Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json)
Hash identifier: hGqk6B/sKV2wvuB3JmGIxTiNQVlYJvwKUS+ViQ9GOwk=
Subject key identifier: 2C:6A:1D:A1:83:AC:CC:26:96:79:0A:AE:5C:69:47:86:08:2F:45:5E
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019D9AE2DF00C9A1B70887ECBB3297D41C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
Manifest number: 18B9
Signing time: Fri 17 Apr 2026 10:00:52 +0000
Manifest this update: Fri 17 Apr 2026 10:00:52 +0000
Manifest next update: Sat 18 Apr 2026 10:00:52 +0000
Files and hashes: 1: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: 87OGaLl3L6Ke4KnT+8rG8a69aa/a2/z2uVayun52pe0=)
2: K8bI68ydbYD0aGoO_y4tC8a-6po.roa (hash: 7jWrWjgMEBXHFnrwJxNxcZvd3n/YILw9cksevC2VciU=)
3: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=)
4: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=)
5: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=)
6: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=)
7: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=)
8: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=)
9: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:df:00:c9:a1:b7:08:87:ec:bb:32:97:d4:1c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Apr 17 10:00:52 2026 GMT
Not After : Apr 18 10:00:52 2026 GMT
Subject: CN=2c6a1da183accc2696790aae5c694786082f455e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:7c:c3:e9:5b:db:8b:8b:b2:b7:38:87:76:
ac:25:fc:ea:ef:e0:df:30:47:5a:57:f7:8e:2c:ff:
1c:ad:fa:ea:3e:e9:f2:46:61:4e:43:75:8b:67:92:
51:71:4d:15:0e:a2:d9:b4:42:39:8c:0b:fb:3f:d9:
6e:24:26:59:11:ef:d6:a8:68:b4:66:82:24:c0:2d:
3f:04:dc:92:e0:91:0e:a0:6d:48:eb:77:61:22:89:
ce:a3:17:11:1a:2f:5d:de:23:b4:38:20:f6:14:51:
2c:0a:e1:08:36:08:bd:da:00:07:46:46:4d:67:5f:
fd:53:d0:a8:c1:67:19:27:ac:67:c3:df:a4:2e:63:
0f:69:24:96:5c:7b:01:72:fd:35:7d:44:b1:01:b3:
7e:46:20:46:fd:b3:8f:05:bb:d9:9f:8e:ec:b0:64:
c7:7b:d4:fc:a8:48:ea:d9:75:15:a1:2e:a1:d6:ab:
13:c2:bc:8d:ca:fa:1f:c6:40:ef:57:25:ae:2c:41:
76:2d:be:dc:02:b5:d7:72:94:23:a8:0b:f9:b9:bd:
79:8b:9c:33:74:b4:0a:7c:ce:87:96:39:1b:c0:b0:
c3:2c:34:f7:ff:68:9b:92:b0:2c:32:ee:28:42:d7:
f4:b3:93:7c:fd:56:cf:9b:48:04:eb:8e:d6:5f:e9:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6A:1D:A1:83:AC:CC:26:96:79:0A:AE:5C:69:47:86:08:2F:45:5E
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:26:3e:ac:59:5e:44:e9:3f:3e:04:77:45:61:40:87:7c:88:
8b:64:e1:da:a6:39:fb:77:b1:86:82:c2:74:42:6c:7d:8f:1c:
e3:ed:f2:77:2d:9b:b3:ce:2b:90:08:71:00:a1:46:4d:99:e6:
d1:e4:6f:fb:b2:8c:09:b7:74:71:64:5e:e1:f2:d5:7e:a0:90:
04:8e:1b:50:80:2b:22:2f:02:e4:a6:8c:fa:33:fb:45:45:4e:
ec:dd:6e:d6:ad:26:b6:4b:8d:6f:5e:3c:a1:ea:e6:06:c1:0b:
f9:5b:59:90:95:e5:4f:84:c4:17:59:2c:0a:1b:70:5b:e3:2c:
55:2b:e8:42:bc:ea:dd:bb:d7:c8:e9:7e:af:31:88:5d:3b:b1:
23:80:45:3c:3e:93:ea:57:8a:9b:e9:7d:e6:5f:df:62:8a:a0:
05:27:c4:26:10:3a:a2:27:0f:dd:30:ca:87:da:60:8b:b3:c9:
15:14:e8:67:65:d4:e8:a9:1c:31:fd:44:56:6e:5f:24:83:6f:
53:9e:6b:80:64:ac:e0:20:91:da:e4:0b:a4:95:c6:92:87:1d:
9c:4c:77:51:fa:f1:9a:df:ca:b4:e9:ea:af:19:11:91:42:45:
57:be:77:e1:18:be:e7:7e:c6:1b:65:82:45:3b:84:bc:b0:eb:
91:2b:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:10 2026 by rpki-client