Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: mzkzNlB0HIaqOfak5Irw+IpIdoEfkZcE0J0kFNq5yj4=
Subject key identifier: 7D:58:A8:E3:B2:E0:F9:78:31:57:D8:A2:BC:CD:87:3D:E9:55:6D:7D
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 019CABA1BC97F5C03FD3BE33507A9111E7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 04CF
Signing time: Sun 01 Mar 2026 23:00:29 +0000
Manifest this update: Sun 01 Mar 2026 23:00:29 +0000
Manifest next update: Mon 02 Mar 2026 23:00:29 +0000
Files and hashes: 1: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: UByq662m2m8BZdYblgLHxz8C6lSlCm9Q+k/nGo/R2tE=)
2: x7f937Xy_FUIHRQkUrkm9MCxGxs.roa (hash: 0WmyBcbNw17aY5NG33htiVCGPfaVOrCshbMwX66ND3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:bc:97:f5:c0:3f:d3:be:33:50:7a:91:11:e7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Mar 1 23:00:29 2026 GMT
Not After : Mar 2 23:00:29 2026 GMT
Subject: CN=7d58a8e3b2e0f9783157d8a2bccd873de9556d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:70:9d:f9:4f:e8:53:79:6f:90:94:b0:20:96:
4d:22:46:a8:bd:b9:c2:82:5d:fc:78:ba:4f:f8:29:
90:77:be:75:6c:9c:19:e3:98:80:8c:04:5d:5a:e6:
0e:63:68:e9:0f:47:fd:8d:28:f5:6d:b0:d7:f0:95:
6d:e8:a8:a6:da:ea:1d:11:bb:c4:df:f4:15:42:77:
97:06:d0:aa:eb:29:26:60:ca:a2:8f:46:80:b4:90:
b4:17:d8:9c:fe:0e:be:21:ae:e1:52:be:e2:58:2a:
86:9d:1f:b4:75:6b:86:de:e4:aa:01:49:95:d8:7a:
70:ca:5b:77:29:c0:1a:ca:fa:c8:8a:88:ff:51:7c:
0c:aa:79:08:76:4d:40:19:77:61:e2:cf:54:02:a2:
8d:e2:9f:d9:7f:27:ce:d3:33:9f:b7:e0:d0:5e:ee:
cf:76:e3:95:97:74:ec:33:52:c3:9c:12:70:c1:f9:
6f:4d:7c:1b:5c:c1:2b:a1:02:69:fd:ff:36:91:e0:
33:76:20:f0:2b:0e:6a:48:3b:0e:40:6b:73:7c:53:
be:9d:45:fe:a5:e7:b4:f8:94:ec:d0:3b:fb:85:da:
e6:c5:34:4e:ed:bf:23:30:5b:40:a4:a8:45:93:ed:
61:11:4d:fa:e1:5d:42:40:f8:83:58:d4:f8:e9:b4:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:A8:E3:B2:E0:F9:78:31:57:D8:A2:BC:CD:87:3D:E9:55:6D:7D
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:81:15:d2:f6:16:19:d6:f1:6e:59:8e:1e:d9:41:4d:46:91:
09:8e:f4:fb:ed:df:88:0b:7a:78:34:36:84:ca:37:c5:b0:b8:
c5:03:89:32:c9:83:ce:d8:55:ff:fd:31:0b:32:b0:b6:97:65:
5b:a2:68:11:c0:ed:6d:e5:ed:d0:40:4b:e5:76:47:2c:30:2e:
71:3f:f8:67:65:61:90:25:99:a9:b2:7a:00:86:94:fb:31:68:
e6:06:bf:84:b3:09:d5:98:f5:71:97:d1:d4:36:a8:0a:cc:89:
60:a4:d6:85:57:0a:48:cc:2f:fa:da:0c:60:ea:d1:55:16:db:
14:c2:3a:51:12:5d:41:26:4d:ad:30:4f:69:7b:81:77:f3:52:
e4:b3:1c:42:e9:9c:c3:0f:f2:d5:a3:2f:ae:cd:99:0f:1f:2d:
ac:fd:dd:cc:5e:b0:40:37:72:7e:9e:38:68:5c:fa:86:41:2f:
6d:10:f2:c9:90:36:16:75:aa:03:99:c8:ab:e5:29:4c:d9:46:
98:e9:bc:84:18:e5:9e:ec:c5:de:d9:41:f9:fb:39:3a:84:82:
0d:70:74:69:67:ad:53:13:5f:6a:dc:e4:49:da:98:df:b5:7a:
5f:f1:eb:a0:a9:8c:10:fc:bc:b1:12:ff:b7:1d:1e:50:4b:21:
06:52:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:09 2026 by rpki-client