Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: WJXiKGpXCO0HvrgyWfRXh9wVwAfbUgln2Nm0r9wNSCk=
Subject key identifier: 99:AB:04:F5:9C:65:97:32:E9:AF:FB:E0:BC:C2:B4:17:B3:53:59:B1
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019CAF7ECB7A1B70DBD54FAE9E0DA42786C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 051D
Signing time: Mon 02 Mar 2026 17:00:48 +0000
Manifest this update: Mon 02 Mar 2026 17:00:48 +0000
Manifest next update: Tue 03 Mar 2026 17:00:48 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: borZ2WvODIC5uZ6txx1wfKXsRmgXAvVJQlQZ+z6ofX8=)
3: T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa (hash: Iv53mpeLIF4jhLKuNnWEt8LtAUDhecBCNu6Oav+UHYA=)
4: odsSUTtPJPY75I9Zu_ls8a1wvOc.roa (hash: 8zQ2Vdy6wu34NWAET+jUEJ6+Fe7oiwnmUhMA5ElAuFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:cb:7a:1b:70:db:d5:4f:ae:9e:0d:a4:27:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Mar 2 17:00:48 2026 GMT
Not After : Mar 3 17:00:48 2026 GMT
Subject: CN=99ab04f59c659732e9affbe0bcc2b417b35359b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:f0:ff:5d:e8:f5:2b:72:45:aa:13:f6:1d:
1e:e2:d0:57:5b:b6:82:cd:6e:51:28:24:76:f5:e3:
4b:1c:e3:ba:86:56:9b:0c:14:8b:57:5b:91:6a:f5:
7c:57:a2:24:e8:f0:cb:39:e6:c5:8c:ef:c8:91:03:
61:2a:fa:08:cf:7d:d7:5e:b1:e8:59:34:c3:73:9b:
c7:2b:d2:22:f2:87:e9:48:9c:44:8b:73:aa:d8:aa:
e2:58:0e:aa:08:ca:ab:bb:5a:0c:b6:de:93:d4:42:
db:2b:38:62:a7:ea:43:e6:07:f4:a2:10:5b:d7:72:
26:26:72:c7:da:3e:38:cb:f2:4c:8a:06:1e:0a:14:
4c:ef:6c:2f:cf:18:7b:20:78:6b:4e:c9:89:11:d5:
24:70:6c:ca:50:3d:40:aa:af:a2:3d:7b:2e:ca:ce:
e2:1d:d3:b0:bc:d1:f8:28:63:2e:2e:b3:ee:c2:b2:
be:a5:1a:95:8c:a4:9f:22:58:f0:ca:1a:10:40:9c:
8e:1e:56:d4:f3:14:08:a6:e8:a2:1e:be:0f:2f:8a:
82:5a:9d:d5:4c:17:c2:3f:22:1b:6e:dc:b3:19:f4:
62:dc:ba:66:60:64:6c:2f:1c:c5:bd:ac:ce:c7:32:
b6:7c:c8:d0:13:bb:86:2b:b6:9a:32:40:61:0c:08:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:04:F5:9C:65:97:32:E9:AF:FB:E0:BC:C2:B4:17:B3:53:59:B1
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:9d:26:6e:07:c3:b6:0b:55:f7:a8:db:2e:3d:32:9e:fb:
1a:0c:3e:bc:9a:fa:cd:33:d4:1d:54:59:85:42:d3:15:cb:af:
17:c9:b1:ca:b4:0b:f0:97:45:4a:1e:ae:af:ac:8d:15:66:df:
63:8a:b7:b3:69:03:14:f4:e8:44:0f:c0:f9:e6:c7:dc:9c:fd:
6f:99:87:fa:39:76:dc:8d:cd:37:e9:06:0b:23:cb:70:63:64:
e0:2f:a1:42:e8:25:15:59:8a:a7:e3:37:71:56:91:6e:49:69:
44:80:ed:3f:1b:91:cf:16:40:65:19:27:f8:cb:97:30:c7:69:
29:6c:c2:01:b9:26:82:3a:05:7d:d3:c6:ff:a1:3d:2f:ef:3c:
5d:df:4e:bd:52:56:ec:04:0b:bc:eb:56:99:7a:43:d7:af:b9:
65:3b:b2:9d:72:4e:5a:2c:99:bc:40:5d:4c:91:73:1b:37:40:
fd:cb:97:5b:8f:e2:b1:f5:e5:71:98:6a:da:15:fa:c7:7c:9c:
9f:a6:a3:fe:db:09:51:64:da:76:c8:19:98:f9:ce:29:1d:48:
24:2c:47:1e:6d:da:2d:cd:97:45:b6:41:55:a7:68:64:88:b3:
5f:3d:4c:93:18:30:37:5b:c0:dd:17:f7:98:de:52:6d:5d:18:
63:64:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:32 2026 by rpki-client