Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File: iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier: IoGwppQlLxdrwVQQK5SoWNSUUnDx5BwodRHH6g0/sMQ=
Subject key identifier: 81:D3:03:57:7A:A7:FE:63:A1:16:16:10:50:5F:3D:1B:1D:ED:F1:77
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial: 019D992B554D05A3CC8860D6B1A58BAC38D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number: 0605
Signing time: Fri 17 Apr 2026 02:00:47 +0000
Manifest this update: Fri 17 Apr 2026 02:00:47 +0000
Manifest next update: Sat 18 Apr 2026 02:00:47 +0000
Files and hashes: 1: 4GRqDQUSb-zxr8Uio1ztz9ttwpQ.roa (hash: ATHhAZBwTjYGOPvU16akA/fsoKv3w9kmqPeuvaUthH0=)
2: EdRGRNAOunRYG7-_JByQf_-npzI.roa (hash: hCZ1ruXMfJaNp5NsNXemKDBnVae+viS5ZTIr51GpNRQ=)
3: On2nk-aByUGs4ZA6emj31XEJdso.roa (hash: DD3HadfYy5dPFXQsNsDN3ezTTc4+paMyIyZQDpChk8M=)
4: QmnB2CMIfe5umcxczxRujV0wYEk.roa (hash: lwZAzq1D6hmN+6U+dqklR1EjzUoOQPeBNTMLHAdXkGQ=)
5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: jBtVzUkvGDiXSmTHjvywekwa35WaMZavNv1uRXk9ARQ=)
6: tsHmi25vrKfns5kPGhl6myHWaVw.roa (hash: 8MIMAYAM0/jsI9v0uOOSYvki5uUrLoYRmY+NS2ZIDRg=)
7: vX_8fXaxigdlWpe1tG-xpUdtIoQ.roa (hash: XxkJj1YMXQmGGy2zQBCP59NASJ3xuWotiNT/aTYNmvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:55:4d:05:a3:cc:88:60:d6:b1:a5:8b:ac:38:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Validity
Not Before: Apr 17 02:00:47 2026 GMT
Not After : Apr 18 02:00:47 2026 GMT
Subject: CN=81d303577aa7fe63a1161610505f3d1b1dedf177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:10:79:09:b4:d5:13:31:7c:ea:f5:ff:11:
6a:10:b7:4b:f4:35:6b:cd:5f:ee:59:7b:99:ea:28:
0c:e5:b2:62:e8:58:84:58:bc:4b:ea:ed:ba:4d:45:
45:8f:ce:2f:16:8b:52:d4:88:6b:d9:7c:1d:e2:fd:
69:c7:cf:53:b4:b1:fa:22:d2:7c:46:9c:4e:99:38:
07:be:0c:38:ae:12:fa:0f:7d:20:1f:f4:62:71:f6:
2d:d1:58:da:4d:0a:5b:c0:c8:9c:a8:0d:ed:57:93:
5c:a9:0a:62:a6:4f:98:9c:f9:a2:f1:a4:07:10:89:
7f:b5:82:d7:a1:5b:90:ef:50:ee:23:7d:98:b5:2b:
a2:65:e8:8e:fc:62:f2:c1:96:56:5a:9e:f6:a0:c2:
7e:3d:0a:f0:09:4d:3f:b4:83:1f:76:81:8f:1d:b5:
c5:17:df:96:16:9a:4d:26:f9:e3:40:88:98:a3:a7:
27:ee:a5:0a:99:d4:c0:f5:2e:2f:89:10:e9:a9:74:
44:72:6e:2e:50:62:3f:f7:e1:b0:6a:c6:75:c6:f6:
46:45:ae:5d:71:6f:b9:34:07:93:42:15:4d:07:3e:
8c:c4:d4:7e:de:d6:f9:30:a8:12:39:e9:a5:56:43:
05:82:06:73:0a:ba:4d:c7:b7:e4:82:ae:75:77:c6:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D3:03:57:7A:A7:FE:63:A1:16:16:10:50:5F:3D:1B:1D:ED:F1:77
X509v3 Authority Key Identifier:
keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:64:65:c6:ef:0a:73:ab:8d:a3:44:18:80:c0:df:30:65:5d:
42:8a:5d:da:97:42:e8:5b:18:35:82:0f:6b:d3:bb:7d:cb:76:
23:37:5e:97:3c:70:3a:32:5b:18:ae:79:ba:39:7b:ea:bd:ad:
30:46:a4:62:c5:2d:50:c0:ee:b4:85:45:fb:1e:b9:c5:eb:98:
ca:93:1f:f8:54:01:e9:fe:45:3f:4f:49:7d:97:12:67:0b:0e:
06:3f:b7:24:3f:b7:bd:20:44:46:2c:1c:f5:2a:a0:8b:29:ac:
83:76:89:cc:79:19:68:d3:2a:c9:b4:09:5b:60:41:b1:c7:88:
91:b3:95:7c:d6:f4:20:48:3b:42:40:6a:fe:f6:c9:f5:81:13:
9a:f7:65:cf:4d:dd:57:a0:17:f6:7f:d1:92:e4:a5:65:c4:dd:
31:05:4b:0c:d0:59:65:11:9e:91:8c:26:6e:0e:e1:69:b7:ac:
14:1c:c3:9b:8c:4e:df:32:35:5f:e6:b8:11:99:c7:89:c1:e9:
6d:5d:00:74:96:7c:b4:5c:ce:39:6d:30:87:00:0f:56:ad:b1:
dd:f1:d6:ae:d6:89:33:c1:9a:d7:65:cb:d3:de:d3:bc:4b:51:
de:aa:b6:be:11:fc:db:b4:8f:07:13:70:99:fd:18:b5:62:7a:
6c:f1:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:54 2026 by rpki-client