Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: tQemaE4emThrs/E8d8Etq3sii91As3Y7DYXHEZkOQSA=
Subject key identifier: C2:3C:1C:49:22:C0:04:15:42:FA:66:E4:41:19:0B:57:35:6C:87:A7
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 01A110E0513C30687C5D11ADFFE5947399E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1A95
Signing time: Tue 06 Oct 2026 11:01:38 +0000
Manifest this update: Tue 06 Oct 2026 11:01:38 +0000
Manifest next update: Wed 07 Oct 2026 11:01:38 +0000
Files and hashes: 1: 1-lozbj90cEVrWfLXpW3TMtR_PG4.roa (hash: yo16aFrNe1K/8qY2QGw1QDgUIGMnW024P9x1aOJw2jM=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: yhypdgtaU+4iOSQ+TLP9Pn+Pa0xSyt8iJM37KUM7QKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:51:3c:30:68:7c:5d:11:ad:ff:e5:94:73:99:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Oct 6 11:01:38 2026 GMT
Not After : Oct 7 11:01:38 2026 GMT
Subject: CN=c23c1c4922c0041542fa66e441190b57356c87a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:d4:10:5c:c4:d3:b1:fd:c8:ec:19:fd:09:
ce:13:b8:c5:5e:56:a2:0f:b9:08:ce:77:b8:c7:06:
a4:15:8a:65:49:ce:fb:4b:78:91:fb:18:59:6e:c4:
70:6c:3b:65:8a:ca:57:84:9f:92:41:4a:8e:25:80:
d5:90:1a:f4:99:03:e1:db:e1:00:e1:b6:be:33:8c:
14:d0:89:a7:72:0f:66:88:c9:5f:46:03:59:f6:2c:
a5:b3:a9:60:6f:37:56:51:de:14:cb:ce:e0:64:96:
d2:c0:97:10:a3:41:f0:a3:90:8a:c2:c9:1e:eb:37:
5b:43:ab:e1:82:7c:8c:ff:a5:01:4c:28:33:6d:4b:
45:71:8f:9f:06:29:d1:ad:3d:ac:aa:f7:eb:e9:9c:
15:1c:bd:e5:2e:c8:14:7b:70:fe:7e:27:70:4d:3d:
b0:06:5c:14:c0:28:5a:6e:f6:3a:d6:04:44:38:4c:
9d:0a:16:1a:60:b0:bc:a5:41:18:87:52:4c:d3:11:
37:2c:12:85:16:42:4e:84:97:aa:43:25:6a:6d:c1:
e7:2a:5c:82:19:5d:6d:5b:09:7b:9e:81:68:b9:ed:
3c:f0:75:64:0a:e8:a7:5d:6d:af:1e:1e:36:e2:f2:
9d:65:78:ce:99:7c:25:7b:3f:99:70:5b:ad:3a:6d:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:1C:49:22:C0:04:15:42:FA:66:E4:41:19:0B:57:35:6C:87:A7
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a8:21:12:4e:42:55:30:31:f1:a1:5b:8b:76:08:50:25:1b:
46:7b:68:8e:9e:68:e6:bd:48:1d:f8:98:0b:bf:19:79:59:9c:
44:9c:74:9a:1f:99:fe:26:ab:91:4a:5a:73:db:06:08:f2:14:
a0:e1:f3:45:98:19:f1:5f:13:3c:ce:71:f0:02:3f:11:72:c5:
9a:e8:72:e1:f2:72:1c:e1:57:97:73:db:59:d0:8a:c1:c0:dc:
37:98:68:1d:e6:23:05:10:53:61:6c:b5:48:5d:57:2e:c2:10:
19:3a:2a:15:81:fd:05:c5:d6:78:c6:26:2e:36:27:7d:a5:57:
65:e6:f0:2b:90:3e:37:8c:35:fc:08:da:fa:7c:b0:3e:9e:a7:
87:ab:aa:2a:c2:22:f5:77:d2:31:c2:23:e3:fe:f5:69:a8:d0:
2c:1e:e9:5f:ee:a8:dd:43:d3:87:dc:b7:f4:fd:11:97:6d:de:
bd:62:7a:61:17:86:69:3b:e5:38:52:01:03:cb:7f:74:f6:15:
50:07:90:ef:45:82:ab:b2:cd:13:8b:3a:8b:10:36:2c:4f:d3:
0c:cd:32:fd:41:80:ec:d8:ba:e6:c6:3a:42:cd:16:81:20:db:
4e:85:53:e4:74:12:07:e9:fa:cd:2e:b6:fc:7b:bb:b7:be:85:
44:54:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:47:09 2026 by rpki-client