Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier: xIn4gMPocXIutLz72Q2mnIEz+XpWJS8uiAO1odPHyTY=
Subject key identifier: AC:49:7B:79:8C:C1:98:2F:77:D8:9E:42:EA:01:F9:04:90:21:20:DC
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019CAB343161A0D034C937CB1AA3E77D1F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number: 0B77
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=)
2: IY-cX-MNALu4IC_OTud7vyl-LrA.roa (hash: EREk8HtkB+3C+caNH7Ch6KSJNkDCyci86tLaep5Ej3s=)
3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: MrAMr9uA5Cd4L56z/8iENbwTAK0KnN+eqaL6lloFaJ4=)
4: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=)
5: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=)
6: QU7_3XfMPgpIQHQ50_jrWQFQx7o.roa (hash: LAB6ax0DqVCa39oB2jLFatVSxmBNDm8xZgfRNR237Ws=)
7: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=)
8: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=)
9: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:31:61:a0:d0:34:c9:37:cb:1a:a3:e7:7d:1f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=ac497b798cc1982f77d89e42ea01f904902120dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:f8:c9:b7:79:05:a6:df:4f:41:91:75:fe:
5d:ae:c2:80:e9:28:9b:9a:29:0d:71:5a:a4:46:df:
a8:d2:f5:3d:9a:f4:b7:e2:7c:92:e6:e5:c1:ce:7a:
ea:a7:97:08:70:01:e9:57:04:df:93:36:1b:5f:b5:
f0:6f:e9:8d:cb:b2:c0:d9:fe:f7:2a:dd:0f:74:4a:
a8:86:27:eb:4b:dd:27:53:15:bd:7a:c7:a2:e0:57:
e5:2e:e6:15:34:e8:12:ce:af:62:d4:e7:df:a0:d4:
52:a8:78:db:b7:fe:4f:a8:1d:39:6d:73:97:b6:9e:
44:a0:48:0f:88:1a:8f:c8:73:c9:5c:db:e0:bf:0c:
09:bd:22:d6:84:fa:c4:79:48:cb:b3:fe:da:44:1a:
9d:3c:57:c9:7b:db:c7:5a:05:d4:e4:b7:6d:3e:f5:
8b:39:d8:a3:9a:19:bc:0e:94:b2:bf:b8:fe:41:d6:
2b:bf:49:09:6d:4b:5b:28:06:72:6e:05:b4:4a:20:
2c:91:39:0b:47:00:a3:98:64:90:33:53:e2:9d:70:
21:bb:1a:d3:d4:94:9e:e1:ac:cc:ad:ae:07:f6:c2:
17:19:03:0c:f9:8f:5a:7e:34:25:ea:c4:58:b8:01:
78:1f:04:cc:40:50:ee:45:2c:e0:17:ba:02:c7:d4:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:49:7B:79:8C:C1:98:2F:77:D8:9E:42:EA:01:F9:04:90:21:20:DC
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:35:a1:72:a4:7e:a8:72:41:1b:87:78:67:08:19:9d:3b:aa:
f3:6a:6e:e8:5f:dc:f4:3e:32:94:67:9b:9f:81:41:64:a3:fb:
6c:9a:d5:48:1b:6d:91:49:31:42:61:a8:90:21:59:e8:bd:81:
59:2e:a1:2c:68:42:fb:35:0f:3b:f2:c4:ca:7b:6f:99:99:52:
44:a0:ec:87:2a:25:fe:8b:f0:4f:9e:d0:11:77:06:67:66:c0:
cd:81:72:6b:b9:d3:7f:b3:b2:59:4a:ba:5c:40:78:d9:e1:43:
08:b3:c9:03:ee:76:6f:8f:2f:b2:1d:91:a0:74:82:8b:d9:b7:
e5:48:2d:60:fe:26:cc:ad:0b:3f:28:71:e6:c1:12:04:a0:c1:
f7:a8:8a:39:2e:81:1c:67:b3:95:bc:39:e0:d6:2b:b0:2e:3c:
96:b3:e6:64:e8:d6:16:86:a5:04:9e:1a:23:6f:f7:14:cd:fa:
83:37:02:1d:58:43:3f:92:5d:b0:ae:63:cf:08:61:51:54:c7:
2f:d8:7f:b3:ae:bb:6e:a5:6f:24:aa:2a:d9:63:ee:a1:a4:58:
4a:f5:84:fb:bf:c6:94:d0:d5:dd:55:06:92:7c:06:cc:94:06:
67:b3:60:e9:8c:59:7c:40:b1:18:87:47:78:1f:1d:22:5c:eb:
4b:e8:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:31 2026 by rpki-client