Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier: 2ufGhv4kDY1SIRQuCsBxH8ULW45+GDUcc5sncaAir+w=
Subject key identifier: C2:7D:67:8E:D5:12:26:71:AD:28:20:A2:16:05:0E:CB:93:FF:9D:72
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 019D9B5153599A55DA83DE27303B8CA02B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number: 16A9
Signing time: Fri 17 Apr 2026 12:01:31 +0000
Manifest this update: Fri 17 Apr 2026 12:01:31 +0000
Manifest next update: Sat 18 Apr 2026 12:01:31 +0000
Files and hashes: 1: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: Jrc12P/5IwNg1zaq6CyGX0+wro8N9a9h/8gMck3kv0E=)
2: m7ka3GTgMeqm1ki2dDpAuEKjwdM.roa (hash: 77rePDrGBduV4VbCULV3j9BdzB+b3yDNJM//8C/mjto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:53:59:9a:55:da:83:de:27:30:3b:8c:a0:2b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Apr 17 12:01:31 2026 GMT
Not After : Apr 18 12:01:31 2026 GMT
Subject: CN=c27d678ed5122671ad2820a216050ecb93ff9d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:f2:c2:bc:b3:c6:dc:59:e4:f6:eb:c6:f8:
cc:6c:d4:f9:50:83:41:0e:38:83:cb:65:66:12:dc:
be:c0:e2:87:3c:94:6a:c7:d3:24:b8:29:6a:1b:76:
57:20:93:7b:db:4f:0c:98:d0:e8:5b:6d:fe:37:3c:
b5:02:d1:38:9f:ae:73:20:21:59:94:54:00:dd:35:
ae:7c:4f:45:f9:71:ac:ad:35:85:84:d1:72:79:cd:
53:e1:97:17:ec:a7:d6:67:1c:28:4e:34:75:39:d6:
ee:c9:36:ab:9f:f2:ac:61:3f:84:6e:58:0e:16:e2:
7d:d4:0d:7c:95:68:07:61:46:52:cf:dc:1b:6e:25:
8d:6f:cd:75:ff:9e:fe:ab:7c:d5:69:1e:cb:56:6f:
63:e6:63:3e:c6:43:4e:ea:2a:a3:37:cc:12:c7:3f:
b4:03:cc:63:2e:1f:3d:41:63:0b:c6:1b:39:e7:fd:
f8:58:9d:a3:23:84:19:f0:6e:bf:31:50:df:89:a2:
b0:87:a7:dc:ad:ff:79:14:34:b0:43:43:3a:f4:02:
ea:1b:d1:b4:f4:7b:f2:0c:09:8f:76:54:46:cd:3d:
c6:82:eb:e7:35:33:43:32:33:27:ae:09:e1:15:5e:
a2:84:99:35:a0:28:14:9d:c2:c8:90:e2:3b:0e:ea:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:67:8E:D5:12:26:71:AD:28:20:A2:16:05:0E:CB:93:FF:9D:72
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2c:08:57:cf:69:25:f0:f5:3a:2c:f6:4a:03:39:ec:e6:f5:
c9:91:b2:6d:25:44:90:82:f3:28:95:e6:50:56:09:17:8d:00:
ab:83:1f:c2:cc:68:7b:03:d2:12:dd:b3:a6:12:d9:74:b9:48:
87:c5:bb:f8:fc:20:77:ac:3b:fc:04:fe:40:c5:6f:1a:e4:48:
5b:7b:80:36:8e:bc:a5:38:7f:7e:2c:b1:26:52:89:10:e4:6e:
20:97:0c:ae:ab:3d:5f:e7:c7:3c:e3:2b:c1:89:af:da:93:9e:
35:52:b9:67:bf:2c:c9:2c:0e:2e:28:a2:7c:26:68:ae:af:b2:
6b:94:ca:f7:af:4d:8a:a5:bd:26:f3:37:20:31:1f:af:e6:2e:
44:7d:b7:a1:ea:a4:f4:28:cf:08:79:4d:b8:56:45:33:c3:39:
ab:1f:d6:46:e6:fc:ac:2b:22:9c:25:51:fc:24:c9:d1:6f:a0:
07:24:7f:0e:6c:5c:f0:d3:f3:a2:48:1f:ae:4c:8f:4a:44:82:
6f:e2:34:99:25:18:e1:59:3b:15:2a:a6:44:6d:13:fe:50:0f:
0a:8c:c7:d5:ee:de:af:a2:d5:a7:80:3a:3a:6a:73:e3:f6:30:
41:9d:fa:84:48:6c:5a:8e:a5:41:b1:36:81:d8:1a:ed:af:93:
f2:20:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:26 2026 by rpki-client