Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: fDZcmeFMwDrU8D13pbLEeQZfuyG1t+NNIXKovTMgw2g=
Subject key identifier: 17:14:B3:52:D1:09:6D:35:B4:B6:7B:4A:32:F8:6C:60:1D:C8:02:8B
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 019CAD5A3EBC82E3DF85B2CEDA74471828F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0C55
Signing time: Mon 02 Mar 2026 07:01:38 +0000
Manifest this update: Mon 02 Mar 2026 07:01:38 +0000
Manifest next update: Tue 03 Mar 2026 07:01:38 +0000
Files and hashes: 1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: pZjBJE/2CJ5LGKQhiIRSVTA0zOsj8FB64pLSA5qc1FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:3e:bc:82:e3:df:85:b2:ce:da:74:47:18:28:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Mar 2 07:01:38 2026 GMT
Not After : Mar 3 07:01:38 2026 GMT
Subject: CN=1714b352d1096d35b4b67b4a32f86c601dc8028b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:d5:d2:c1:ec:e9:fd:fe:4c:77:be:5c:69:
a2:01:07:a1:f1:1d:2f:ba:90:82:f6:1d:18:d3:c1:
94:35:9d:75:3c:f3:48:04:5c:be:44:b2:97:f8:97:
14:0e:5e:84:aa:ca:cc:a6:75:30:28:d4:ab:37:99:
00:2c:4c:a4:8c:af:76:66:83:31:32:50:cb:64:80:
96:0e:0f:02:31:66:49:1c:74:87:c6:d7:e6:33:ed:
de:9a:f7:83:02:76:27:c9:5a:78:90:98:8a:45:07:
f6:40:d2:89:c1:f7:21:8d:9c:dc:26:6b:30:ea:f9:
40:8d:69:a2:06:ae:b7:69:fb:52:f0:ee:48:c6:e5:
a0:90:43:2b:da:1a:d7:d4:56:2b:28:bb:f9:68:ec:
d4:52:9a:9c:11:04:b5:1c:50:ea:78:8e:4c:4d:a9:
60:89:aa:55:e4:fa:88:23:d2:25:0d:cd:c2:49:c2:
da:bd:f4:3d:34:50:9e:b0:1a:e8:20:1c:8c:5e:d0:
79:a5:e2:0a:09:85:d6:71:83:74:39:de:af:7d:51:
66:d4:01:dc:09:02:6f:c1:4b:0a:cc:60:96:03:ae:
ac:c6:58:7c:c7:49:30:ce:dc:f1:6e:06:5b:73:65:
03:ce:23:55:64:ff:5e:e8:ae:ca:2e:73:67:d8:ab:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:B3:52:D1:09:6D:35:B4:B6:7B:4A:32:F8:6C:60:1D:C8:02:8B
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c2:65:95:eb:26:28:c8:0a:f8:08:85:d5:07:f1:df:bd:ac:
a8:38:8c:1e:ec:70:36:ee:74:46:6c:06:af:29:97:a2:0c:f1:
a3:fc:98:ca:fc:48:5f:50:97:07:07:5b:cd:20:d2:74:ba:c7:
9f:47:c3:c6:ce:7a:97:c0:d5:e0:a7:3a:fb:e4:d1:c3:0d:9c:
a0:01:e0:c2:08:5c:c7:08:da:83:75:d9:4d:78:4c:34:35:cb:
4e:f9:ff:c4:b4:9f:0f:d4:5f:ad:63:01:1c:9c:3a:88:14:39:
c9:25:f4:51:15:09:a1:28:e8:a4:23:c8:04:5a:a3:3b:44:5f:
4a:f2:b4:49:db:2f:ce:ed:c1:a5:88:f5:03:c1:44:8c:01:65:
43:ec:f8:b1:d2:21:58:33:fa:78:1c:ef:be:c3:2c:4b:d3:ae:
70:9d:a2:aa:1d:b8:22:d2:86:4b:36:cc:f8:27:43:2e:e1:cc:
b7:cd:87:6d:70:2a:e4:dc:47:cd:b9:f2:0d:99:87:a0:d0:4e:
30:d7:c7:df:ce:6b:1b:11:9a:b7:1c:60:a0:8e:2d:a8:5d:eb:
b8:89:38:41:e1:2e:fc:22:a8:c0:e6:96:ec:32:ed:45:93:22:
27:27:81:da:0d:d0:aa:ac:a8:ef:48:92:9f:a5:01:57:eb:a8:
32:47:c7:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWj68guPfhbLO2nRHGCj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjQyZTBhN2I2MGNmZGViOGUwZTAzZmY5YWVjMzNlNWFi
N2QyYzgwHhcNMjYwMzAyMDcwMTM4WhcNMjYwMzAzMDcwMTM4WjAzMTEwLwYDVQQD
EygxNzE0YjM1MmQxMDk2ZDM1YjRiNjdiNGEzMmY4NmM2MDFkYzgwMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbjV0sHs6f3+THe+XGmiAQeh8R0v
upCC9h0Y08GUNZ11PPNIBFy+RLKX+JcUDl6EqsrMpnUwKNSrN5kALEykjK92ZoMx
MlDLZICWDg8CMWZJHHSHxtfmM+3emveDAnYnyVp4kJiKRQf2QNKJwfchjZzcJmsw
6vlAjWmiBq63aftS8O5IxuWgkEMr2hrX1FYrKLv5aOzUUpqcEQS1HFDqeI5MTalg
iapV5PqII9IlDc3CScLavfQ9NFCesBroIByMXtB5peIKCYXWcYN0Od6vfVFm1AHc
CQJvwUsKzGCWA66sxlh8x0kwztzxbgZbc2UDziNVZP9e6K7KLnNn2KuPdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcUs1LRCW01tLZ7SjL4bGAdyAKLMB8GA1UdIwQY
MBaAFIokLgp7YM/euODgP/muwz5at9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUt
OGE4ZDRjNjkxOGI0LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUtOGE4ZDRjNjkxOGI0
LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicJllesm
KMgK+AiF1Qfx372sqDiMHuxwNu50RmwGrymXogzxo/yYyvxIX1CXBwdbzSDSdLrH
n0fDxs56l8DV4Kc6++TRww2coAHgwghcxwjag3XZTXhMNDXLTvn/xLSfD9RfrWMB
HJw6iBQ5ySX0URUJoSjopCPIBFqjO0RfSvK0Sdsvzu3BpYj1A8FEjAFlQ+z4sdIh
WDP6eBzvvsMsS9OucJ2iqh24ItKGSzbM+CdDLuHMt82HbXAq5NxHzbnyDZmHoNBO
MNfH385rGxGatxxgoI4tqF3ruIk4QeEu/CKowOaW7DLtRZMiJyeB2g3Qqqyo70iS
n6UBV+uoMkfHGA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:43 2026 by rpki-client