Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File: IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier: rWVe84+FQzRnQ0F3MYVNeyqkEbOXKrT40TdWvX0XJEU=
Subject key identifier: 56:0A:07:83:0A:C5:FB:BF:81:3F:10:49:FE:60:C8:4D:75:49:1C:84
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 019D99D0BC7E006EFE389C28109444E82461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number: 0752
Signing time: Fri 17 Apr 2026 05:01:26 +0000
Manifest this update: Fri 17 Apr 2026 05:01:26 +0000
Manifest next update: Sat 18 Apr 2026 05:01:26 +0000
Files and hashes: 1: Bb0AlX7LVs8xu9FbBxHR7jZ41sc.roa (hash: 1RAeUNL+1NswFK++fmlLXs7tYc2gvuypR/zGLkI4pFk=)
2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: 60gwmGd0ArEfbQn5EHqLnEZD2fkZnH9ItERUaIWgkgQ=)
3: wuwvCCyqsgM8AhmBamIU1CDvuC4.roa (hash: 7kzHmkdddwIql7JhhvogOzHNgfL2sl/BzbMljE2+YF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:bc:7e:00:6e:fe:38:9c:28:10:94:44:e8:24:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: Apr 17 05:01:26 2026 GMT
Not After : Apr 18 05:01:26 2026 GMT
Subject: CN=560a07830ac5fbbf813f1049fe60c84d75491c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:ca:42:aa:26:a1:5c:f1:55:35:54:0d:23:
75:3c:ef:e3:de:ed:48:39:ed:a0:28:69:a4:ef:c4:
ad:bb:ff:7a:59:45:94:28:82:d8:4d:45:02:d8:07:
d8:0a:ae:8a:c3:f1:03:72:4c:e5:1f:1a:ce:3d:5e:
70:e8:2b:0f:e2:cb:c9:e3:5d:03:ec:14:d1:36:61:
96:32:f8:f3:5a:f7:a9:03:cb:12:05:fe:e1:fd:18:
26:73:12:c2:34:bb:ce:5d:29:5c:d8:8d:fb:e8:da:
a2:1f:d2:8d:49:90:19:6c:da:e9:5a:c9:b9:cd:ab:
59:34:62:c2:23:b0:ad:54:8f:66:7c:6d:b8:11:2c:
3e:65:52:7c:1f:54:9c:8d:23:e9:ec:d3:3c:33:53:
ef:08:d5:29:1e:ba:a5:41:2d:68:85:92:fd:64:a3:
87:26:d3:2e:25:63:5f:34:d5:58:d3:b1:65:91:65:
b7:67:ce:71:84:5f:91:9b:4d:35:da:75:46:3b:41:
75:b8:63:a5:e0:17:ab:f8:a1:17:a9:11:1d:9d:ef:
6d:d7:99:0b:f1:b4:2a:83:b8:d0:75:db:5c:79:81:
c2:c5:00:33:86:9f:ce:1d:80:05:2b:87:7b:e1:9b:
74:ba:f4:38:e2:ea:6c:60:db:5c:20:8a:ae:96:5f:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0A:07:83:0A:C5:FB:BF:81:3F:10:49:FE:60:C8:4D:75:49:1C:84
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a7:e5:52:33:dc:2c:6a:22:87:36:42:21:0d:2e:0c:82:0b:
ff:fa:9a:5b:cb:d5:7f:cf:fa:e3:c1:fc:ce:da:b2:cd:ec:ff:
fc:36:f8:6a:af:77:05:52:c3:e3:c9:bb:0a:ae:26:ba:ba:17:
54:98:4d:b3:f0:c3:16:7b:4e:1b:b9:47:4e:45:44:5a:4b:33:
30:85:cf:64:dd:ce:7e:25:39:2f:dc:d4:91:85:ac:4e:5a:0c:
a5:3e:d1:0c:fb:d1:26:af:6d:6f:11:01:4d:a2:70:bb:73:75:
aa:45:72:6a:23:37:3c:0c:73:0f:70:27:7e:c0:ad:4b:2b:16:
57:8f:21:57:ff:45:ee:ac:d8:17:dc:17:32:d9:dc:cf:2c:f2:
af:1f:52:4e:d0:aa:ef:cd:ca:a5:04:0f:a1:ce:2d:d9:dd:e7:
4f:1f:6b:55:68:03:16:29:76:86:15:a2:24:7c:03:fc:01:51:
ba:4b:89:6d:82:84:32:9e:c2:86:71:46:c6:e8:d0:69:28:44:
9c:ab:6d:6d:88:5b:5d:5a:d9:01:41:2a:f3:03:61:09:36:df:
87:67:a2:5f:88:c1:bd:4d:70:6c:91:9f:c2:80:66:3e:e5:eb:
bd:a8:57:5d:d1:78:68:e8:36:e7:28:2a:8e:9d:82:d2:9f:e1:
23:e4:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:43 2026 by rpki-client