Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: IFhibPiU1x2ZEk49XDTwxfz5K3gidGFxorZqPgDhbwQ=
Subject key identifier: 49:C9:C5:B5:A2:5F:EC:92:2E:01:FA:1E:E2:6F:AA:AE:34:E2:76:ED
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 019D38D2C380367699E642E9B83731CA5EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 17EC
Signing time: Sun 29 Mar 2026 09:00:29 +0000
Manifest this update: Sun 29 Mar 2026 09:00:29 +0000
Manifest next update: Mon 30 Mar 2026 09:00:29 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: S8uayx8mkdAfzCm4kWRuncIQCvgZwBxLlgfqFWeXHHA=)
2: QUUpppZp8zDauROlkLTIxTpgwLI.roa (hash: vNvKmsocx19OQxUrXw+Gpw/TAekcVNyvpJWdw+KQgl4=)
3: WQi9aeWdurT9-hHS7mROPDZYtcE.roa (hash: SUNRs+2w8tLnWlynSNIymsCFNztOm0IbuLsyyjPTui8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c3:80:36:76:99:e6:42:e9:b8:37:31:ca:5e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Mar 29 09:00:29 2026 GMT
Not After : Mar 30 09:00:29 2026 GMT
Subject: CN=49c9c5b5a25fec922e01fa1ee26faaae34e276ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:05:37:40:8b:89:3d:83:2c:53:ca:05:cc:
21:1d:43:be:7a:51:c8:e7:0a:81:09:20:32:47:b1:
c2:5b:6b:61:07:79:76:47:da:73:c3:75:82:f6:99:
6f:31:8c:2c:3d:62:a2:a0:75:7d:06:b8:ce:26:a2:
01:f2:e8:27:19:a7:0c:26:f9:c0:e4:55:0f:80:cb:
79:71:e1:b0:84:d1:f2:7a:6d:1f:f0:24:c4:a0:f2:
9f:c8:8d:cf:8e:16:0b:f1:66:cb:0c:d5:cc:2f:c2:
ff:36:7a:ff:c8:87:8e:89:02:a2:e6:d2:f5:22:82:
65:09:18:88:c7:90:a2:5d:b3:a5:57:36:5c:f9:51:
98:c1:89:fc:5a:c4:b3:df:15:54:ea:fa:5e:b8:16:
9d:bf:cb:d8:3a:d2:79:98:03:58:4f:bf:f7:ea:79:
e7:a6:ef:ad:d0:f8:1d:62:1e:23:d3:75:a1:c3:7f:
c0:9e:ca:51:f5:81:96:aa:82:7d:b3:69:6c:1a:21:
97:8e:54:a2:ed:2d:8d:28:16:32:76:43:3f:5b:02:
e8:7a:1b:9d:ef:5f:b9:57:39:6e:6e:c9:bf:3b:ef:
27:9c:70:37:24:30:0f:c6:43:7d:e7:09:4a:c8:8a:
c4:1a:c1:42:f6:88:ec:74:95:3a:b3:8a:7d:6c:85:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:C5:B5:A2:5F:EC:92:2E:01:FA:1E:E2:6F:AA:AE:34:E2:76:ED
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dc:21:40:aa:27:30:e0:ea:1e:74:ed:f6:bf:6e:d4:5b:65:
ff:90:93:e1:89:06:14:0f:cf:11:7a:5b:8d:f5:f6:2a:42:47:
70:f2:28:bd:0c:9c:00:4e:d6:da:f6:18:f1:c0:bc:4c:57:b1:
de:cc:99:d4:69:8e:b4:f1:c5:77:67:27:ee:4c:25:e7:87:d4:
db:96:20:2e:72:d4:ba:75:ae:a4:b3:e6:74:78:2a:c5:2b:f3:
d0:4b:8a:13:07:da:4a:f2:fd:6c:47:25:cc:23:fb:56:7d:5d:
67:0f:ef:a2:00:81:5c:4c:21:7c:35:6d:56:0f:9b:b6:f6:00:
6f:2c:48:a4:e7:03:50:dd:53:f7:5e:9d:9c:c1:10:a6:7c:3a:
9c:29:9b:21:f4:79:52:5a:25:a4:9a:f0:68:06:8d:c4:7c:4f:
80:dc:42:66:5b:86:29:6a:33:25:f1:9a:b0:a7:98:06:64:24:
65:5b:88:82:a4:62:b4:b2:eb:6d:b6:8e:89:9c:65:d4:ea:49:
a5:45:63:f9:1c:a8:f0:45:84:a8:c4:15:49:de:88:20:ee:e5:
5c:70:65:18:f1:74:cd:25:04:35:5c:50:b1:6c:3d:56:34:a5:
ac:9b:e9:b9:88:0f:88:89:06:83:a8:3d:2a:c5:51:5f:79:5b:
e3:e6:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:02 2026 by rpki-client