Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: eaLT88V9p0e+2NIgslvh48uBBgfSSzzFR0z+VVcHPyc=
Subject key identifier: 3D:56:DE:77:A6:68:D0:0D:F0:85:5E:BB:C1:70:0B:50:6F:D7:64:3E
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019CAAFD659146D4BEC48D38E34E648D79DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 20:00:59 +0000
Manifest this update: Sun 01 Mar 2026 20:00:59 +0000
Manifest next update: Mon 02 Mar 2026 20:00:59 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: b6LRVrNsbVIfV7XHE3zyuRjY/67xC3EBijhiGUv5j98=)
2: DGuA7DOyGXAn98oCAGhbl48323g.roa (hash: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk=)
3: cNdUG1i54zJ-DiyzAbYp5hI1_Yw.roa (hash: Zs9p0r7/OlghiUl1YzqqCjoM6IGWezmYkoL5qYs5XiU=)
4: fmcwhaidzArdA6kvh0y-Aej9y88.roa (hash: bKNi3L38o7bRnB56dZw/HCV46FJZnj7F35iWZ5QhbjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:65:91:46:d4:be:c4:8d:38:e3:4e:64:8d:79:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Mar 1 20:00:59 2026 GMT
Not After : Mar 2 20:00:59 2026 GMT
Subject: CN=3d56de77a668d00df0855ebbc1700b506fd7643e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:31:f9:3b:0d:99:4d:6b:8c:4e:9c:28:6d:
66:8b:39:25:87:ec:56:1c:4e:7d:22:9b:a2:c4:cd:
8f:14:20:48:b1:4e:bd:39:84:73:d2:6b:e5:8f:91:
8a:e4:52:fb:27:c5:38:36:72:9e:6c:e1:0a:31:71:
c6:98:0d:b4:fb:a3:99:04:9e:89:14:7a:1b:09:71:
af:32:6f:2f:7b:66:1f:67:65:96:53:cd:13:6b:f8:
b1:c2:a5:3d:31:6f:9d:88:3c:37:97:7b:b6:f8:9b:
33:e3:73:2c:56:2c:e6:f5:ce:bc:36:ce:2f:df:d4:
09:f6:9a:59:c9:6f:aa:49:90:6d:78:64:50:c6:6b:
8b:ca:d9:74:2c:ef:ba:15:ba:b6:aa:60:ed:d4:1a:
3f:0c:dd:7a:3a:06:2d:a7:ba:e9:48:48:7b:42:02:
29:74:f9:04:92:f0:57:5a:9c:c5:d2:a2:08:46:0d:
a6:57:be:e6:9c:5a:2f:c4:ab:f1:6c:4b:ea:66:05:
39:b3:42:fe:d4:28:60:fc:88:50:ff:94:b4:97:f6:
13:b7:a8:e1:54:7d:a0:ea:f9:0f:a4:8b:ca:04:b7:
2c:23:ed:36:17:c0:51:ec:c7:8b:d3:6c:6a:96:cb:
fa:9e:33:b1:b1:43:b9:78:2f:f2:1b:be:41:ef:41:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:DE:77:A6:68:D0:0D:F0:85:5E:BB:C1:70:0B:50:6F:D7:64:3E
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ea:95:db:00:8d:32:d8:c3:6d:48:4b:c6:67:11:63:3e:88:
b6:78:4d:87:5b:2f:73:51:46:0a:55:ee:01:8e:7f:40:30:cd:
49:f4:46:02:d4:b9:95:a1:cd:0e:73:a6:86:3c:94:51:85:00:
be:64:92:cf:4f:23:20:23:9c:6e:fc:94:3b:2a:b2:11:c5:12:
6e:ef:08:c6:19:ca:c3:29:f7:21:80:78:58:ee:dd:25:6e:41:
69:42:9d:54:91:f8:9b:9f:75:ae:d2:ea:60:45:3f:ef:d5:ea:
cf:9b:1d:40:77:1f:96:b4:f4:eb:73:ff:c8:4a:64:e8:14:47:
65:45:9f:c2:7d:f1:f7:b9:40:0d:3d:d5:7e:f0:86:c8:81:f2:
cd:b8:3e:45:2b:02:a1:00:fd:b6:0f:2e:c8:4e:bd:38:ee:95:
d2:85:b1:cf:71:0a:c1:3e:80:3d:b1:35:0b:dd:fb:31:93:fc:
1e:26:9f:91:d7:e9:9a:3c:35:37:41:26:0f:ff:8c:6c:6f:10:
60:6f:fa:b9:45:c2:06:d9:16:8a:32:4a:5a:d8:05:8d:6b:42:
22:a5:94:f1:b6:31:6c:64:f3:8b:a6:24:89:be:f0:1a:04:3c:
ed:45:25:9c:32:70:7c:ad:48:8d:01:94:01:aa:34:a9:d6:68:
1f:8b:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:49 2026 by rpki-client