Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: +3DpVSdrmFU6wXnSuVnoq0w+w63T6rprx2vUqp8V7bE=
Subject key identifier: E0:B4:72:EF:9E:69:11:3F:60:61:5A:34:7B:3F:5B:2F:DF:24:69:33
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019CF617F996483668A4130762CE3FFE19E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 0543
Signing time: Mon 16 Mar 2026 10:01:32 +0000
Manifest this update: Mon 16 Mar 2026 10:01:32 +0000
Manifest next update: Tue 17 Mar 2026 10:01:32 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: UNqgPxsMx1lBh3NCp+SmpMa5O3IIYr/zHuI6OMY17bc=)
3: T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa (hash: Iv53mpeLIF4jhLKuNnWEt8LtAUDhecBCNu6Oav+UHYA=)
4: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:17:f9:96:48:36:68:a4:13:07:62:ce:3f:fe:19:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Mar 16 10:01:32 2026 GMT
Not After : Mar 17 10:01:32 2026 GMT
Subject: CN=e0b472ef9e69113f60615a347b3f5b2fdf246933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:cd:10:4b:c1:93:76:d4:17:79:ea:0d:8d:
49:15:ca:7a:04:6a:cf:3d:38:ed:ac:14:5a:34:da:
7d:e7:ec:36:e8:ec:e6:20:77:92:91:9c:27:16:b4:
53:e5:5b:8c:f4:28:be:7f:3b:10:c0:b5:c0:39:a9:
c0:db:50:f9:f6:8f:23:39:3f:2d:ef:eb:f0:5f:65:
81:68:00:ee:18:c1:9b:9c:9c:c9:fd:93:6e:9d:8f:
c9:74:df:c7:da:be:9b:3e:b6:b3:33:00:66:93:86:
42:b1:50:ff:19:e5:7b:f4:29:73:38:82:c2:b9:b6:
1e:6d:bf:56:f4:0c:18:d1:11:6a:42:bf:9f:de:69:
81:d1:4e:69:f3:e6:56:45:14:bb:54:4c:80:30:b9:
a2:3b:1a:a0:48:28:e4:aa:94:6f:76:09:82:08:37:
44:9f:5c:f8:17:0d:49:f8:e4:e5:f0:19:b6:3e:da:
cb:8a:36:1b:94:4e:50:01:1e:2e:8b:9c:ce:67:4a:
f1:1b:c2:f5:52:c1:d0:e5:e4:05:97:d9:dd:ef:75:
b8:e0:21:e2:d1:3a:99:7c:69:91:0e:08:58:31:08:
cc:98:8d:41:6a:67:03:97:6c:b7:6c:4e:9e:cc:fc:
0f:f1:5f:51:52:ef:52:2c:d0:d0:dd:76:ad:1a:f1:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:72:EF:9E:69:11:3F:60:61:5A:34:7B:3F:5B:2F:DF:24:69:33
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c4:a3:75:e9:dc:81:df:75:26:35:7f:9d:84:68:a2:fd:5b:
f7:aa:e3:c4:18:0e:f8:38:57:ec:d4:48:5c:8c:b0:d9:bf:bc:
ec:f3:f1:56:d2:88:fb:7c:f1:3a:27:26:a4:5f:cb:79:b3:62:
9e:ca:20:e3:67:1f:f4:41:45:64:fc:e0:03:5c:fc:ba:9f:33:
2b:46:47:fe:7b:5a:35:a3:63:ae:0c:e3:46:30:b8:00:b8:b1:
10:3d:ee:88:46:6e:f8:14:3c:89:8b:7d:8f:9a:e6:a4:fc:0f:
84:07:6a:b1:2f:5b:4d:31:9e:73:f4:02:e6:4f:c4:c7:75:2c:
be:11:3f:a9:16:67:70:87:32:fd:ff:92:ce:b9:ae:d4:de:2b:
29:04:72:2d:db:7f:ab:3c:44:ad:10:e8:ec:7c:3a:47:c9:92:
08:52:6e:01:13:7e:87:e2:cb:eb:47:01:98:19:7a:dd:4a:0b:
5e:fd:48:74:e1:7f:bf:2e:b5:a6:a1:2d:ef:d0:27:41:74:4f:
ef:06:87:fb:a1:5d:4a:7d:ba:db:be:99:bb:14:74:c4:0f:ce:
a3:85:a1:7a:42:3c:54:1a:48:f1:2e:5b:5d:d1:ee:b5:c0:87:
cc:48:b8:4a:0c:fc:7b:39:f2:2d:dd:6b:01:80:ca:c7:4c:7b:
0a:d9:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 13:10:26 2026 by rpki-client