Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: e8XJNMJopm0XsbApJ4pZb5VW1fl6MpmSRoAZNFv5zc8=
Subject key identifier: 4A:AC:3D:F5:08:F4:29:03:75:E1:2D:32:22:41:CD:47:6C:39:C2:17
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 019E8D9242D144CB1A8FC905672789B83B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 1946
Signing time: Wed 03 Jun 2026 13:00:33 +0000
Manifest this update: Wed 03 Jun 2026 13:00:33 +0000
Manifest next update: Thu 04 Jun 2026 13:00:33 +0000
Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: 6tsDS7nezjhSOkp2QDwOZswb3t+lafO9delB6XDRL60=)
3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:92:42:d1:44:cb:1a:8f:c9:05:67:27:89:b8:3b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jun 3 13:00:33 2026 GMT
Not After : Jun 4 13:00:33 2026 GMT
Subject: CN=4aac3df508f4290375e12d322241cd476c39c217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:37:a0:96:c6:00:bb:5e:8b:9d:e1:cd:e4:
2c:38:3a:af:4f:30:a0:7f:ba:24:de:5b:db:c9:3f:
3a:83:0a:fd:01:52:02:68:bd:a8:f3:38:25:2a:52:
f7:34:df:40:f8:9e:86:a0:5f:2d:88:7b:45:c0:91:
ea:50:e8:3e:5d:a7:d9:4c:ec:46:78:9e:a0:ce:59:
e1:4d:26:e2:3e:36:b1:da:a8:1c:c6:f8:7c:14:99:
c7:87:d8:4f:24:ce:1c:24:d7:e4:7a:ad:f5:bc:ec:
14:5c:a8:3a:31:86:75:e5:ef:9d:b2:d8:b4:7d:34:
77:a4:40:b4:21:7e:bc:5a:61:25:15:97:93:da:f4:
20:8c:08:11:65:81:76:0d:31:60:4c:bf:a8:c2:df:
a5:91:65:e2:45:1e:4e:11:bd:cb:5d:a3:4a:e2:9e:
af:1d:c2:51:db:d0:29:69:83:37:91:e9:19:f1:34:
5d:93:13:29:9c:cd:84:7c:eb:17:f6:e0:56:d1:d9:
4a:85:b5:69:92:6c:40:24:03:ec:2f:6c:09:d6:8e:
89:bc:20:19:af:12:21:a7:be:47:a4:e9:f9:56:37:
ef:58:9f:af:f5:cc:65:1e:92:4e:3e:af:64:81:7a:
8a:4c:e6:b1:52:ba:01:68:55:d9:e6:17:4e:ae:3c:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AC:3D:F5:08:F4:29:03:75:E1:2D:32:22:41:CD:47:6C:39:C2:17
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:eb:37:11:b7:1f:fe:e6:d9:0a:8e:f8:71:59:97:17:f9:36:
c1:db:b1:1f:5b:6e:33:59:6a:b6:a5:e0:ba:0b:8d:e2:2f:41:
f1:69:40:7b:17:71:84:df:b3:5a:58:43:44:4c:a6:b2:ae:02:
79:76:11:0c:fa:60:7d:fa:c2:65:22:1b:e2:9c:aa:99:3d:ce:
94:f8:cc:24:72:9d:89:dc:ce:92:d9:55:a1:5e:22:9c:f4:f9:
13:56:4d:fd:e8:b3:1b:59:00:95:0b:07:79:b9:c8:39:fe:4a:
57:ef:dd:01:22:9d:ae:22:04:2f:6a:15:4d:79:2a:47:43:70:
0c:1c:8f:e4:f6:36:c6:2b:f3:34:5c:6b:eb:d9:2a:98:69:46:
01:e9:27:f6:bc:3d:67:d6:bd:57:6f:c2:fb:c1:1f:61:63:13:
ce:e5:a3:06:ee:f1:8f:85:27:32:10:75:48:c6:45:74:88:28:
db:6c:4a:79:6b:35:a5:40:1d:6b:eb:b0:51:d8:e7:ec:47:e4:
05:5f:b0:52:e2:51:8e:ea:25:77:1f:2f:fe:ed:49:2e:fa:02:
bf:e7:df:1a:c9:6e:54:f4:f5:4e:c1:47:64:0f:8b:15:2c:e6:
59:85:f2:c2:1d:13:3d:db:cd:19:9c:52:ef:6e:3e:89:18:fb:
ed:81:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:43 2026 by rpki-client