Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
File: iqR9CPyFIT30_aLPlWG45ovCc9w.mft (raw, json)
Hash identifier: KFMLtBnfOqQXudlpmqEBV2xKMhCuZsqIQ7zxdfqZ08c=
Subject key identifier: A6:56:E2:81:DA:CC:DD:28:FC:B9:BF:E8:86:A8:21:D4:60:B6:FF:50
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 019DA4C1E8F65DB10A99BC8796B5FA84E790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
Manifest number: 0D57
Signing time: Sun 19 Apr 2026 08:01:04 +0000
Manifest this update: Sun 19 Apr 2026 08:01:04 +0000
Manifest next update: Mon 20 Apr 2026 08:01:04 +0000
Files and hashes: 1: iqR9CPyFIT30_aLPlWG45ovCc9w.crl (hash: weBZYCbDj9TlB8xHv5gpd99yk6NhTm/giKffd0xgBVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:e8:f6:5d:b1:0a:99:bc:87:96:b5:fa:84:e7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Apr 19 08:01:04 2026 GMT
Not After : Apr 20 08:01:04 2026 GMT
Subject: CN=a656e281daccdd28fcb9bfe886a821d460b6ff50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:d8:ee:a9:16:c8:4d:c0:95:59:d5:2b:72:
24:99:de:7b:4c:14:7a:e4:83:cb:23:8c:0c:ff:67:
03:dc:71:b1:cf:43:75:82:10:92:f9:4d:8a:83:fd:
13:fb:0e:bf:a9:f0:c6:89:79:72:39:17:6a:fa:02:
27:20:13:0f:70:1b:1f:f9:7d:0d:ef:91:2f:93:ca:
ed:0b:93:cb:d3:39:39:22:9c:96:7f:2f:14:3e:a0:
98:12:c1:09:2d:4e:22:57:a5:e4:a1:07:c0:3a:ea:
00:fa:30:4c:4f:fd:14:89:ed:1c:67:ac:51:d0:77:
8f:c6:e6:36:9a:4f:09:6a:c3:f4:93:9b:15:a0:f9:
f5:c6:ee:bb:68:e3:d6:14:e4:ee:19:2c:e1:9a:96:
14:95:a7:87:7b:32:c2:6a:6a:3c:e2:24:a7:b8:f3:
ee:54:a8:5d:13:c9:83:67:50:8f:a8:f5:c6:5b:15:
ee:ed:26:1b:83:ed:c7:bd:e1:98:b5:83:b4:35:b3:
ce:fe:b1:0f:e2:57:79:ea:88:d2:90:6d:3d:d3:51:
b2:a5:21:a0:e6:e8:bb:34:f1:80:da:2e:fa:81:84:
ff:ce:68:af:4b:37:9e:79:b6:75:18:96:f6:ff:11:
2f:aa:f3:74:7e:d7:8f:c8:ab:0b:d0:cf:3d:b2:d2:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:E2:81:DA:CC:DD:28:FC:B9:BF:E8:86:A8:21:D4:60:B6:FF:50
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:30:ef:81:20:1d:e3:5b:af:6c:8b:f0:84:4e:22:76:eb:
cb:b0:bd:54:66:11:52:22:45:75:32:37:dc:18:97:e6:cc:5a:
5f:37:50:ee:8a:30:fb:95:cc:d8:cd:4f:35:1a:72:98:00:49:
54:a2:7c:f6:b0:d4:1d:b2:21:a7:55:b5:a8:1e:59:c7:01:3d:
39:fc:9d:5c:e0:6a:9a:10:e1:e1:7b:46:76:84:f7:86:0f:b3:
1a:7b:42:d0:85:88:ed:cb:bb:fc:36:f3:71:f2:47:e6:30:54:
cf:0d:9f:ad:de:91:fd:91:d4:46:60:db:3e:10:af:8d:f7:9c:
e4:ee:ec:78:30:52:7c:9c:c6:8d:c3:6d:f0:09:ac:a9:66:58:
1c:10:1e:93:ca:af:89:c6:56:07:bb:0f:46:b3:0b:fd:6b:e9:
14:5e:e0:51:38:52:58:fe:22:34:95:08:af:38:7d:59:1f:9f:
21:1a:28:b6:ad:91:68:33:fc:9f:5e:27:1c:97:df:10:5f:c6:
33:74:8c:35:f5:f3:b5:8e:e4:8b:93:c7:e2:5c:ba:5f:3d:45:
fe:bd:40:c1:e0:9c:59:4c:0f:87:77:2b:c8:27:4b:3d:1d:cb:
be:3f:94:4a:a6:87:bc:48:32:99:41:9c:23:ec:fd:8a:14:47:
c4:4b:90:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwej2XbEKmbyHlrX6hOeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYTQ3ZDA4ZmM4NTIxM2RmNGZkYTJjZjk1NjFiOGU2OGJj
MjczZGMwHhcNMjYwNDE5MDgwMTA0WhcNMjYwNDIwMDgwMTA0WjAzMTEwLwYDVQQD
EyhhNjU2ZTI4MWRhY2NkZDI4ZmNiOWJmZTg4NmE4MjFkNDYwYjZmZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdDY7qkWyE3AlVnVK3Ikmd57TBR6
5IPLI4wM/2cD3HGxz0N1ghCS+U2Kg/0T+w6/qfDGiXlyORdq+gInIBMPcBsf+X0N
75Evk8rtC5PL0zk5IpyWfy8UPqCYEsEJLU4iV6XkoQfAOuoA+jBMT/0Uie0cZ6xR
0HePxuY2mk8JasP0k5sVoPn1xu67aOPWFOTuGSzhmpYUlaeHezLCamo84iSnuPPu
VKhdE8mDZ1CPqPXGWxXu7SYbg+3HveGYtYO0NbPO/rEP4ld56ojSkG0901GypSGg
5ui7NPGA2i76gYT/zmivSzeeebZ1GJb2/xEvqvN0ftePyKsL0M89stIP+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZW4oHazN0o/Lm/6IaoIdRgtv9QMB8GA1UdIwQY
MBaAFIqkfQj8hSE99P2iz5VhuOaLwnPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXFSOUNQeUZJVDMwX2FMUGxXRzQ1b3ZDYzl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMWYwYTAtNDM5ZC00MjY2LWEzZGIt
ZTZiMWU5ODZmOTVmLzEvaXFSOUNQeUZJVDMwX2FMUGxXRzQ1b3ZDYzl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hMWYwYTAtNDM5ZC00MjY2LWEzZGItZTZiMWU5ODZmOTVm
LzEvaXFSOUNQeUZJVDMwX2FMUGxXRzQ1b3ZDYzl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEa0w74Eg
HeNbr2yL8IROInbry7C9VGYRUiJFdTI33BiX5sxaXzdQ7oow+5XM2M1PNRpymABJ
VKJ89rDUHbIhp1W1qB5ZxwE9OfydXOBqmhDh4XtGdoT3hg+zGntC0IWI7cu7/Dbz
cfJH5jBUzw2frd6R/ZHURmDbPhCvjfec5O7seDBSfJzGjcNt8AmsqWZYHBAek8qv
icZWB7sPRrML/WvpFF7gUThSWP4iNJUIrzh9WR+fIRootq2RaDP8n14nHJffEF/G
M3SMNfXztY7ki5PH4ly6Xz1F/r1AweCcWUwPh3cryCdLPR3Lvj+USqaHvEgymUGc
I+z9ihRHxEuQNw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:50:15 2026 by rpki-client