Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: Uqg3h+WeoLS5HoapcZOn0ekWRqpwn5rat2ZRhDvFTr8=
Subject key identifier: B5:0F:D5:58:5F:27:A2:09:BC:2C:B7:6A:8F:4E:D3:0F:73:3A:45:5A
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 019D9962DC901EEF911A02C72E0A8DC9640F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0F7E
Signing time: Fri 17 Apr 2026 03:01:26 +0000
Manifest this update: Fri 17 Apr 2026 03:01:26 +0000
Manifest next update: Sat 18 Apr 2026 03:01:26 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: zXLI2uzl50aTBwr6Em/Aymbq6Yp77M8svFI+mg6tgfw=)
2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:dc:90:1e:ef:91:1a:02:c7:2e:0a:8d:c9:64:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Apr 17 03:01:26 2026 GMT
Not After : Apr 18 03:01:26 2026 GMT
Subject: CN=b50fd5585f27a209bc2cb76a8f4ed30f733a455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:74:16:45:b9:c7:75:ed:ce:6c:1a:6a:ec:
61:04:b1:47:47:69:db:5a:b3:f3:10:b9:2c:9d:bc:
02:13:5f:a5:0a:71:62:c9:ec:ec:c2:32:38:63:c8:
8e:67:30:be:b5:b0:58:24:c2:24:e5:43:89:2c:de:
43:c3:55:a1:d5:ca:c9:62:70:87:54:61:df:6b:6a:
a1:76:4a:11:50:6a:77:ea:52:5a:66:1e:3c:55:55:
28:19:44:77:30:9d:ad:d8:e8:5b:a2:92:a2:96:2d:
3f:60:16:aa:03:62:b4:e4:a5:ff:2e:d3:0c:d1:73:
0c:45:5b:00:5a:5a:ad:c1:18:b4:8d:c2:05:71:d8:
f3:e5:e8:67:38:d7:cd:1a:c8:a4:be:e5:29:6c:67:
96:a8:32:a0:0f:e5:b1:aa:54:1f:30:bc:bf:cc:08:
ad:1d:72:16:61:b1:5e:77:ad:f0:0c:01:9b:4b:66:
72:78:a2:92:80:fd:1e:6d:53:b6:e1:fa:7a:f0:20:
ae:c6:c9:0b:36:55:77:90:f7:62:86:57:ba:07:a5:
06:df:7a:6f:a3:de:ce:15:d6:29:bb:74:7e:ef:8c:
71:df:5d:a8:b7:b3:e3:f6:eb:6f:76:11:85:75:d5:
53:88:1e:2b:16:d1:6c:55:c7:e9:7b:69:a0:b1:1f:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0F:D5:58:5F:27:A2:09:BC:2C:B7:6A:8F:4E:D3:0F:73:3A:45:5A
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ca:3c:fb:19:36:e9:8f:30:b7:2b:39:13:fd:5e:37:94:1e:
85:29:d6:5b:3a:98:00:10:db:68:8b:fe:4f:05:86:cc:1d:1e:
3d:d6:5c:6d:ed:f5:de:95:27:e3:2b:ab:43:d2:68:b6:1c:06:
42:f7:1d:eb:cc:00:41:58:34:af:23:06:ce:47:63:9d:75:b7:
12:ff:05:51:9e:6f:03:5f:e9:af:21:b7:53:6f:f9:ea:52:39:
ee:9c:8c:1a:fe:65:9a:70:d8:3e:93:03:e8:c5:54:c1:70:d7:
3a:24:84:39:ac:c9:4b:9b:e1:75:f0:00:5e:84:b9:bd:1c:75:
d6:c4:97:98:6d:1c:42:9b:b9:c7:84:34:0d:0d:aa:f2:19:be:
88:a2:5f:04:2f:2d:aa:fd:da:6a:62:a4:1e:53:aa:af:13:fb:
d3:f1:b3:ce:c9:e7:fa:aa:07:ac:35:26:22:f9:77:e8:a2:07:
fd:cf:44:6b:45:e0:cd:da:a2:5f:68:88:70:83:f4:f7:19:81:
4d:ee:d8:5c:2f:fa:fe:a1:b4:21:75:01:84:78:d8:54:50:bc:
45:7c:ec:34:fd:67:31:26:de:2b:eb:d9:46:0d:a9:72:56:3a:
a3:79:9a:72:90:50:9d:78:ae:34:af:fd:2f:7a:66:7b:c8:f9:
94:07:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:17 2026 by rpki-client