Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: diQarTigGbMRnxCpKeEzPQ9KTFlr36dF3RhequsePUw=
Subject key identifier: AB:79:7B:92:84:59:7E:57:F1:D9:D2:1F:24:31:BE:DC:78:6B:AD:8B
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 019CADC78D717D45D933928061203DFE10D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 17A4
Signing time: Mon 02 Mar 2026 09:01:02 +0000
Manifest this update: Mon 02 Mar 2026 09:01:02 +0000
Manifest next update: Tue 03 Mar 2026 09:01:02 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: Ia4A/cxjWHUvfHaoy6tZyXpr5bnQzIgXnk7JsrsM9+A=)
2: QUUpppZp8zDauROlkLTIxTpgwLI.roa (hash: vNvKmsocx19OQxUrXw+Gpw/TAekcVNyvpJWdw+KQgl4=)
3: WQi9aeWdurT9-hHS7mROPDZYtcE.roa (hash: SUNRs+2w8tLnWlynSNIymsCFNztOm0IbuLsyyjPTui8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:8d:71:7d:45:d9:33:92:80:61:20:3d:fe:10:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Mar 2 09:01:02 2026 GMT
Not After : Mar 3 09:01:02 2026 GMT
Subject: CN=ab797b9284597e57f1d9d21f2431bedc786bad8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:f3:e4:2f:03:63:26:67:c8:60:80:2e:9d:
61:dd:54:f5:2d:73:10:fd:90:60:d6:d2:1e:92:d1:
c0:3a:c6:0a:28:2b:63:50:99:e7:f2:5c:da:cb:d2:
01:54:14:de:2e:2a:ac:b7:01:ab:8e:2a:7d:71:4d:
7b:a5:f1:29:65:ca:65:1c:a1:75:d5:3d:e0:27:1c:
2d:2f:88:f1:58:c6:df:3d:a8:ee:19:f2:b1:7c:ea:
c6:04:fd:4b:fb:2a:ae:75:a7:7f:ad:8f:38:a4:8f:
cc:4e:c5:bc:35:69:7d:d4:a4:f9:d1:30:38:58:fd:
75:13:06:a8:cc:b8:e2:8c:6a:4f:e5:4c:c9:e3:83:
63:52:df:36:46:f5:b4:f8:5f:78:e9:7d:5c:36:cc:
33:53:de:c6:87:7b:e4:e5:dc:10:57:cf:5c:b9:88:
e2:69:12:b7:95:77:1a:ee:f4:4b:1d:2a:2e:7e:60:
d9:19:52:db:42:48:03:3e:62:8b:1a:80:8d:97:0d:
37:42:fc:b9:55:cc:7c:43:e2:1e:73:fc:a2:a4:9b:
c8:46:4d:d1:ca:e7:7f:9e:5e:5c:df:58:dc:fd:60:
bc:42:81:0b:25:22:46:d9:4b:a3:79:1d:cf:b7:a2:
b3:02:6c:33:d7:e2:f4:d8:ea:60:6a:f0:d8:b2:ae:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:7B:92:84:59:7E:57:F1:D9:D2:1F:24:31:BE:DC:78:6B:AD:8B
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:39:57:c1:f9:38:e7:e9:f9:ba:e7:98:55:a8:8d:98:7c:
4b:7b:57:9a:33:ed:d4:21:60:ef:e8:f9:e6:e9:65:e4:7e:11:
c4:33:50:e6:4c:b9:66:e7:37:55:c3:33:4a:85:a0:ce:78:b7:
01:17:a0:93:6a:e1:88:75:d7:5e:bc:c3:f8:ae:82:65:26:77:
51:8e:08:58:49:2f:51:9d:6c:d9:af:bc:e3:d1:fc:ed:3a:62:
27:39:93:d9:ff:80:59:33:e0:69:bc:f7:61:2b:12:6b:32:72:
87:c7:73:c5:24:ac:4d:4c:a0:85:6b:f1:b5:92:1f:10:68:16:
6b:06:45:0f:1a:fb:9b:35:aa:6b:c2:b5:85:68:ee:37:90:91:
b5:5e:5a:5f:30:f2:9b:79:64:31:7c:45:a3:b6:64:52:c7:b2:
a5:5d:76:85:33:de:65:6d:5a:ae:a6:84:cd:a2:56:33:d8:80:
fc:f2:18:07:9f:5f:f3:da:d4:ad:15:e7:85:66:ed:81:22:24:
8d:c2:df:4c:77:13:89:a1:d8:49:03:bf:a8:1c:e8:6a:83:41:
25:6f:de:6f:8d:ea:02:92:64:7b:be:2c:47:67:5a:f7:d3:9c:
7f:7b:28:d8:a8:ae:57:cc:eb:18:c9:18:4f:29:dc:10:b4:fa:
1b:c3:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:06 2026 by rpki-client