Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: GFFJo6aCBIqTgJPy31LXgsX4XaeWzNA/Lwc15WgV8jk=
Subject key identifier: DF:DD:22:B3:98:B0:29:E0:E3:8D:01:D0:B2:D9:D1:61:83:F4:68:12
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 01A0C9A2812C328761F2FB6E60A4E695CB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 154B
Signing time: Tue 22 Sep 2026 15:01:05 +0000
Manifest this update: Tue 22 Sep 2026 15:01:05 +0000
Manifest next update: Wed 23 Sep 2026 15:01:05 +0000
Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: blctD1xsxtYDDP4GLc9yWpsJO1IOetW77coyaRdJQ40=)
2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:81:2c:32:87:61:f2:fb:6e:60:a4:e6:95:cb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Sep 22 15:01:05 2026 GMT
Not After : Sep 23 15:01:05 2026 GMT
Subject: CN=dfdd22b398b029e0e38d01d0b2d9d16183f46812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:21:f3:ec:f2:a5:be:11:b6:5f:fa:c1:fa:
70:14:98:51:20:8e:be:a6:0e:32:fd:1a:f1:71:0e:
1c:2f:01:65:51:c7:5f:52:12:1c:a7:12:0f:7e:db:
b6:53:be:4c:fe:71:9d:60:48:c8:6e:d3:c2:9c:c4:
f3:4f:21:03:41:a9:0b:00:88:64:97:69:80:fa:50:
cb:58:7e:df:0b:7e:59:fd:20:92:f9:a3:50:66:59:
be:8c:11:97:1c:93:91:43:7f:f8:28:47:bf:23:9c:
c2:6c:0a:46:52:f0:bd:a4:3c:85:b7:19:c6:1a:0a:
cb:78:ab:fa:43:66:62:64:d6:01:72:06:ae:1a:cd:
fc:77:b0:c0:3b:52:61:15:e7:f1:a1:7e:ef:2d:bb:
2e:51:2f:d6:38:54:5b:26:b9:b7:e7:cd:f2:80:f8:
10:59:1a:55:d4:b7:98:88:ee:e7:3a:60:4e:0e:7e:
ae:7f:f1:b2:60:0b:2f:e7:87:b9:7b:31:35:a1:4c:
43:2a:df:07:5a:2b:9c:81:9d:94:9a:12:fa:b4:d2:
a0:30:c6:1a:d6:79:1c:ef:0e:aa:21:78:76:3b:39:
22:0a:6d:d1:85:73:62:34:6c:86:6b:b0:b6:f1:43:
d4:73:52:14:1b:31:12:7b:1d:57:82:e8:6d:58:c5:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:22:B3:98:B0:29:E0:E3:8D:01:D0:B2:D9:D1:61:83:F4:68:12
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:df:ff:20:32:a2:b2:30:7a:72:1f:c3:0d:d2:c6:1e:f4:22:
bb:0b:8f:c1:32:ae:e2:9e:74:72:18:3d:1e:44:60:c0:57:7c:
fc:f4:d0:ec:81:0d:b4:ed:7d:0d:7e:ee:2b:33:06:33:eb:85:
6d:3c:fa:28:02:c8:cc:0a:65:65:be:e8:5e:fb:d2:72:da:48:
10:88:8c:10:ea:15:d9:ac:c4:63:54:de:3e:07:50:84:0c:88:
d2:f0:7e:20:a1:a2:14:ea:c7:fd:9b:74:82:f4:eb:bf:c0:1e:
76:c3:ee:7d:92:15:fd:a9:06:cf:44:ad:a2:30:0b:1e:1d:38:
fa:65:e4:44:4e:ee:71:92:62:7e:40:aa:e1:38:cf:3e:c1:fb:
02:6c:65:53:f9:c9:cc:78:02:76:5f:6a:74:20:40:b6:60:75:
d9:9e:ce:f1:4a:2b:82:f1:b9:19:3d:dd:d3:e2:87:4d:d6:f7:
e9:17:ba:7f:8c:09:2e:b5:3b:ce:da:ef:30:bb:1d:5f:01:4a:
3d:d5:9c:58:0b:71:94:56:5f:07:18:b0:e4:cb:a4:94:41:6a:
7b:26:54:96:e5:97:7e:a5:40:38:a5:70:df:af:62:62:af:d1:
dd:76:fb:7a:5c:71:b1:3e:9e:9f:b3:54:6a:32:d7:0e:15:b1:
e9:3d:11:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:41:05 2026 by rpki-client