Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: mZdV85+06aEP92k2ywApFDwDXph35RPbMr/ot+f4GoQ=
Subject key identifier: 2C:6D:96:F1:07:B4:AE:4C:52:81:2B:A1:A8:3B:50:93:D0:A1:99:94
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 019CAAC6219916243ADB1215D7B3966319E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: gjzgYMADmxh6Q8pdc-WWoEw7shc.roa (hash: 0P8JuvcWmnVuYZSLeNadkGvm4K+4XLNVcmqTDBqXszk=)
2: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: k8wqV7DjC6NqBJqFWQ93MqPHFhL12MdmfZCoKzN5nng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:21:99:16:24:3a:db:12:15:d7:b3:96:63:19:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=2c6d96f107b4ae4c52812ba1a83b5093d0a19994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:8d:ab:e9:cd:68:97:a4:03:94:14:01:d6:
8d:2c:58:4b:15:a1:35:c7:8d:92:50:1c:3e:bf:30:
a1:df:a1:02:ee:2c:2d:8c:af:43:eb:43:d6:19:0f:
e1:b6:a5:2a:67:b1:1b:a5:e5:a1:4b:de:69:27:e2:
e9:36:9c:82:b5:17:7b:f9:c9:00:68:c6:a6:a3:1a:
71:6a:e7:62:95:86:30:ec:65:45:e0:e0:09:ea:ce:
68:44:49:17:27:1f:e2:ee:d8:5e:56:0c:37:58:86:
bd:f8:35:65:0c:4c:c8:b7:de:28:ef:bc:b3:61:f6:
fe:ad:39:60:75:9c:60:3d:6d:dc:7d:2b:28:bd:5d:
e8:2b:1e:8a:84:8a:b2:2b:9b:72:fd:8b:12:e1:08:
d9:dd:d2:e6:a0:39:03:d4:1a:04:0a:77:89:1a:8b:
ff:3b:82:91:d7:af:bd:ec:33:36:52:99:91:dc:35:
74:6f:37:63:13:77:29:b0:85:2f:11:f5:c1:eb:bb:
a9:a0:9a:ed:15:ac:f5:da:98:36:54:08:7f:07:11:
9a:08:9b:cc:35:33:39:90:52:2f:23:59:bb:61:3c:
19:6c:4e:c7:5b:d4:27:3e:44:a6:9a:48:fa:21:65:
52:cb:a3:5b:38:1c:dc:b0:2b:ea:e1:dd:42:cf:75:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6D:96:F1:07:B4:AE:4C:52:81:2B:A1:A8:3B:50:93:D0:A1:99:94
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:97:44:34:d6:2c:9d:ad:ca:fd:0b:72:35:11:b1:5a:af:ec:
71:4d:47:e2:f1:e2:46:b2:33:82:0b:82:8a:97:b2:7c:6e:da:
ff:db:3d:78:a3:84:c9:48:74:a6:14:9f:63:cb:fc:2d:79:f5:
2a:41:c9:7a:d7:eb:9d:dc:b9:bc:af:39:06:1e:ce:25:14:65:
84:66:4d:bc:1e:98:5c:a5:d0:34:3c:9b:2f:41:3a:3c:3b:dd:
0d:05:a8:95:c8:f3:48:a5:1f:b4:cb:9c:43:95:8f:98:67:e4:
ba:a5:70:e9:36:31:18:46:95:8a:ad:b1:22:67:89:87:ac:c8:
5f:fd:31:cd:91:77:00:3f:d2:eb:4a:1a:49:f7:60:69:22:6f:
63:10:18:d2:75:13:02:7c:8b:d3:ab:25:d2:4b:fd:5a:fa:1b:
d9:ee:db:45:23:32:bf:0e:4a:53:15:11:72:86:b1:f4:1c:fc:
84:d4:f0:1c:c4:ed:bd:4a:9d:e1:00:cd:a6:6a:60:20:22:66:
8a:aa:d2:12:8c:99:07:f7:b5:da:4e:bd:43:f9:6f:05:6b:8e:
75:54:f2:b6:ff:01:62:8c:c2:7e:34:84:62:43:9f:f0:dd:d9:
84:0f:65:eb:be:68:e1:47:65:b8:3b:ee:7f:bc:76:87:bd:ea:
0d:a8:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:27 2026 by rpki-client