Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: Vh97kLVxEONqitkXNl2BlpsFIaXBMvW4+PE9cPJZpJ0=
Subject key identifier: EF:B9:F1:C1:68:69:FF:84:46:9E:85:34:E8:4A:D1:E5:12:CA:1F:55
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019D98BDE5463E581AAA366066C05CABAA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 13A4
Signing time: Fri 17 Apr 2026 00:01:14 +0000
Manifest this update: Fri 17 Apr 2026 00:01:14 +0000
Manifest next update: Sat 18 Apr 2026 00:01:14 +0000
Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: ZTN6HDzDZvL/lelWx2gmpwC5SJXUK9RJTQi5U1zUD0s=)
2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e5:46:3e:58:1a:aa:36:60:66:c0:5c:ab:aa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Apr 17 00:01:14 2026 GMT
Not After : Apr 18 00:01:14 2026 GMT
Subject: CN=efb9f1c16869ff84469e8534e84ad1e512ca1f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:2c:3c:e2:1b:2f:13:c5:56:7b:0f:28:5d:
12:38:16:af:0e:b1:97:6f:35:cb:7d:cc:be:05:e1:
44:86:ff:19:cb:ad:86:ae:d8:fd:a2:ce:40:4c:6f:
64:c4:8a:a1:04:6c:f4:c3:2f:3b:80:74:ef:d3:e7:
f8:cc:5b:f0:62:e8:f2:a9:6c:ee:fc:ca:86:7b:83:
15:75:ea:16:c2:97:11:1d:8c:88:3a:c3:42:f3:64:
1e:f8:8a:d5:80:4d:66:f7:78:38:f8:22:35:7b:10:
0f:4b:1d:88:d2:37:73:4f:28:fb:f5:4a:bb:0c:47:
a6:cd:ea:f3:c2:36:06:cc:da:45:f8:b5:a4:41:ee:
11:c1:1b:4b:40:55:b7:e0:23:84:ab:4b:63:7d:72:
e0:71:8b:de:95:65:fd:bd:48:0c:0c:fe:6e:23:0a:
ae:43:10:35:4e:a9:3f:25:70:8e:c1:86:7b:7c:48:
e5:7d:2b:69:eb:bb:74:e5:2b:1b:21:88:6b:f8:ef:
85:20:fd:ca:13:e7:63:84:75:f9:0c:79:b7:be:0f:
b2:f6:fc:d2:9c:35:45:db:4d:a6:c4:f2:96:71:31:
a2:0b:eb:66:ba:09:b5:59:65:77:01:69:1e:30:7f:
e9:d3:81:65:a0:a9:76:4d:2f:7d:a5:54:03:4a:e2:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B9:F1:C1:68:69:FF:84:46:9E:85:34:E8:4A:D1:E5:12:CA:1F:55
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cf:00:46:be:e5:d1:d2:6f:e9:84:40:08:b5:c3:b7:f6:16:
08:3a:49:6f:5b:1b:90:42:1d:05:79:23:fe:d5:b2:cf:08:3c:
d9:5b:3c:c3:bd:0c:83:0b:18:63:14:aa:7f:cc:61:63:60:56:
2b:8e:e2:46:67:80:33:93:0f:9d:d9:d0:60:41:fe:73:df:06:
02:aa:c8:32:ad:3c:15:c5:ef:da:8d:65:3c:62:31:5c:21:a1:
fe:b1:0a:d2:0e:5a:7e:56:67:c6:62:87:05:ac:96:c9:23:0b:
09:9f:86:8a:f6:b2:fb:15:1c:02:19:28:c9:fe:13:7b:a1:93:
83:b3:a8:09:20:a3:8e:50:14:7c:04:79:bc:45:5f:7d:46:ae:
77:4e:d4:c6:f2:31:ae:2c:a3:be:67:5c:98:70:18:5f:a1:47:
6d:58:f9:4b:b5:eb:8b:67:d3:b3:66:25:68:63:33:63:90:75:
6c:a0:68:06:d2:33:22:b5:7f:1f:7d:85:6c:d8:6b:21:19:b2:
e7:5a:75:cf:3b:44:a6:6f:87:8c:00:ce:81:f1:e3:b3:7a:cc:
21:63:77:3c:74:4e:24:3e:8b:fb:63:95:76:a4:3d:3c:fb:f7:
89:7c:99:a4:d5:22:6d:f4:b2:db:b8:28:85:db:66:e5:9d:4e:
d7:59:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:35 2026 by rpki-client