Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: Ap5+DGVdari/wkCAIqDZQ7jmBWFA7BJs+WarXFwRcmM=
Subject key identifier: 67:2D:9C:3F:EF:88:D1:F0:9A:04:BA:EE:BA:DB:16:B2:3B:79:0B:5A
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 019D9B5123B1B42C1B6160605A1DA0882A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 181F
Signing time: Fri 17 Apr 2026 12:01:19 +0000
Manifest this update: Fri 17 Apr 2026 12:01:19 +0000
Manifest next update: Sat 18 Apr 2026 12:01:19 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: ZiuDi6vttd1mhClU/Gt8R2fqE3NHLBEkgLwuBUpRiw8=)
2: QUUpppZp8zDauROlkLTIxTpgwLI.roa (hash: vNvKmsocx19OQxUrXw+Gpw/TAekcVNyvpJWdw+KQgl4=)
3: WQi9aeWdurT9-hHS7mROPDZYtcE.roa (hash: SUNRs+2w8tLnWlynSNIymsCFNztOm0IbuLsyyjPTui8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:23:b1:b4:2c:1b:61:60:60:5a:1d:a0:88:2a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Apr 17 12:01:19 2026 GMT
Not After : Apr 18 12:01:19 2026 GMT
Subject: CN=672d9c3fef88d1f09a04baeebadb16b23b790b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:c8:d8:3b:72:71:26:e7:e9:24:23:11:08:
8f:50:b3:42:08:ee:83:bc:0c:df:e2:b1:86:fb:08:
f8:c0:37:64:a4:e0:dd:25:00:3a:b7:a6:8e:29:bb:
2f:6a:09:14:c4:87:89:66:8d:92:91:c9:d5:e0:33:
72:7e:d9:39:93:a1:21:f8:b8:fa:87:c1:0e:22:03:
50:4a:d2:18:75:85:59:74:f6:d5:58:20:39:f6:fb:
21:1d:94:fc:61:16:c4:41:15:25:cd:03:64:84:80:
da:2f:00:68:65:20:5a:c1:70:93:5f:ac:16:23:17:
0e:71:43:e5:af:e2:5c:33:f4:e3:34:c6:a6:6c:d4:
99:a7:79:2b:d0:72:12:2f:80:1a:cb:c0:e8:f3:e8:
53:3e:e1:d4:d9:51:d2:21:f7:23:90:4b:70:fd:5a:
5c:c3:6d:8e:9c:df:86:2a:7a:84:ed:5e:2f:d3:25:
02:56:1f:10:21:92:a9:d3:9e:43:c4:57:52:cf:41:
85:6e:a1:72:bd:c1:6c:a1:1e:30:dd:86:45:e8:f1:
6b:bb:b5:f7:d5:ba:03:9d:11:66:52:a6:d1:2c:de:
e4:62:c4:95:1b:41:f6:c5:1f:72:47:7b:63:5d:1e:
67:f7:d6:45:bf:e2:e0:5f:44:a1:7f:ab:86:c4:81:
3d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:9C:3F:EF:88:D1:F0:9A:04:BA:EE:BA:DB:16:B2:3B:79:0B:5A
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4b:db:bb:1e:ff:f4:75:24:a7:85:32:3b:02:3c:5d:a9:ee:
eb:9a:d3:9c:15:e3:7f:dd:ef:77:1a:33:22:11:5a:cb:e6:fb:
57:a3:5c:b3:4e:cd:17:a4:5c:82:89:53:a2:29:e3:56:d5:f4:
a9:33:b1:3f:7f:cc:dc:cd:6b:b2:06:7f:74:a4:24:9c:17:33:
71:51:69:d2:5d:e0:8e:3a:34:84:dd:43:b8:35:76:b9:1a:38:
49:e5:3b:4f:a0:02:a2:34:77:6a:5e:df:a9:fd:ff:b3:1a:68:
6d:55:34:1a:97:01:ee:42:c5:01:c8:b6:d3:4b:b4:f1:69:8f:
1f:61:47:4c:e6:f6:28:ed:93:15:ec:c3:da:a9:e6:c3:f1:30:
62:f1:48:df:eb:cb:e1:eb:03:22:ab:12:61:ed:5a:ed:57:af:
84:b0:f7:bf:ae:32:97:c8:de:e3:e8:fc:37:31:90:03:84:12:
3b:96:81:ff:f1:ea:33:86:58:69:51:49:88:63:d8:eb:8e:fc:
f1:85:5f:a8:dd:e1:25:f9:f9:07:aa:5e:e2:5a:e4:46:39:09:
91:2e:73:9c:5b:11:fa:f3:f8:8c:d0:04:84:44:8d:32:df:9b:
27:a2:dc:93:90:47:66:1a:09:a6:76:0e:2c:c4:90:16:2d:01:
ec:c4:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:47 2026 by rpki-client