Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier: VC3XtZghA5HgBMtV2QSV1frAYVCqbTQks64eR4cWjYo=
Subject key identifier: B8:C1:A8:BC:D4:6E:44:5C:19:73:4F:C4:25:39:F2:3E:2E:18:0A:31
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 019FA8D049ABF4A8CE8D54A3103074953C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number: 0D32
Signing time: Tue 28 Jul 2026 13:00:50 +0000
Manifest this update: Tue 28 Jul 2026 13:00:50 +0000
Manifest next update: Wed 29 Jul 2026 13:00:50 +0000
Files and hashes: 1: Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa (hash: yVkM1zt/EykUfazBUe+F76pn3O1M/hLY9A7dh99ee7E=)
2: OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa (hash: OAZhJcMAQC48Syy5KrA0aFBAMfYodkPWCtect72qfTI=)
3: XEYiiN3BOEIRPz4xSOYL_41xhiw.roa (hash: 0ywms5lLpzQH6FFtmE9+FqNLyVuKgqHknSLCPnwXsEI=)
4: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: KAfeLIYDnDbe+76vQDQ2dgASXWT9Bjr4kzgwqxUyo7A=)
5: lEbUtLtNkfAyY2Y1bQXjNgffS1A.roa (hash: b/0/ySYWBBPjZPbNT3Q9pWagQbtfduFB4wZTve0Q5AE=)
6: mi7KJXHo-_cgynjrOEYKa7kVD8I.roa (hash: YGaCcIrn+IZQb5Rq3PZQYSYoXxlLsMVa6xxEh3lbzgI=)
7: tEbhK49lj9A2t1UjujH2qFk6A88.roa (hash: 7LJLF76QvPCjlTh8Y9wGeCk9+DPapbJzwhv04lpZotk=)
8: vi3DjTDiHudyYK8w8VItrX_abyg.roa (hash: nMbONn7wYaL+5u0tqJSULFh7G6Nyiekz0kaTGUhg9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:49:ab:f4:a8:ce:8d:54:a3:10:30:74:95:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Jul 28 13:00:50 2026 GMT
Not After : Jul 29 13:00:50 2026 GMT
Subject: CN=b8c1a8bcd46e445c19734fc42539f23e2e180a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:7b:83:ec:7c:e2:f1:7b:a3:c6:f7:7d:5f:
4c:d7:95:65:4f:93:20:1c:27:c8:0d:71:01:77:31:
e0:45:82:69:08:cf:ff:bd:7c:8a:50:75:b8:ef:db:
75:15:69:31:40:e5:8a:09:2a:fe:8b:b7:f9:84:5d:
8d:3d:c7:7f:ce:75:6e:7e:33:ff:24:28:00:f7:da:
9f:73:87:0a:52:be:79:38:45:27:bd:76:1d:5c:e4:
a1:ad:d1:5f:2e:93:49:bb:45:4e:3f:50:b4:ef:1b:
ab:00:c8:11:3c:a1:ce:98:72:eb:18:93:95:17:bd:
06:59:80:54:bf:85:42:77:a5:56:2b:99:ee:5a:03:
10:d1:13:13:31:d1:79:28:c7:e8:ed:dd:a3:7b:c7:
67:83:5f:bb:9d:16:2e:41:28:a2:5c:dd:66:47:05:
0e:f4:4c:86:e0:4f:93:d0:a7:e3:7a:d3:36:69:8f:
68:17:8f:da:53:c6:7c:04:9b:5b:a9:98:ca:c5:c6:
9f:31:db:1f:0b:fd:01:61:a9:20:28:b9:62:78:94:
35:10:e0:43:81:c6:bb:20:ea:1f:30:8b:6e:44:fa:
4f:90:3b:77:07:54:e5:c2:46:4d:22:78:50:7f:bd:
95:02:f5:c9:06:9b:7b:2e:6b:73:63:e7:8a:19:74:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C1:A8:BC:D4:6E:44:5C:19:73:4F:C4:25:39:F2:3E:2E:18:0A:31
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:da:4b:98:e5:54:fb:0f:3d:09:c4:dc:d9:01:4a:19:34:ea:
5a:e2:b8:2b:e1:bf:4b:93:02:50:bc:45:ba:fe:aa:b3:a5:73:
0d:82:35:7b:49:1a:b9:2a:54:fc:fe:a9:52:56:f8:8c:7b:30:
a0:d1:bf:10:2d:14:27:45:8c:01:5c:9c:fb:bd:8d:c2:03:d4:
dd:82:c6:4e:f5:41:bb:04:9f:6d:6a:1c:95:c3:83:ef:28:5e:
e3:1c:7d:a2:d3:3d:7c:af:b1:97:1c:25:e8:06:3c:98:2a:3a:
da:ec:c5:20:98:4a:27:15:77:26:75:82:bd:5e:29:1f:9a:a4:
5b:39:76:52:b1:5d:a2:69:3d:85:fc:cc:51:82:9c:ff:0e:2e:
ea:ce:96:f4:4b:21:ad:49:b0:e5:41:22:a6:a1:b0:63:4e:a5:
c7:29:f8:a1:98:4e:ea:ae:97:df:86:86:cd:0a:4c:8d:fd:36:
f5:b6:6c:94:01:5e:f6:33:b8:ec:96:cf:76:46:93:f7:d6:67:
6b:15:32:7c:3f:34:b3:c4:ae:a9:46:12:1d:91:ec:76:07:3d:
e3:b2:d0:95:b5:c8:36:9e:ad:c8:18:b8:de:85:47:d1:fa:6c:
6e:13:53:1a:c0:f2:66:60:fa:6b:32:af:af:1e:49:24:82:3b:
bb:08:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:16 2026 by rpki-client