:
eb:02:ff:91:68:9d:3d:5e:9f:ba:29:9c:33:a6:cc:c6:2c:50:
d2:52:23:1a:4c:c0:bd:7a:bf:54:f5:bc:c4:f7:df:f7:83:57:
13:4c:00:68:2c:92:59:73:3f:8e:5f:c3:01:ce:cd:19:c5:d4:
50:7a:3d:6c:c7:b8:f4:37:e5:08:3a:cb:34:57:4a:2b:f6:eb:
ab:12:82:85:2a:fb:8f:c9:3c:8d:73:90:79:8a:89:10:e4:d9:
60:fa:b2:1f:4b:3c:47:da:27:ec:10:8f:dd:3d:44:8b:a5:ac:
ce:af:30:44:c7:f7:ac:7c:24:fd:60:c2:3d:24:ae:70:5d:e1:
23:5a:99:55:cb:b5:b3:b3:53:01:06:15:ba:9c:6e:04:93:d0:
2f:34:08:48:74:4a:02:bd:f6:e3:b0:45:0b:2d:b6:a2:ab:d5:
2a:d4:5e:e2:c6:35:c7:5d:41:ee:1d:c5:c9:23:4b:47:eb:f8:
e7:3b:17:99:01:72:d7:ba:d7:a2:5e:3a:ad:d4:6f:ab:d4:27:
eb:a4:85:0e:32:6f:2e:99:e5:91:a5:5d:26:cc:a0:32:0b:ec:
6f:44:5c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFPGae1C/c7YdoTKgBvIv+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWNmNjZmMDAxOWM1NTYzMzFiZWY5ZWNkOGRmNjUyNzgy
YTYzZjgwHhcNMjYxMDE4MTMwMDQzWhcNMjYxMDE5MTMwMDQzWjAzMTEwLwYDVQQD
EyhkODBiM2NjMzQyMGM5ZDA4NmY1NDMzY2Y4ZjhlMjI2MWViNWZmYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzhAcohXvoYfwqyWD5CBcv27swC1
DxLEeyNztqVyboK6TI++r57A4Dx/b/8xnSg63Vtk0+QOF7PhzZrtnT6gWxMFOQQT
Qp2r70GsQlMZcVBssaKzHc5DPwFi3PUSpOD13q2l0f3CCT4x/jJ+SUq4tZaIp6mj
0WaeORyCeHbiOvEion4wChaM2M98UdqX79rYGIQj4rvdZSFLlyyHqLm82Ad3K6gz
A8nFGGhmQG6Lychv7fvEC/NvkImU6rTH+c1G4M6KpIe7vuX2mp415XFVPXaY1r2p
w3Jm5pLT+bwvqsFzz9W4P4N7OwajMZeZuLfaBnDsa5CQ+t1QgRLXfgfI/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgLPMNCDJ0Ib1Qzz4+OImHrX/vDMB8GA1UdIwQY
MBaAFCKs9m8AGcVWMxvvns2N9lJ4KmP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTct
MTY4ZjIxNTA4Yzc0LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTctMTY4ZjIxNTA4Yzc0
LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDqXu35k
mcZJVv57shDpAWTpXlD/aw1Tfjm+ybYzGC+EaCDp6wL/kWidPV6fuimcM6bMxixQ
0lIjGkzAvXq/VPW8xPff94NXE0wAaCySWXM/jl/DAc7NGcXUUHo9bMe49DflCDrL
NFdKK/brqxKChSr7j8k8jXOQeYqJEOTZYPqyH0s8R9on7BCP3T1Ei6Wszq8wRMf3
rHwk/WDCPSSucF3hI1qZVcu1s7NTAQYVupxuBJPQLzQISHRKAr3247BFCy22oqvV
KtRe4sY1x11B7h3FySNLR+v45zsXmQFy17rXol46rdRvq9Qn66SFDjJvLpnlkaVd
JsygMgvsb0Rcug==
-----END CERTIFICATE-----
Generated at Sun Oct 18 17:47:59 2026 by rpki-client