Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier: ojsctD57gL/LxCN6pI5t0nvIMVvvi8ayteTyMw3GmNg=
Subject key identifier: C9:16:A8:33:0A:99:86:DF:46:7F:5E:4A:9A:F6:EB:06:38:31:90:5A
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 01A0C0D63D739B295D67293BD72687F84FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number: 0DC3
Signing time: Sun 20 Sep 2026 22:01:00 +0000
Manifest this update: Sun 20 Sep 2026 22:01:00 +0000
Manifest next update: Mon 21 Sep 2026 22:01:00 +0000
Files and hashes: 1: Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa (hash: yVkM1zt/EykUfazBUe+F76pn3O1M/hLY9A7dh99ee7E=)
2: OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa (hash: OAZhJcMAQC48Syy5KrA0aFBAMfYodkPWCtect72qfTI=)
3: XEYiiN3BOEIRPz4xSOYL_41xhiw.roa (hash: 0ywms5lLpzQH6FFtmE9+FqNLyVuKgqHknSLCPnwXsEI=)
4: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: HgtkN2MtKKd+9KxMWr3HDfVt38LxPT1OS/gCkasyNac=)
5: lEbUtLtNkfAyY2Y1bQXjNgffS1A.roa (hash: b/0/ySYWBBPjZPbNT3Q9pWagQbtfduFB4wZTve0Q5AE=)
6: mi7KJXHo-_cgynjrOEYKa7kVD8I.roa (hash: YGaCcIrn+IZQb5Rq3PZQYSYoXxlLsMVa6xxEh3lbzgI=)
7: tEbhK49lj9A2t1UjujH2qFk6A88.roa (hash: 7LJLF76QvPCjlTh8Y9wGeCk9+DPapbJzwhv04lpZotk=)
8: vi3DjTDiHudyYK8w8VItrX_abyg.roa (hash: nMbONn7wYaL+5u0tqJSULFh7G6Nyiekz0kaTGUhg9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d6:3d:73:9b:29:5d:67:29:3b:d7:26:87:f8:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Sep 20 22:01:00 2026 GMT
Not After : Sep 21 22:01:00 2026 GMT
Subject: CN=c916a8330a9986df467f5e4a9af6eb063831905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:29:5c:48:d4:7a:73:11:b0:f6:03:3a:43:
e8:d1:a4:a5:7a:06:ac:16:6b:00:0d:70:43:b2:9a:
cf:09:88:19:c3:77:8c:88:6e:c7:81:93:07:04:5b:
42:e5:e9:65:d6:dd:03:ee:78:93:3c:79:73:35:0e:
21:52:79:df:96:99:2b:0f:c6:11:30:33:83:09:c6:
e9:7a:8a:6b:ce:44:9e:bd:61:a0:d8:0b:82:62:0b:
f9:73:f5:f4:22:7f:34:94:01:cc:1f:5c:24:d7:f0:
d3:e7:ed:1a:7b:39:e6:d8:3f:bb:ab:d4:62:fc:e2:
9b:79:a4:c5:e5:1f:22:b5:83:30:f8:7e:67:ed:26:
b6:e5:a4:3d:bc:af:b6:02:c5:69:09:4a:78:0f:82:
bc:a3:82:0c:6d:95:e7:66:27:fd:3c:ea:d1:b4:66:
53:79:7c:79:bc:0c:b9:6f:dd:2a:26:60:5a:5b:33:
72:ed:d3:74:0a:4e:e8:a9:a9:ab:37:bc:9d:71:9d:
77:e0:5a:af:ea:07:95:0f:b6:84:3e:21:ed:e0:f9:
20:c9:54:54:a5:25:88:2e:1a:18:0a:bb:7b:69:0f:
70:25:b9:45:99:64:24:e0:a1:67:62:43:7d:54:03:
