Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier: 6pgEs7qnrz7jz9NErPgqH0TwQKuQ8qXLqV2dvEd23W0=
Subject key identifier: 12:DF:DA:7E:8F:8E:2F:96:D6:D3:6C:35:58:3F:8E:36:EC:3A:85:E4
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 019CABD8F61E705CC582B96F24E3FF87DF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number: 162D
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: oIuvgdOFTIZcuoJpYY9ylvfr70AnMn8sWAQMp/a98KU=)
2: m7ka3GTgMeqm1ki2dDpAuEKjwdM.roa (hash: 77rePDrGBduV4VbCULV3j9BdzB+b3yDNJM//8C/mjto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f6:1e:70:5c:c5:82:b9:6f:24:e3:ff:87:df:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=12dfda7e8f8e2f96d6d36c35583f8e36ec3a85e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:c0:db:3f:e5:73:75:c8:8b:15:d1:16:10:
0a:3f:36:f7:62:66:91:bc:cd:d6:83:54:93:e9:29:
58:44:ab:cb:fe:d0:b0:9f:e6:f3:82:c3:f3:ab:87:
1a:d8:32:88:bc:22:11:aa:56:aa:de:97:12:e2:44:
06:28:68:4e:60:ed:b0:24:37:40:12:24:52:62:34:
ed:e4:d5:f6:0b:1a:14:c7:6e:6f:d3:58:ac:2f:12:
3d:ad:dc:a4:36:fa:34:88:9f:b3:ea:90:4f:4d:75:
20:b3:88:45:de:b8:01:b0:d3:84:15:09:4f:24:c2:
6f:d4:a5:3f:68:fb:79:7c:6c:64:6f:02:5b:51:d5:
8a:fb:7d:7d:51:23:1d:af:3c:67:e5:63:17:e4:61:
dc:66:f2:54:b5:0b:67:18:f0:0e:98:d1:55:06:0b:
8d:5d:69:97:13:a6:9b:60:11:22:17:c0:38:dd:d4:
9c:62:54:58:c5:55:e1:cf:34:ff:ac:21:02:60:13:
28:06:2f:44:35:b5:a4:cd:72:bb:3a:54:7f:31:05:
ab:5f:d7:54:36:7c:5b:af:8b:ac:77:ef:cc:54:fd:
df:95:29:86:b0:91:49:f4:9a:c6:ef:a3:6f:a2:62:
05:83:87:7c:88:da:f8:b4:04:30:b4:de:69:08:ec:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DF:DA:7E:8F:8E:2F:96:D6:D3:6C:35:58:3F:8E:36:EC:3A:85:E4
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:08:b4:ee:65:34:6e:97:81:3a:0a:2a:1e:62:86:30:9e:57:
41:9a:39:e3:88:b6:14:82:17:68:57:e0:91:33:41:45:ae:82:
1b:76:ff:b3:6d:f1:11:3f:fc:a9:71:85:b1:b3:db:03:2a:b1:
1e:c9:10:99:4b:5d:c8:9b:58:97:5c:2e:22:4d:03:9b:77:8e:
43:2b:48:2b:fb:a6:5d:c4:8a:94:41:13:7c:80:1c:00:f7:a1:
5d:27:09:98:61:12:bd:ae:37:76:b6:02:0a:35:30:23:af:f5:
84:a1:4c:03:77:30:68:ff:1c:fa:60:6d:02:d0:b7:71:c8:76:
21:41:ec:a9:7f:b0:c7:3d:74:6a:97:17:4a:f6:e0:29:ab:72:
0d:51:cd:08:54:5d:ea:46:1e:b1:50:18:88:f8:aa:8b:d7:79:
0c:2a:67:97:13:1e:cf:e2:f3:cc:d1:d8:e8:a8:94:ec:e4:48:
8b:39:0d:3e:e3:76:69:74:5b:03:0b:a0:0e:eb:0e:f6:12:fb:
9a:e0:e6:09:08:37:8b:2b:1e:4f:37:ce:3a:c1:85:15:b1:ea:
3e:3b:6d:61:29:b4:83:76:f7:7c:49:d5:fc:53:e1:39:05:dd:
09:61:54:fa:7f:d0:1a:79:e3:33:af:51:e7:71:83:ca:67:b0:
0d:5c:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:07 2026 by rpki-client