Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier: PNiE9GS0RBgPXCEo+OZhDGIx3QKblK6wGgTPREKR01M=
Subject key identifier: D7:5E:C7:77:22:48:8A:44:67:DB:46:02:06:B4:25:B0:96:14:0D:7A
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019D96CEF299D6CCF488CFE0EB94E094B7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number: 0BF1
Signing time: Thu 16 Apr 2026 15:00:38 +0000
Manifest this update: Thu 16 Apr 2026 15:00:38 +0000
Manifest next update: Fri 17 Apr 2026 15:00:38 +0000
Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=)
2: IY-cX-MNALu4IC_OTud7vyl-LrA.roa (hash: EREk8HtkB+3C+caNH7Ch6KSJNkDCyci86tLaep5Ej3s=)
3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: +LM0qm7CB3YejXd8I7MCMsQik/rHk+rX7EVab3uTROg=)
4: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=)
5: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=)
6: QU7_3XfMPgpIQHQ50_jrWQFQx7o.roa (hash: LAB6ax0DqVCa39oB2jLFatVSxmBNDm8xZgfRNR237Ws=)
7: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=)
8: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=)
9: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:ce:f2:99:d6:cc:f4:88:cf:e0:eb:94:e0:94:b7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Apr 16 15:00:38 2026 GMT
Not After : Apr 17 15:00:38 2026 GMT
Subject: CN=d75ec77722488a4467db460206b425b096140d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:a5:9a:ab:a9:0d:0b:a4:cd:68:07:49:6b:
be:34:c7:3c:54:c6:8c:5c:a7:fd:04:ac:73:5f:3c:
29:c2:13:73:51:ff:35:fd:79:38:8a:45:6d:49:b9:
14:85:44:13:5e:dd:fa:2c:2e:4c:00:ee:a8:11:2c:
07:b4:a7:c2:45:f0:b5:36:4c:bc:29:54:51:ed:69:
01:e6:c7:1b:55:c2:5b:6c:ca:98:f8:aa:ea:5b:07:
85:2c:50:8c:7e:7a:91:98:27:5e:eb:77:57:e7:97:
cf:c9:e8:50:4f:5f:1c:d4:5f:ca:64:ff:8b:c2:22:
44:f9:6f:8f:32:f0:5f:16:7b:60:f7:de:08:8a:05:
26:6c:50:81:89:91:e7:0b:05:c8:b0:30:12:ad:61:
23:8a:b3:2d:83:db:18:59:a8:5b:2d:39:7e:39:ec:
74:17:88:e6:1a:58:08:8b:67:56:5d:b9:24:e1:fe:
15:99:40:c1:73:5a:93:de:7a:d2:6b:3d:3c:0d:dd:
af:cb:54:ca:fb:2f:78:58:20:8e:0e:ce:fd:cb:e4:
d2:ac:d3:d5:31:2d:65:01:92:90:1c:24:a5:63:f1:
14:a2:28:51:28:32:9f:30:8b:e3:04:ec:5a:79:62:
e6:aa:ce:02:d5:a4:63:c5:dc:15:91:bf:4b:9e:65:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5E:C7:77:22:48:8A:44:67:DB:46:02:06:B4:25:B0:96:14:0D:7A
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6c:b6:2c:85:a0:0a:06:98:17:bb:4d:ba:9e:2c:e5:d3:72:
4f:4f:f6:41:d4:cd:d9:39:d4:53:97:87:04:11:49:ad:73:b4:
73:fc:4c:1c:2e:c5:36:ca:78:0d:f7:bf:8f:b8:ce:65:a4:73:
1a:97:91:57:83:dd:fb:b2:95:aa:3b:02:bd:f6:86:5d:28:09:
31:f0:7d:30:6e:8f:1e:71:86:e2:0d:12:cb:26:34:2f:11:ae:
01:d3:70:d2:25:ec:a6:24:6b:38:f6:3c:78:56:da:b1:63:66:
c3:2f:29:50:3e:9d:50:f2:a2:bd:3d:1a:65:9d:8d:95:23:3e:
af:51:e4:ff:b7:aa:22:09:dd:32:9f:81:d6:6c:2c:ae:8d:82:
09:9e:27:96:7f:ec:19:3c:a3:ff:c0:8d:1b:34:cc:95:51:6e:
44:ba:58:75:c7:b0:45:1c:b6:ac:d2:79:0d:0a:b2:40:c0:12:
87:24:c5:d6:4c:c4:fc:00:5a:be:92:40:88:b4:a0:e8:dc:b6:
16:ed:85:00:3d:5c:e2:68:5e:96:c8:85:dd:30:b2:bd:8f:fd:
fe:71:56:28:98:d2:dd:5a:a5:c3:af:53:f3:d8:76:4b:b6:72:
59:5e:82:18:b5:db:76:29:e5:b9:b6:3c:63:29:6e:81:fe:22:
b2:f7:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:43 2026 by rpki-client