Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: 851EHfnLWxWsFg4GcdnLlut6zQejGEmYcCWxAuTTbGU=
Subject key identifier: 74:D1:1C:BE:C0:13:3D:4B:A2:0A:28:AB:82:03:DE:28:FF:5A:96:16
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019DDD67C58CFC95437B2A949A0FFD065457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 05BB
Signing time: Thu 30 Apr 2026 08:00:58 +0000
Manifest this update: Thu 30 Apr 2026 08:00:58 +0000
Manifest next update: Fri 01 May 2026 08:00:58 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: bPK41fJ6OB1RtoCI1+Fx1a6EPyhj/Sm12Wi7crtZ/pU=)
3: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:67:c5:8c:fc:95:43:7b:2a:94:9a:0f:fd:06:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Apr 30 08:00:58 2026 GMT
Not After : May 1 08:00:58 2026 GMT
Subject: CN=74d11cbec0133d4ba20a28ab8203de28ff5a9616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:7b:ed:6f:b6:22:34:28:53:89:84:f4:85:
03:c0:cf:49:e7:89:d8:8f:c7:e5:72:4b:b1:ed:21:
41:a6:0b:7b:cb:ee:eb:89:c3:e8:60:e2:fa:dd:1c:
a9:eb:c2:68:80:a9:f5:0d:86:b8:b5:76:04:03:25:
3a:cc:ec:6c:61:72:3c:2b:de:d5:8b:21:fc:65:5d:
7d:7a:69:cc:05:63:7a:e7:5d:a1:20:b6:2f:43:8d:
75:14:9a:7f:95:1f:d2:0f:9f:8b:67:15:67:b8:10:
a4:31:95:5f:29:21:4f:e8:96:a3:4e:f3:44:a9:86:
65:3b:ea:71:68:1a:28:04:a9:ed:98:da:a4:7d:f2:
22:80:f7:7e:61:c7:58:f5:df:8a:5d:c2:49:d4:cc:
05:73:0d:8d:1f:ef:c5:5b:f6:b7:19:14:19:49:ed:
67:18:53:10:f2:84:7b:5d:ab:4d:2b:5a:7a:de:d2:
94:05:c6:3e:ef:f3:0c:ce:bd:32:35:92:eb:59:a2:
cd:f6:29:c5:cd:11:8e:13:1e:40:b5:c6:3c:39:cc:
ff:3b:be:b3:83:fe:27:c1:bd:02:6b:53:30:c4:36:
18:97:75:59:d1:45:bb:ae:bf:29:85:94:cc:34:f7:
c0:2a:53:2d:21:45:2a:fb:fd:c3:c2:03:f1:5b:61:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D1:1C:BE:C0:13:3D:4B:A2:0A:28:AB:82:03:DE:28:FF:5A:96:16
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bf:02:f3:94:d8:97:95:56:68:15:f7:df:aa:9b:fa:cd:9d:
b0:d9:38:b9:b4:b7:cf:49:80:18:2e:51:55:e4:9a:09:ef:35:
ef:b5:de:f6:34:28:20:28:3c:00:3e:2b:10:19:59:06:1d:c6:
04:6e:61:69:65:69:d6:36:8a:f0:54:8c:ee:e6:10:e2:22:21:
95:8b:ca:43:c7:1b:98:a1:ca:43:66:df:09:5f:b7:2f:44:a0:
ef:b8:f9:3b:f9:1d:7d:09:c7:17:ab:7c:30:85:60:18:65:6b:
25:cb:7f:6a:cf:f9:63:43:c2:69:50:c9:ec:62:b5:23:c1:2c:
7b:ef:f9:3f:fd:14:09:4f:f7:7d:19:bf:69:ac:70:a1:f9:f9:
d8:7a:35:18:34:bf:5d:3f:76:c1:53:8c:da:c4:cd:9a:c4:41:
52:6d:16:c7:be:60:0f:ea:40:63:3c:e4:f0:98:e8:79:d9:5c:
88:a8:1f:a7:71:97:5d:8a:f7:79:d3:32:7a:16:05:2a:6f:d9:
b2:27:20:ed:08:2c:39:2b:96:17:40:01:ad:1e:fe:4a:77:78:
2f:85:93:8f:b6:a7:68:c2:6d:f8:f6:f5:fa:e7:62:fd:97:61:
ed:a8:8a:0d:df:d0:53:70:4d:d8:68:a5:bb:41:1d:e2:ed:92:
fc:19:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:50:31 2026 by rpki-client