Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: d/EvNG1uvLTrDXeP8QDm3X7Ijg0ECBTHyLeaIpB2Hig=
Subject key identifier: 5F:2E:E1:52:FC:D2:8C:1E:3B:C4:AD:21:06:26:50:FE:57:70:C3:04
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 01A06E71195DF2B1B2719CCA3A752F9E1943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 1A3F
Signing time: Fri 04 Sep 2026 22:01:40 +0000
Manifest this update: Fri 04 Sep 2026 22:01:40 +0000
Manifest next update: Sat 05 Sep 2026 22:01:40 +0000
Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: lCTgdDsKxC/TjYbGkH7LY/vL+9HDl6RDZfY4v8671W0=)
3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:19:5d:f2:b1:b2:71:9c:ca:3a:75:2f:9e:19:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Sep 4 22:01:40 2026 GMT
Not After : Sep 5 22:01:40 2026 GMT
Subject: CN=5f2ee152fcd28c1e3bc4ad21062650fe5770c304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:3b:ce:62:d5:06:46:41:f0:c4:f3:f6:81:
81:6e:29:2a:9b:85:57:5b:e2:8c:21:53:ed:d4:dd:
94:6f:d0:48:71:a5:31:05:a0:eb:c6:d1:41:5a:c5:
f7:af:17:d0:1d:e5:f2:09:2d:a4:fd:04:43:24:6e:
ec:c7:9c:d7:a2:1b:7e:aa:24:34:c4:ff:46:54:99:
68:60:6b:91:df:b5:9c:77:72:3c:41:a8:6f:63:f4:
d5:71:5a:e4:cd:00:f8:ae:ce:23:fa:e5:da:19:5d:
3d:93:4c:43:2f:47:44:7a:e2:db:1d:79:47:4c:46:
c2:76:f2:8a:03:96:2e:b1:2e:79:92:67:c7:48:b7:
98:f2:fb:7f:54:a5:90:ae:78:53:aa:19:83:1a:d9:
2e:b9:7c:0d:b5:54:83:65:7d:4a:8f:ee:69:20:d0:
85:39:22:f0:d2:c3:ef:fb:29:a1:6a:85:bf:e3:ba:
2e:f8:25:25:5d:da:85:80:e5:2a:e7:f1:9e:63:a0:
99:ea:f1:94:8c:aa:06:48:50:93:36:a5:db:b2:ab:
41:6e:5a:91:2b:ed:d7:25:7d:18:a4:a8:cf:37:4b:
af:0d:56:27:5a:95:ca:bb:68:3b:a1:b3:d2:bd:cb:
d0:29:a1:f0:48:9e:28:3d:37:15:ec:10:cd:f5:ea:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2E:E1:52:FC:D2:8C:1E:3B:C4:AD:21:06:26:50:FE:57:70:C3:04
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:13:ad:72:30:49:1a:a4:cd:a4:5c:29:77:d3:c1:d2:b0:fd:
bb:6a:80:fa:db:3c:32:87:e3:8c:4f:ee:18:b0:6a:e1:a4:9a:
91:3d:25:19:6f:32:6f:80:a9:a7:91:e1:5a:20:97:1e:31:9a:
c6:7a:e2:74:bd:ff:00:31:5c:88:1b:2d:ff:a0:04:e6:1b:2b:
d7:c0:2e:89:98:15:a1:ad:58:12:0e:4c:9c:cc:b7:66:61:68:
0f:4b:25:ae:20:0e:2e:05:cc:48:5e:ea:2e:35:9b:b7:b7:ec:
2b:f3:01:89:25:b8:7a:cb:11:59:dd:53:5b:3c:d9:13:fe:d0:
04:94:3c:9b:c8:de:7e:90:89:4f:c8:8a:98:58:5e:02:8e:30:
dc:5a:d6:cf:8e:1d:45:70:7b:b3:98:44:39:60:47:b6:da:bf:
ca:34:aa:44:56:a1:89:6e:f7:1f:54:52:a9:a2:55:0c:f1:6d:
a3:5a:e1:06:85:1e:64:35:2c:3a:4a:e6:30:d2:2d:a9:98:6c:
48:f8:f4:08:32:83:c0:a7:09:c9:cf:2f:ab:60:ca:85:73:0d:
51:e5:c3:e9:c9:52:55:6b:89:ef:b1:52:eb:58:1f:0e:9c:27:
8f:61:7e:63:03:a0:ae:13:6a:a9:b5:4b:cc:01:94:d6:22:71:
a0:84:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:53:57 2026 by rpki-client