Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: yiSMGGiVYuKaSALuwXFy2Sk3yqKolaKQhK25Zin5KMo=
Subject key identifier: B5:72:0D:F7:6E:A4:73:5B:83:87:FF:C5:11:F5:9A:F5:70:83:BA:C0
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 019D378942F107506AEC64BB3F27C4A73511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0F2E
Signing time: Sun 29 Mar 2026 03:00:35 +0000
Manifest this update: Sun 29 Mar 2026 03:00:35 +0000
Manifest next update: Mon 30 Mar 2026 03:00:35 +0000
Files and hashes: 1: 1-tufXICD9zpH9q97ukUAVzwwHjE.roa (hash: +wtE5yDBNjZJrgkiWy0XjsbVbjlePoHSNbtSgcMLmc8=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: pPUXxeH4slSq+25r0QzJRriRTiKsqUVriHoAgaQwPwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:42:f1:07:50:6a:ec:64:bb:3f:27:c4:a7:35:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Mar 29 03:00:35 2026 GMT
Not After : Mar 30 03:00:35 2026 GMT
Subject: CN=b5720df76ea4735b8387ffc511f59af57083bac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:11:32:36:6a:4f:9a:23:37:19:57:7e:16:
a0:64:0a:92:3d:b4:c9:79:46:ad:44:4e:07:ee:f9:
cc:ea:84:40:e3:2c:9f:27:be:73:25:c6:71:ff:74:
8d:5b:1c:ee:1d:7e:4b:3d:80:6c:b5:3f:18:7d:29:
ce:48:cf:6b:d7:30:bd:50:4a:f1:14:40:f1:02:1a:
84:b5:d0:7a:ff:cf:c1:26:17:59:5f:03:dc:4e:b3:
d9:7d:bd:f4:34:d5:e3:97:d5:f4:91:15:fd:7e:6e:
f7:90:ca:bb:e8:ab:56:5e:88:d9:40:b0:02:1c:a4:
be:fd:5b:c4:0f:f8:c4:8b:af:ce:cf:81:d7:d3:d6:
a0:f6:c7:fa:61:b2:e4:c0:92:1d:c2:a1:12:92:4f:
f3:77:c2:06:32:48:a7:46:da:4c:d1:2f:5c:06:4b:
4b:8e:59:4a:ba:b6:21:bf:5f:e5:05:d2:d3:75:f0:
0d:84:6c:d8:85:cc:1b:ee:c8:7f:f9:84:38:c1:e6:
da:bb:82:b9:6a:7b:fe:c2:99:30:c9:7b:e7:77:56:
90:c9:98:ef:39:cb:4c:5a:3f:8a:5c:30:8c:ed:2a:
c9:23:11:09:35:f2:74:0e:cd:ea:e7:ec:94:e1:f7:
61:af:7f:63:37:5f:a7:7a:41:bd:0f:17:e4:fb:0b:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:72:0D:F7:6E:A4:73:5B:83:87:FF:C5:11:F5:9A:F5:70:83:BA:C0
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8a:cc:46:ec:7b:2f:18:1b:66:c2:c6:d1:b6:76:07:09:eb:
23:96:88:55:84:f4:e8:ff:92:32:db:68:33:67:5d:b7:6c:ea:
ce:ec:df:84:0b:6d:69:4f:fd:34:73:2c:00:f0:b8:9a:ef:84:
d0:51:33:89:45:72:55:6f:88:d8:99:f0:1b:40:d7:cd:43:c8:
87:ab:f6:e1:14:57:22:a6:38:d2:be:4c:e5:1e:02:62:7f:f7:
93:31:9d:e9:e0:9a:c9:39:10:1a:a3:28:c6:a2:7f:09:8f:2d:
a7:d5:05:2c:76:88:9c:5d:a4:8c:92:a2:5b:24:24:19:c1:88:
31:8d:c4:dc:06:23:4e:20:63:d0:8f:cf:20:d4:97:30:2d:ad:
27:aa:c1:71:f8:d5:f4:66:70:c4:d3:5b:b6:46:76:6a:ae:b9:
17:ef:cb:11:78:4b:ff:46:89:13:b5:d0:96:ba:04:63:72:90:
8f:8e:8d:b7:5e:d5:5f:f3:c4:bb:85:37:b2:33:d2:ef:77:bf:
9a:80:11:67:d1:96:bc:2e:fa:78:6d:57:d9:cd:ca:08:ca:7c:
3f:74:4e:52:86:c8:55:43:2f:dd:b3:25:47:f6:dd:1a:4b:7e:
a2:f3:44:a6:83:a1:23:63:f8:3b:df:97:b8:96:6c:0d:9c:93:
41:ee:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:55 2026 by rpki-client