Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: XDtknh4mdisUt8vXc2OabttdkUQVGMwRoNkMs6x7f8I=
Subject key identifier: 75:72:FD:25:18:78:C0:3F:C8:DE:07:44:4A:CC:49:26:76:41:FB:97
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 019DA3E6A19741B0E18700266EB9873C90A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 1337
Signing time: Sun 19 Apr 2026 04:01:33 +0000
Manifest this update: Sun 19 Apr 2026 04:01:33 +0000
Manifest next update: Mon 20 Apr 2026 04:01:33 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: HVPA9lVGj95/1bOzmJ6cbELW3d8YaWPz6+MheFi/0a4=)
2: VCV7HyTUt8tm68B15fKOErx2kfM.roa (hash: nMzsEQ+m4fEfPNGdId/ALdJtSeiEKBWtGdiNADmVhPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:a1:97:41:b0:e1:87:00:26:6e:b9:87:3c:90:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Apr 19 04:01:33 2026 GMT
Not After : Apr 20 04:01:33 2026 GMT
Subject: CN=7572fd251878c03fc8de07444acc49267641fb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:9f:02:19:c5:bf:d6:2d:58:3e:93:13:49:
87:43:d2:ee:6d:6c:1e:d4:99:3e:0b:9e:15:d4:09:
a5:18:0e:4c:69:c9:e4:f6:d1:18:65:fc:38:6b:ea:
67:90:26:7d:d1:4f:91:d9:69:a7:d7:1e:0b:71:26:
a2:88:cb:63:34:9c:c2:3c:79:5a:b5:6f:23:19:9b:
cb:b5:f1:f2:65:22:48:34:63:4a:f6:ee:ca:53:66:
82:d7:50:2b:5a:50:68:27:a8:ce:63:e1:f2:1b:4f:
f7:74:43:2a:d2:cf:a4:66:1a:09:4a:1e:8c:65:47:
cd:fa:ae:cd:8f:0c:39:c5:37:cd:cf:73:1b:6e:7d:
3c:ef:6a:41:99:02:b7:7d:a3:e3:e3:21:9d:55:9e:
24:f9:08:d0:32:23:62:07:6d:0d:1d:5d:65:ff:e7:
2d:ec:03:24:c8:b4:51:35:5a:5a:6d:49:af:0f:6f:
23:b6:45:8d:7b:42:b6:16:e0:1c:05:6e:a2:ad:3f:
88:1d:09:76:84:1f:71:5c:66:7b:f4:a6:b2:5a:72:
5d:74:1b:94:71:85:1f:66:dc:5e:d0:62:50:78:49:
d5:59:d0:f5:80:90:f8:4b:13:df:0e:b2:6b:90:7b:
b9:c1:0b:e6:4f:14:21:63:f2:c5:4f:ae:9c:49:9b:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:72:FD:25:18:78:C0:3F:C8:DE:07:44:4A:CC:49:26:76:41:FB:97
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fd:ae:8c:8d:db:ea:b6:33:d6:61:f5:b7:07:95:99:0b:6e:
e8:95:ed:fe:cc:28:fc:fc:5e:fa:55:38:6b:31:38:b2:fa:21:
86:5e:6f:be:20:b0:b2:6d:6e:f7:00:20:04:38:83:9b:49:07:
5d:62:04:73:bc:7f:9c:7f:97:e9:6b:89:f6:98:d4:34:54:13:
85:9d:9c:90:b9:bf:d0:93:ad:e8:b4:73:33:d2:8d:e9:d5:93:
d4:24:9b:5d:ee:11:bc:f7:f1:b8:2e:6a:d3:91:c7:a7:2e:1f:
67:46:9b:fe:72:00:4c:cd:fc:31:62:32:6f:3e:67:50:66:6d:
dd:10:0c:d3:d1:f9:67:d1:07:5f:4c:2a:00:96:c0:4b:63:8c:
fe:e7:11:a7:24:82:a9:11:0c:b7:92:96:3b:96:4b:6c:c7:50:
eb:2d:30:63:68:04:b4:ae:67:c3:37:50:43:6c:0a:3a:17:c2:
8c:03:da:4a:5d:45:7c:6f:70:b9:fe:82:2b:1b:37:bc:24:47:
96:47:53:67:68:4f:6a:c4:de:f2:46:80:56:ca:63:56:64:ad:
1f:14:d1:b8:f5:aa:cc:46:0d:40:54:3b:15:9f:7c:2f:c1:e1:
b4:a2:ea:35:59:1a:da:6c:8e:8f:15:b8:f8:67:a9:45:ab:f4:
8e:23:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:28 2026 by rpki-client