Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: XBHDbHSmkXcMSUrh+F/9Md47XGUIHyrVZTki43uclHg=
Subject key identifier: 3F:A7:79:5A:24:27:D6:BC:B4:FB:D3:6E:60:22:4D:6C:AA:54:DA:40
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 01A0B76585EF68FE5E056F2BC479AE252DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 0735
Signing time: Sat 19 Sep 2026 02:01:18 +0000
Manifest this update: Sat 19 Sep 2026 02:01:18 +0000
Manifest next update: Sun 20 Sep 2026 02:01:18 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: cY4GoolLkBVGsZKjLtJOGQo5HbwL13baFDTlX/fL5tc=)
3: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:65:85:ef:68:fe:5e:05:6f:2b:c4:79:ae:25:2d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Sep 19 02:01:18 2026 GMT
Not After : Sep 20 02:01:18 2026 GMT
Subject: CN=3fa7795a2427d6bcb4fbd36e60224d6caa54da40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:aa:4b:13:63:dc:8d:f8:a9:f9:f8:40:6e:59:
39:28:a2:db:79:5d:9e:5a:8b:29:b0:2c:a2:2a:78:
97:16:16:c1:91:d0:ce:63:e1:b1:05:c5:31:2e:68:
3b:fc:18:53:a8:a9:9a:f0:b1:44:2e:e0:b6:21:31:
36:31:40:0a:02:8e:a4:b7:bc:02:17:61:4f:16:44:
99:b6:8f:21:10:d3:87:2e:a2:0a:41:9c:11:9c:e2:
c1:c9:4f:81:ff:47:43:e7:4b:09:95:34:5c:9e:be:
d5:0a:d6:b5:8d:a4:b9:f6:8e:1a:26:56:e1:ee:b2:
3e:60:8a:31:ee:05:8b:7e:cd:20:1d:5e:b6:b5:d9:
52:00:d8:f9:99:8a:7b:41:ac:a3:e7:bc:77:11:f0:
cb:ef:9a:5c:92:d7:76:6e:29:03:69:8a:26:bb:c0:
2a:f6:fd:82:ad:6d:a2:5c:d9:7a:23:1a:67:60:c6:
75:a2:5c:7e:a6:f9:b2:fc:cb:1f:c1:cd:cf:dc:ad:
a1:67:91:d2:43:77:b3:d2:f6:9d:b1:77:ec:b6:71:
ec:51:6b:6d:7b:46:d1:6c:5e:c5:43:89:bb:10:07:
d2:95:4e:5a:bb:b0:12:f5:1c:d1:2f:fc:5a:10:48:
1f:a6:c3:ce:d7:25:f5:51:fc:ac:1e:05:10:df:a1:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A7:79:5A:24:27:D6:BC:B4:FB:D3:6E:60:22:4D:6C:AA:54:DA:40
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2e:e0:4f:a4:ce:a9:fe:ea:f9:2e:54:8b:c0:5b:2a:26:29:
5b:b6:ea:7b:0c:8f:b1:20:05:a4:aa:b1:84:38:db:b6:72:24:
39:92:73:60:89:85:5a:79:a6:97:48:65:a5:c0:fd:b7:c2:18:
b0:c2:b3:4e:6f:38:c1:b6:11:b7:e5:4b:bd:67:16:92:22:e1:
d9:c5:e7:a9:c2:69:b4:24:f3:58:df:49:33:1f:df:97:b2:67:
cf:94:08:74:60:b5:76:d0:26:16:d5:ba:3c:70:f4:d9:b6:29:
f2:0e:f3:24:1c:44:f2:6e:39:2e:bb:20:fa:63:a8:25:c8:a6:
a8:ed:db:b7:da:65:79:5a:e3:ba:a8:7d:fc:91:06:1f:03:ce:
3b:9a:18:eb:b3:3d:4d:7a:a0:fd:f9:3b:bb:6a:8c:ae:c9:02:
b4:7f:83:70:a7:7d:57:f2:03:b0:5c:5c:9d:c7:99:56:d7:09:
83:b5:22:c4:62:22:59:5a:6d:85:69:ed:22:9a:3e:1a:aa:f2:
e9:41:ad:93:61:c5:76:02:f6:e9:33:ca:81:b8:32:17:52:cc:
d0:bb:48:90:11:33:8d:1a:8b:25:46:8a:89:f3:7e:5a:d8:bb:
4a:d1:59:9a:57:6f:9d:85:e4:07:bf:0c:c4:3f:62:fb:d7:cd:
74:e0:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:42:43 2026 by rpki-client