Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: 7WMff3u0A4NW4RSjFTovcIccIpQSFBVYxwkfT62xl2k=
Subject key identifier: 72:F9:D4:49:A1:73:1D:A6:C8:4A:F9:92:7A:0E:1E:FD:81:BD:C2:87
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019EC52635A65DB64F7862B1051901345F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 0633
Signing time: Sun 14 Jun 2026 08:01:16 +0000
Manifest this update: Sun 14 Jun 2026 08:01:16 +0000
Manifest next update: Mon 15 Jun 2026 08:01:16 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: QuXpl2VH/xpnZBWasLUH1sM5OsRtJ0s6VEUzHlpxYzU=)
3: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:26:35:a6:5d:b6:4f:78:62:b1:05:19:01:34:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Jun 14 08:01:16 2026 GMT
Not After : Jun 15 08:01:16 2026 GMT
Subject: CN=72f9d449a1731da6c84af9927a0e1efd81bdc287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:d0:b4:05:c6:df:35:6c:8d:c6:91:27:0d:
66:f4:a5:0c:20:8e:d8:e6:d6:4a:5d:66:b2:7c:2a:
00:d5:07:bc:98:5f:c9:90:12:90:6e:45:5c:87:ad:
0e:82:7e:cd:f1:97:c8:d9:9a:43:61:a5:58:4f:37:
5f:7b:ee:d9:ff:39:ed:4a:b5:68:f4:6e:4c:15:4c:
eb:dc:c8:80:1a:41:99:a7:b6:52:93:33:e0:ad:b1:
a2:4e:aa:fd:4a:1b:7c:b1:21:55:77:69:0d:36:6f:
77:5a:c3:49:66:ff:2b:57:bd:6a:09:24:36:9e:2b:
ae:62:91:2b:f8:d0:4a:bd:87:73:c2:dc:cf:8e:88:
01:eb:18:a7:a4:d9:b9:71:13:51:d4:72:20:a8:4d:
50:e0:83:2a:60:13:4c:2e:2d:21:3e:7f:77:b4:d2:
77:d2:54:c6:13:ea:19:3c:6a:1b:4c:79:09:99:18:
6a:55:aa:91:3e:f4:de:cd:e5:a4:1b:2e:ed:80:e9:
37:22:7b:6f:dd:34:d4:83:e4:99:2c:a4:6b:4e:dd:
2b:13:86:13:29:0d:4c:55:98:66:21:a4:45:27:de:
15:17:16:1d:2a:77:3a:95:52:66:0a:3b:6c:3e:51:
56:2e:26:9b:5e:71:eb:7f:30:03:f9:90:d9:62:46:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:D4:49:A1:73:1D:A6:C8:4A:F9:92:7A:0E:1E:FD:81:BD:C2:87
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f9:01:db:79:95:d2:29:6c:6e:4a:f2:63:83:ad:72:54:ca:
e5:75:81:86:b7:6b:ac:50:25:ed:db:f7:55:e9:c2:26:ee:dd:
19:de:62:05:4b:c6:b5:30:ae:eb:5c:d9:8c:86:6e:98:ed:de:
6f:23:1e:3d:24:05:5d:be:ee:1e:f7:b6:6f:bf:18:d6:f1:40:
7b:22:e1:ae:26:06:fb:74:57:24:05:ec:5c:6d:de:c0:d9:a9:
10:0b:bf:42:12:11:cd:c6:5f:52:72:6f:b3:c0:05:db:8e:b5:
42:77:4b:2a:bc:74:f1:06:59:f4:1e:b1:8b:5a:05:65:40:40:
f3:9f:5f:1c:3c:e1:1c:eb:5e:08:98:06:ab:75:19:d6:5b:d9:
ce:41:06:99:c8:aa:da:8f:6e:ba:09:d4:53:cb:da:58:d9:81:
ac:b7:f6:13:97:cf:04:ce:82:c0:d9:20:95:5e:70:bc:5e:8c:
7b:46:99:c4:97:0d:33:2f:13:6c:03:9a:3f:7d:64:fd:93:16:
37:27:17:72:75:0c:bb:e5:02:d5:91:6f:5e:6f:91:58:fc:6c:
52:5f:fc:a3:6b:c4:cc:2f:7b:89:a7:ae:cd:63:eb:8b:47:94:
59:b6:21:6b:70:cc:89:78:0c:4d:eb:24:33:05:92:a7:1e:e4:
d1:fb:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:24:32 2026 by rpki-client