Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: tv0rFK0X9IAwx4hTQwDzJ7l7U2EuTE27oC5wX24LnX4=
Subject key identifier: A6:7F:82:0F:56:E1:39:C5:0E:9D:53:DD:0E:D1:E0:0D:DF:7E:E9:39
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019D9C2D2B7436ACCE9ADDBE26031C565B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 0599
Signing time: Fri 17 Apr 2026 16:01:39 +0000
Manifest this update: Fri 17 Apr 2026 16:01:39 +0000
Manifest next update: Sat 18 Apr 2026 16:01:39 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: qPI3BX2cd01/Bj8Dqy902RAjY/tZg/ZlurPWzZMP91I=)
3: T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa (hash: Iv53mpeLIF4jhLKuNnWEt8LtAUDhecBCNu6Oav+UHYA=)
4: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:2b:74:36:ac:ce:9a:dd:be:26:03:1c:56:5b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Apr 17 16:01:39 2026 GMT
Not After : Apr 18 16:01:39 2026 GMT
Subject: CN=a67f820f56e139c50e9d53dd0ed1e00ddf7ee939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:83:26:c9:3e:af:19:a6:58:01:9f:0b:35:4b:
be:f4:f4:50:4a:a6:22:66:53:ad:20:ea:e4:38:98:
7d:d6:84:b7:a1:6c:53:b2:c3:4a:87:b6:13:08:f9:
d8:06:60:77:d2:bf:3c:7a:a6:8a:2a:5e:df:9d:02:
e2:cb:ed:cd:4a:0b:e1:39:3e:19:66:46:71:c0:0b:
65:16:c9:9d:f1:8e:4a:c5:2e:31:8e:6f:73:17:c4:
36:84:05:81:26:ca:83:72:3b:5d:e1:bf:a6:2a:85:
b1:77:ff:e6:1e:1a:0f:32:0f:7f:ab:88:88:cc:64:
2c:3f:74:b3:54:fa:47:5c:0c:75:55:54:d6:41:c2:
3d:96:50:61:69:77:2c:59:b7:0f:6a:6c:ff:19:7e:
c8:d5:f9:14:e5:d4:c0:4e:6d:21:ef:2d:01:dc:6f:
fb:a1:00:3b:6e:c1:63:b9:72:bc:2f:05:78:96:60:
d9:fb:98:d2:57:ce:d8:2e:e8:45:43:66:f3:62:79:
61:23:40:42:73:b0:64:9e:fd:fa:90:30:be:6f:a7:
63:84:fc:d3:61:e1:b0:76:45:d6:fd:dd:a0:ad:a2:
9a:da:e9:f6:8b:51:7c:8b:07:2d:1f:91:55:b9:12:
ac:f4:72:cc:c8:83:92:db:62:e2:5a:92:f0:cd:6f:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7F:82:0F:56:E1:39:C5:0E:9D:53:DD:0E:D1:E0:0D:DF:7E:E9:39
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:98:71:08:7a:b8:70:45:0d:5c:3b:4b:c7:75:49:2a:18:c8:
6e:88:bb:93:86:4d:17:19:69:99:f4:e1:0e:37:d6:4d:fe:4d:
c4:ee:12:da:30:9c:fc:08:95:30:f4:5f:de:7d:24:d5:50:03:
e5:74:ac:41:8f:d8:6a:4e:11:3a:5f:22:4e:64:20:ae:04:2a:
34:1f:de:fe:01:35:4d:31:6a:d5:03:b2:28:70:49:86:77:82:
b1:b0:79:d5:0b:5a:85:21:02:15:46:1c:e3:1a:4e:d7:d9:52:
4c:e7:ca:d9:d2:b9:ea:af:13:83:30:b0:77:6e:bb:2c:8e:b4:
78:a8:e0:8e:e9:f4:8c:e3:33:1e:9e:eb:c5:10:bc:83:9a:ea:
8b:c1:5f:fa:32:b5:a4:0d:90:e7:eb:22:af:5c:07:ba:4e:1d:
5d:9e:5c:ab:99:e0:e4:2b:89:46:67:27:d4:bb:18:57:26:e8:
20:1d:08:4d:33:48:92:6b:99:e3:6e:4e:83:4d:0b:ad:23:12:
9c:19:aa:ed:b3:89:92:aa:32:be:b3:64:bf:54:2b:59:2b:64:
26:72:81:31:60:32:47:e6:71:07:87:c1:e2:72:82:58:a9:4a:
64:15:8d:8f:5b:ba:af:de:f7:ca:4d:89:21:47:c2:71:52:74:
9c:58:04:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:14 2026 by rpki-client