Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: pu59FR73Ni/guiZBY+MrezIFUYN1vK2PdBIUa2Ww0JI=
Subject key identifier: 9C:61:FB:B4:C2:9B:6C:EA:61:26:37:BF:DD:3A:E9:94:DF:51:F5:EE
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 019F82D5EE8A897F5BE102EB2F37EBE7014D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 19C5
Signing time: Tue 21 Jul 2026 04:01:25 +0000
Manifest this update: Tue 21 Jul 2026 04:01:25 +0000
Manifest next update: Wed 22 Jul 2026 04:01:25 +0000
Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: 6vv/an77TMdgDHezkgWHJ+Vuh9nE/5NtTu4MU2CJeVI=)
3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d5:ee:8a:89:7f:5b:e1:02:eb:2f:37:eb:e7:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jul 21 04:01:25 2026 GMT
Not After : Jul 22 04:01:25 2026 GMT
Subject: CN=9c61fbb4c29b6cea612637bfdd3ae994df51f5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:15:c2:68:4c:b3:78:58:14:54:52:9c:23:
90:06:79:c3:bb:57:3c:f1:b2:4d:26:fa:e4:34:ce:
87:bc:8f:90:6b:1e:bc:1b:86:a9:b5:14:85:9d:70:
c9:8b:ce:ac:89:16:3c:36:0f:0a:f8:58:94:fa:53:
b2:9f:52:39:c1:e1:b3:00:fc:87:cf:f9:90:e3:ad:
73:d9:dc:30:8c:53:3b:d1:63:e0:23:49:32:ed:ac:
21:46:bb:89:95:f0:1f:89:92:55:b0:18:07:86:90:
ea:3e:6b:fd:d9:30:d6:f7:da:5e:e4:41:96:14:0d:
91:db:f1:05:52:64:49:3f:5d:ce:6c:d5:9d:c6:a5:
78:72:a1:59:d1:e3:91:6e:11:29:78:bd:84:60:e7:
6f:94:a9:c3:b5:a9:46:fe:0e:55:86:08:4b:33:78:
68:30:f4:c4:bd:3d:72:da:59:f9:7a:af:f3:d5:2d:
3a:ba:52:6d:9b:7d:a1:1c:f3:d3:e5:93:b6:8a:0d:
b2:4b:43:5f:99:66:b1:e6:be:23:b9:22:a5:99:76:
a5:b5:78:9c:a8:2f:9d:16:8f:55:48:28:63:27:fc:
7e:c1:2e:21:c3:9d:2a:34:86:f3:ac:92:b9:e4:1d:
9a:1b:61:e8:84:02:9a:03:53:cd:ff:16:93:21:3d:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:FB:B4:C2:9B:6C:EA:61:26:37:BF:DD:3A:E9:94:DF:51:F5:EE
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:06:d5:77:4b:e2:7c:b2:e7:53:9f:09:17:2c:3d:ba:ce:c6:
05:7b:e8:31:1a:10:93:5a:83:e3:bc:3f:17:10:69:ae:d2:e7:
c8:b2:f4:60:8b:d6:9d:77:a2:0a:21:30:33:ec:c7:38:ca:ca:
7f:da:67:7f:01:78:bc:37:cc:a7:3c:e8:c5:b9:18:02:9c:b8:
fc:e0:51:41:47:d5:ed:2c:20:04:d6:92:ee:7f:3f:8b:fe:01:
d6:d4:b5:fc:49:d0:ac:45:e2:71:01:07:16:da:c0:e8:05:c5:
4a:d1:c7:14:a6:67:bc:8b:89:50:9a:27:3e:1b:12:d6:6c:f8:
2e:bd:ef:9a:56:23:93:b9:b6:78:f6:9b:24:1b:1a:4a:6d:06:
4f:77:7e:ee:73:cf:c0:a7:d3:3e:a8:aa:ce:a6:d4:31:ed:b4:
ba:2b:99:20:49:36:30:c2:88:90:f3:79:5a:1d:a9:8f:92:f9:
54:14:0f:6f:c4:3b:e2:ec:ae:65:4e:f1:99:c0:dd:52:9d:38:
c2:7b:79:77:8a:93:c0:70:a6:3e:5e:83:8c:af:be:16:66:eb:
bc:69:8a:7e:d0:10:32:3c:39:ca:01:28:d9:0c:e2:2f:dc:54:
0d:74:6e:7e:46:3c:67:8a:4a:af:0c:f4:53:06:10:35:71:4b:
72:ff:b7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:07:26 2026 by rpki-client