Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: 7XfKTxd43vLCjM8pkG4O85Lre8RJYYF+lxVDFUOEBks=
Subject key identifier: A3:C1:03:02:F8:AC:B3:56:9B:1E:0C:91:13:9D:C7:7F:DB:E3:F5:23
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 019CAA8FA28CE53C0DF0903ED7DB47AE665C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 0769
Signing time: Sun 01 Mar 2026 18:01:05 +0000
Manifest this update: Sun 01 Mar 2026 18:01:05 +0000
Manifest next update: Mon 02 Mar 2026 18:01:05 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: C7soxcldHgWFaD21omZ1IpzB3kulc9OKCqkbDwC0nrs=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a2:8c:e5:3c:0d:f0:90:3e:d7:db:47:ae:66:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Mar 1 18:01:05 2026 GMT
Not After : Mar 2 18:01:05 2026 GMT
Subject: CN=a3c10302f8acb3569b1e0c91139dc77fdbe3f523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:53:8c:0d:e9:3a:78:d3:41:45:59:80:1e:
50:0b:dc:4c:56:07:86:ca:62:77:ba:eb:13:50:8d:
88:32:8a:dc:19:52:f4:6e:35:08:48:67:7e:60:78:
64:77:a4:a1:f9:dc:8d:98:79:d5:a4:fb:14:ce:2f:
89:ac:99:49:5a:10:96:a2:65:03:e4:89:9c:0d:cf:
9b:52:1e:ba:8b:eb:d9:a2:41:d4:c6:72:c3:94:c1:
2d:51:0b:e0:c7:61:9b:f2:8f:aa:e2:12:ef:8b:7d:
53:e7:28:13:9b:e1:d2:91:a8:0d:ee:31:2a:85:7d:
56:6e:bc:cb:de:df:54:b9:db:ea:43:de:d3:4f:e5:
8f:50:bf:cc:ec:2c:5b:c5:ab:34:06:57:22:3a:fa:
d2:7d:20:8f:06:42:a5:58:19:da:50:6e:f0:03:1f:
79:08:ef:b4:b8:2c:75:9e:fd:f6:f6:3c:ba:19:21:
17:c8:21:7a:20:ce:f6:aa:76:cd:d5:29:42:b1:a4:
59:09:b5:92:5f:2a:f3:9f:d2:75:55:89:2b:1d:74:
ad:a4:e1:c5:9f:4a:94:34:1f:c0:50:b8:fb:9e:3d:
69:5d:27:52:ba:d0:61:0f:a4:89:a4:5d:4b:a5:b7:
83:8e:39:2d:a8:09:bf:46:04:92:ec:f8:30:1d:8a:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C1:03:02:F8:AC:B3:56:9B:1E:0C:91:13:9D:C7:7F:DB:E3:F5:23
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6f:60:e5:44:a4:72:14:4e:59:49:b2:3c:90:c9:d7:a2:a8:
cc:f8:f8:f3:f6:ae:23:84:72:be:6b:8c:cc:85:63:99:db:7c:
af:80:44:d4:fd:2c:46:c5:f5:3f:3e:b8:8a:6c:35:88:e5:ba:
4e:30:97:9f:ac:5f:08:8d:05:5e:89:49:f8:4a:f1:d5:6a:19:
f2:f6:73:0f:11:ee:17:e7:53:92:93:b8:e7:b9:0f:91:8f:59:
49:47:43:01:b1:36:51:f5:95:98:33:4c:40:82:a3:ae:d9:01:
fb:14:7f:c4:66:a3:3a:aa:c4:07:f8:e7:f3:23:f0:35:46:ff:
54:8c:3c:2f:5a:53:6c:af:fd:61:e5:cf:25:09:0f:dc:20:2e:
83:25:2f:f5:56:68:a1:db:54:a4:c3:db:a4:3d:91:1c:5b:64:
20:a2:76:b2:ee:85:82:69:12:e3:98:18:af:51:f8:61:89:08:
8c:f8:68:02:a9:35:eb:c8:72:bc:53:71:f4:71:9d:e0:66:5d:
9e:69:78:94:95:a2:d1:4e:3a:fe:b6:8f:59:a4:ef:c3:30:ae:
ec:53:15:df:0d:45:e8:8c:54:44:e5:46:cf:82:16:18:45:b1:
17:14:3d:b9:7d:c2:05:d8:04:08:3d:0c:68:a9:4a:6c:e7:9c:
d1:c2:b6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj6KM5TwN8JA+19tHrmZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2
NWFkMTEwHhcNMjYwMzAxMTgwMTA1WhcNMjYwMzAyMTgwMTA1WjAzMTEwLwYDVQQD
EyhhM2MxMDMwMmY4YWNiMzU2OWIxZTBjOTExMzlkYzc3ZmRiZTNmNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndFTjA3pOnjTQUVZgB5QC9xMVgeG
ymJ3uusTUI2IMorcGVL0bjUISGd+YHhkd6Sh+dyNmHnVpPsUzi+JrJlJWhCWomUD
5ImcDc+bUh66i+vZokHUxnLDlMEtUQvgx2Gb8o+q4hLvi31T5ygTm+HSkagN7jEq
hX1WbrzL3t9UudvqQ97TT+WPUL/M7Cxbxas0BlciOvrSfSCPBkKlWBnaUG7wAx95
CO+0uCx1nv329jy6GSEXyCF6IM72qnbN1SlCsaRZCbWSXyrzn9J1VYkrHXStpOHF
n0qUNB/AULj7nj1pXSdSutBhD6SJpF1LpbeDjjktqAm/RgSS7PgwHYqRUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPBAwL4rLNWmx4MkROdx3/b4/UjMB8GA1UdIwQY
MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt
ZDdiMmFkMDFhMWQ3LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3
LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANm9g5USk
chROWUmyPJDJ16KozPj48/auI4RyvmuMzIVjmdt8r4BE1P0sRsX1Pz64imw1iOW6
TjCXn6xfCI0FXolJ+Erx1WoZ8vZzDxHuF+dTkpO457kPkY9ZSUdDAbE2UfWVmDNM
QIKjrtkB+xR/xGajOqrEB/jn8yPwNUb/VIw8L1pTbK/9YeXPJQkP3CAugyUv9VZo
odtUpMPbpD2RHFtkIKJ2su6FgmkS45gYr1H4YYkIjPhoAqk168hyvFNx9HGd4GZd
nml4lJWi0U46/raPWaTvwzCu7FMV3w1F6IxUROVGz4IWGEWxFxQ9uX3CBdgECD0M
aKlKbOec0cK2LA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:03 2026 by rpki-client