Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: /yguO+nhsPrd8HiyRzuI7rCJfJBM8W/uEnPy2pXLf+M=
Subject key identifier: BC:46:08:D0:C7:7E:30:28:01:73:0B:4E:82:80:8C:B1:CA:21:58:6D
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 01A0CCDA3E577060A1CEA32F89454A3BA3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 098D
Signing time: Wed 23 Sep 2026 06:00:49 +0000
Manifest this update: Wed 23 Sep 2026 06:00:49 +0000
Manifest next update: Thu 24 Sep 2026 06:00:49 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: +HRXEZ3mlFCFUkaQ+G72zvRRIkhAVDAOjPeKWqybDVU=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:3e:57:70:60:a1:ce:a3:2f:89:45:4a:3b:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Sep 23 06:00:49 2026 GMT
Not After : Sep 24 06:00:49 2026 GMT
Subject: CN=bc4608d0c77e302801730b4e82808cb1ca21586d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:2a:f2:b9:43:fe:67:55:81:6f:f8:1a:43:
4a:1c:53:cc:60:5f:f4:44:57:db:b2:aa:2f:de:77:
e6:25:51:c6:e8:07:0e:e9:ce:cd:43:d2:a8:9b:fb:
7a:d9:95:91:8d:f4:23:ff:ac:d7:10:42:c9:4a:78:
3a:07:27:e2:d0:d6:90:f3:f9:ea:c2:dd:06:63:66:
78:59:8d:fa:2c:ac:e1:90:49:dd:10:5d:26:e1:65:
a6:28:87:dd:37:8a:30:39:a6:7a:63:fb:48:d6:06:
cf:b2:88:a3:4b:7a:de:e2:05:bc:83:0b:0d:bf:de:
57:d1:f5:52:8f:7a:6d:e1:0f:d0:4e:c5:ec:b6:b7:
7c:0b:a5:5c:7f:a2:87:a9:88:39:86:ba:79:eb:07:
c7:ca:d7:06:f6:5f:76:46:52:cc:88:84:9e:0c:38:
c2:43:fc:aa:0e:63:bd:3d:b0:49:b8:71:fa:14:58:
3b:ce:d3:0e:48:a2:af:3a:88:d0:9e:6c:95:40:f8:
9f:55:ff:99:91:05:eb:5d:21:3e:dc:91:66:04:93:
9a:5c:ac:30:c9:8b:2b:02:a0:49:02:c2:25:86:ab:
2c:41:ec:4f:c0:c3:99:ee:4e:65:24:f7:00:ca:da:
18:11:e9:5d:39:6b:6c:97:dd:06:0b:43:4c:ca:53:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:46:08:D0:C7:7E:30:28:01:73:0B:4E:82:80:8C:B1:CA:21:58:6D
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ee:17:68:d3:4b:10:61:1b:27:54:1d:3d:da:ca:9a:70:f1:
81:bc:48:69:df:76:fa:c9:0d:41:bd:26:90:36:37:3f:b1:88:
6a:3c:64:1a:d2:91:93:8c:0e:8b:a5:b0:52:d3:2b:4e:e2:f5:
e5:ff:b0:ae:d3:95:29:b3:05:fa:e2:d6:5f:7b:9c:e6:25:94:
5c:03:c8:38:33:65:a8:13:f1:b1:46:fe:7f:33:eb:78:0e:fb:
60:07:e6:e9:17:7c:ca:82:11:92:4b:0c:56:c5:56:ff:b7:60:
9f:b5:8a:d7:c9:f0:f0:e2:4c:2d:f6:fd:26:cc:35:d8:2e:73:
07:02:74:8c:66:4b:15:8b:44:83:53:ed:7e:44:78:12:36:97:
57:99:2d:6d:b2:64:cf:b4:c9:11:a0:15:21:9d:58:f4:c7:15:
ae:04:44:fe:f2:87:1c:1b:a9:3a:5e:61:fc:43:61:0b:3e:02:
46:83:81:45:59:15:f5:ea:9f:9d:77:d9:29:35:45:bd:c6:0e:
cd:33:14:ba:28:2b:ec:f9:aa:22:58:97:9a:4f:c6:b1:8b:c0:
51:cf:28:bf:5d:27:3f:54:6f:f9:3a:da:af:2a:b1:e4:e6:20:
1f:a2:c9:de:1f:91:a0:43:da:5f:b7:65:fc:54:4c:ed:7e:3d:
e6:70:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:17:44 2026 by rpki-client