6a:c2:87:82:d3:87:a5:a8:1c:9b:91:38:e6:f5:3d:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:16:A8:33:0A:99:86:DF:46:7F:5E:4A:9A:F6:EB:06:38:31:90:5A
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0d:77:c8:5b:fe:7c:43:fe:7e:a2:fa:41:10:10:e7:a1:50:
a4:75:b9:8a:6a:7d:97:3f:be:c2:62:99:27:f0:15:6a:9f:43:
26:87:15:c4:8b:41:35:31:69:4c:2b:7c:98:42:08:de:77:19:
33:d4:62:81:bf:78:e9:54:47:6b:23:52:65:a5:b0:0e:84:b1:
e5:08:60:fa:fd:44:bd:ca:d0:7f:31:49:4d:36:dc:00:1b:c5:
ed:ad:c2:8e:f5:a0:40:d3:44:3e:53:b7:9e:ad:68:d2:85:69:
18:d5:61:cf:d7:cb:0c:da:9a:0d:fb:5a:bb:44:5d:a1:eb:fe:
60:a3:16:6f:f9:2e:ea:ca:d2:cb:a4:42:bb:68:c1:e0:a1:33:
13:1c:cb:c2:d0:f9:a2:69:f9:3c:fa:7b:57:c9:1b:95:a8:9f:
4d:73:a3:2f:55:92:a4:cb:6e:29:3e:9e:29:41:e9:d1:04:72:
06:a6:5c:25:d5:19:71:b7:77:56:fb:43:73:2c:47:09:98:77:
b9:de:4e:98:3d:19:de:3d:dd:0b:39:3a:e4:d4:c4:bb:c8:12:
85:28:d2:5f:72:7b:43:67:25:14:e8:61:53:09:25:a0:73:bb:
3d:16:3d:6c:6c:f6:14:07:51:cd:30:7d:b9:cc:17:ce:c8:02:
d8:2e:8f:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDA1j1zmyldZyk71yaH+E/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWQ5YzBjZTViYTM5MDViNDE5NzBhMDRlNTE5NzYwNzZj
NjdlMDAwHhcNMjYwOTIwMjIwMTAwWhcNMjYwOTIxMjIwMTAwWjAzMTEwLwYDVQQD
EyhjOTE2YTgzMzBhOTk4NmRmNDY3ZjVlNGE5YWY2ZWIwNjM4MzE5MDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5QpXEjUenMRsPYDOkPo0aSlegas
FmsADXBDsprPCYgZw3eMiG7HgZMHBFtC5ell1t0D7niTPHlzNQ4hUnnflpkrD8YR
MDODCcbpeoprzkSevWGg2AuCYgv5c/X0In80lAHMH1wk1/DT5+0aeznm2D+7q9Ri
/OKbeaTF5R8itYMw+H5n7Sa25aQ9vK+2AsVpCUp4D4K8o4IMbZXnZif9POrRtGZT
eXx5vAy5b90qJmBaWzNy7dN0Ck7oqamrN7ydcZ134Fqv6geVD7aEPiHt4PkgyVRU
pSWILhoYCrt7aQ9wJblFmWQk4KFnYkN9VANqwoeC04elqBybkTjm9T2CFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkWqDMKmYbfRn9eSpr26wY4MZBaMB8GA1UdIwQY
MBaAFIqtnAzlujkFtBlwoE5Rl2B2xn4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGIt
N2EwZWNlOWMwYWY4LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGItN2EwZWNlOWMwYWY4
LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQg13yFv+
fEP+fqL6QRAQ56FQpHW5imp9lz++wmKZJ/AVap9DJocVxItBNTFpTCt8mEII3ncZ
M9Rigb946VRHayNSZaWwDoSx5Qhg+v1EvcrQfzFJTTbcABvF7a3CjvWgQNNEPlO3
nq1o0oVpGNVhz9fLDNqaDftau0Rdoev+YKMWb/ku6srSy6RCu2jB4KEzExzLwtD5
omn5PPp7V8kblaifTXOjL1WSpMtuKT6eKUHp0QRyBqZcJdUZcbd3VvtDcyxHCZh3
ud5OmD0Z3j3dCzk65NTEu8gShSjSX3J7Q2clFOhhUwkloHO7PRY9bGz2FAdRzTB9
ucwXzsgC2C6POA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:07:18 2026 by rpki-client