Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File: IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier: AwikhEBkxWqxuPSM2j1+/2hgo3+ApYYLjcr/7RuQxl0=
Subject key identifier: 6A:D1:F3:9C:57:F9:0A:D5:B2:21:96:7B:2D:77:70:A1:CA:61:88:03
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 019CAA58E13065B9491B94A565EA1B1CB573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number: 06D6
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: Bb0AlX7LVs8xu9FbBxHR7jZ41sc.roa (hash: 1RAeUNL+1NswFK++fmlLXs7tYc2gvuypR/zGLkI4pFk=)
2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: +YISuQM95r/bkKMdnVnNx+QL94yS0H+UtxWTUNw2T9o=)
3: wuwvCCyqsgM8AhmBamIU1CDvuC4.roa (hash: 7kzHmkdddwIql7JhhvogOzHNgfL2sl/BzbMljE2+YF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e1:30:65:b9:49:1b:94:a5:65:ea:1b:1c:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=6ad1f39c57f90ad5b221967b2d7770a1ca618803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:43:bf:2a:89:c3:1e:6f:9b:28:4a:39:ba:
c5:29:98:10:7d:8f:8f:f9:2a:32:80:41:21:3b:a4:
0b:ba:8d:82:e2:96:1e:cf:56:8f:16:98:d9:2a:e0:
48:a2:88:85:8b:47:c4:c1:82:a0:07:c0:d5:a5:4e:
bb:50:25:37:6d:cb:36:6a:72:76:8c:28:41:b6:11:
31:56:c4:7e:23:6f:f7:28:44:d6:53:fd:24:7e:b6:
9e:06:25:6d:48:e4:c0:e7:df:53:85:a6:5e:1f:24:
7e:53:45:b9:7d:be:db:59:72:93:4d:56:79:c8:fc:
84:60:13:20:ac:e5:9f:8c:cf:1c:07:a5:1e:02:68:
c3:81:89:b4:f9:6a:1f:ac:f9:49:f0:5d:dc:3e:4f:
50:76:c9:78:16:75:37:b9:c9:dc:f2:77:7a:1e:3e:
62:c9:4b:cb:88:7b:89:f1:c3:e3:c2:9c:1a:57:ae:
08:25:eb:88:ba:ed:15:05:96:d4:bf:de:c3:ca:ee:
f9:b8:26:26:24:25:26:d7:95:f0:28:5d:f0:91:5e:
93:d2:d4:2e:c9:6d:3c:a3:ba:46:48:4e:32:93:41:
80:10:b9:e6:0e:33:cd:fd:24:2c:f5:76:ad:4c:38:
d9:1f:6d:9b:88:0c:c5:68:a6:0f:2a:f7:b3:4b:34:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:F3:9C:57:F9:0A:D5:B2:21:96:7B:2D:77:70:A1:CA:61:88:03
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:86:4c:89:f2:7b:dd:37:98:cf:ea:01:9f:79:aa:05:43:02:
84:19:05:c0:7f:11:99:39:cd:f8:df:a3:f5:32:97:b3:2a:a4:
f2:76:73:6a:b0:6b:9d:26:56:25:21:d0:27:6f:e3:2d:5e:e5:
f2:96:a5:00:df:66:27:36:b0:fe:67:40:1a:6b:34:1e:43:b6:
a9:8d:88:d1:47:7f:20:45:95:dd:36:a2:6f:76:e2:ac:76:19:
5a:00:7e:9d:c8:be:62:a6:b2:09:6e:eb:22:4a:32:cc:a2:d4:
c5:db:f6:72:8c:a8:9c:07:ae:ad:d3:cb:f1:a2:cb:8d:6b:78:
12:b0:8d:2e:ee:81:a7:1e:4a:db:e7:46:37:af:99:c2:d4:80:
27:51:98:72:d1:30:f3:f4:08:a2:16:bc:d0:de:1b:ab:ae:ec:
43:a1:04:e9:d7:a9:b7:6c:f3:e9:5a:c2:f2:ba:64:d9:eb:f9:
ea:d8:0c:c7:ef:9f:49:b6:0c:85:52:d2:e9:49:1d:ed:da:e1:
b5:c4:e4:fc:a1:9d:9f:6f:5c:03:fa:a7:01:a4:fa:9d:7a:bc:
c8:1a:59:17:47:3e:6f:f7:d2:32:61:f6:d0:d9:51:33:02:ab:
f2:e0:02:20:8f:af:20:b4:06:02:e6:0e:00:2a:2d:17:cc:b3:
af:d3:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:02 2026 by rpki-client