Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: qvZ+WHjtce3gB6PY3j8sxQ9h5VldplqBa+9xLOQiiJ8=
Subject key identifier: D1:1A:5C:5C:C9:BA:E8:CE:02:57:40:AE:66:39:30:E1:D3:69:47:80
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019EC0DA992506273B178CF26364C7D15A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 12:00:11 +0000
Manifest this update: Sat 13 Jun 2026 12:00:11 +0000
Manifest next update: Sun 14 Jun 2026 12:00:11 +0000
Files and hashes: 1: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: nZAupQe7B5rIQBUmYwyhy9uZEnrBO6ZJuGNYDPJYdl4=)
2: iAERyyADNkRh7t11PICWm-ALep4.roa (hash: Gs0IMRFAt2iHOW8BkO2nGyZushivLZn3vc6c0MIS3lQ=)
3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:99:25:06:27:3b:17:8c:f2:63:64:c7:d1:5a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jun 13 12:00:11 2026 GMT
Not After : Jun 14 12:00:11 2026 GMT
Subject: CN=d11a5c5cc9bae8ce025740ae663930e1d3694780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:a6:e8:4e:c8:7a:68:5d:54:4c:af:49:8c:
00:8a:b1:51:c1:bb:ff:ab:4b:9a:eb:d5:a8:d4:5f:
06:47:09:f0:2d:2b:3e:3e:18:b7:4e:bc:c6:66:17:
54:cc:54:ba:70:9f:9f:75:35:9a:3d:12:96:84:38:
19:98:fd:3b:83:f5:f5:ee:48:0d:4d:c9:a9:a5:9a:
03:8c:86:a8:63:0b:33:32:fd:32:94:97:1c:a6:f9:
54:4c:13:71:b7:db:40:21:25:c2:2b:91:a1:0e:85:
d2:f5:fc:fd:2b:24:4e:9b:57:dc:5a:23:56:1a:c9:
02:18:b3:0d:9c:58:42:ee:22:c9:67:5b:fd:11:4e:
12:fb:51:4c:6f:46:6c:b8:8f:c2:b1:e6:87:6e:c1:
8a:25:10:68:0d:5d:e5:85:81:66:42:20:d9:6a:a5:
7b:5e:04:ac:d9:dd:38:a9:a6:37:5a:4f:54:63:7e:
c9:bf:3b:70:3e:11:fe:af:cf:e9:e2:23:29:a2:1d:
c2:2f:6f:9a:59:7a:d3:81:98:f4:8e:80:22:d1:60:
c6:5a:89:07:04:8a:1d:8d:5b:24:d1:18:ce:00:41:
6f:00:b0:dd:70:73:16:d2:97:c5:5c:f7:85:4d:2f:
ae:f0:d5:16:56:a7:15:0b:5b:26:7e:3a:c7:b1:64:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1A:5C:5C:C9:BA:E8:CE:02:57:40:AE:66:39:30:E1:D3:69:47:80
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:21:f6:66:08:95:26:4f:08:25:7f:b8:a4:bb:a9:de:47:c1:
75:01:9f:23:a9:5d:fa:90:0a:c0:fa:34:8a:70:47:19:3b:6f:
8e:3a:7d:8e:a5:37:ac:3d:a7:ed:50:36:1b:2d:d7:66:2b:0d:
c2:35:f3:d0:3f:b9:c6:cc:8c:85:54:a7:4d:ee:1c:e5:da:9f:
ec:21:9e:a4:c0:c3:29:2d:73:8e:e5:d8:fd:d0:d8:dd:0a:bb:
55:2e:ea:1a:48:9c:55:3c:af:e6:5c:dc:71:46:1b:e9:de:85:
68:36:1c:a7:9f:a4:10:8c:fc:1b:62:3a:ab:32:f0:69:a6:93:
be:82:37:c7:e5:2c:98:ed:1a:59:4d:82:5d:03:4e:96:f7:d6:
41:c3:30:72:26:73:f5:41:b2:5a:2e:a5:f1:9f:3c:81:8a:88:
60:9b:57:d2:1f:db:8b:a3:74:69:6e:1f:03:94:e9:0f:61:ac:
4e:bc:8b:0e:c1:70:37:48:88:76:21:45:06:e2:01:ca:15:05:
82:f7:8e:0e:58:7f:ed:76:3f:b9:40:61:29:0c:4e:23:21:a3:
00:35:88:9a:15:0c:a9:ed:54:0a:f0:c1:b4:83:00:9a:91:a6:
c5:63:ca:b7:f7:05:b2:ed:54:18:7d:91:3b:27:7f:ff:df:48:
e4:50:63:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:01 2026 by rpki-client