Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: cG8pfjk0RwWScT1awQ1tIho2E8UEcT48x1fyqbyG6w4=
Subject key identifier: C1:E4:7C:D2:41:CC:66:35:A0:B6:EA:DF:DD:DD:11:5E:A9:12:E7:BD
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 01A1593053A871F608C1F05EB8C1DD70C038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 1AB9
Signing time: Tue 20 Oct 2026 12:01:41 +0000
Manifest this update: Tue 20 Oct 2026 12:01:41 +0000
Manifest next update: Wed 21 Oct 2026 12:01:41 +0000
Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: nE9jSy7sbw10g7Zw7H2boY/yzVIp/40BL8moQiLngfY=)
3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
4: _7_wNAAicXXR8TnkXBd8yEi3uyI.roa (hash: h9pGjgHIL3tTstEJ29nRaeXUPN78zKTK73VStArFxz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:53:a8:71:f6:08:c1:f0:5e:b8:c1:dd:70:c0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Oct 20 12:01:41 2026 GMT
Not After : Oct 21 12:01:41 2026 GMT
Subject: CN=c1e47cd241cc6635a0b6eadfdddd115ea912e7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:f1:87:8a:44:58:43:37:a7:1f:c8:6d:c4:
eb:ed:31:66:4c:d4:53:b2:93:b8:7b:e6:c0:bb:56:
ff:95:f7:6d:1f:22:b8:2f:b9:0e:77:4a:ff:e3:3a:
1b:a6:55:1d:87:aa:6d:e1:9a:ed:01:d7:3c:bb:26:
9d:0a:c2:ab:6b:26:ac:12:d3:f0:46:9b:63:a5:1c:
bf:29:8f:b5:65:a8:f7:fc:f1:85:05:22:47:0d:57:
e7:32:89:20:6a:ea:85:5e:75:91:22:b4:d0:b9:5f:
26:f5:74:5e:49:dd:53:e2:27:47:c9:30:fd:da:ef:
9b:61:b9:ff:43:77:73:22:6b:a8:0c:bb:3a:fa:68:
42:b1:23:a8:e9:a6:0f:05:c8:ac:99:a5:08:44:3e:
2d:a6:8d:c4:85:05:18:b8:7d:70:c1:3c:8a:d2:fb:
8a:b5:7b:c0:30:41:9e:68:f7:d2:35:d3:62:1a:e3:
37:32:a1:34:d2:6b:03:84:3a:f6:4f:de:17:c8:80:
71:0c:eb:07:ab:9e:04:25:ba:8f:37:77:c2:31:21:
89:78:80:11:d6:c8:5d:36:4e:95:48:66:4e:a6:a4:
ed:d5:fe:3c:32:45:32:93:4e:5f:59:1a:b9:e1:e6:
eb:22:78:88:49:b3:8d:3f:14:ca:d5:a3:2e:d1:b4:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E4:7C:D2:41:CC:66:35:A0:B6:EA:DF:DD:DD:11:5E:A9:12:E7:BD
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:b9:f1:53:c4:6f:e4:c2:de:b5:bf:c8:e4:69:d7:ed:e8:
28:b7:9a:7a:5e:8b:1b:25:b3:aa:d1:6c:48:40:54:21:6f:fc:
8d:74:ee:c0:1a:b0:60:b7:35:2d:a4:0b:86:1d:e8:87:ba:2b:
fb:f2:87:35:21:36:2a:14:bb:9c:a9:f7:7b:28:fe:9d:65:ff:
27:ac:67:c4:e5:3c:1b:5c:25:bf:25:6d:df:16:2a:3b:c3:77:
39:d7:4a:77:7d:03:0a:8f:84:93:ac:f4:85:fa:3d:aa:38:8b:
9f:34:d8:00:4b:f7:0a:90:0e:f8:ab:4d:34:2f:5f:91:a4:5f:
24:32:74:e4:f5:94:51:26:1f:d1:d3:75:62:38:cd:e1:05:d4:
22:d1:50:3d:ac:9f:cf:8a:2d:4e:f1:c5:51:ae:da:54:3f:51:
d0:40:65:78:b7:4a:1a:31:58:da:c4:ee:89:44:ad:cd:3c:85:
73:5f:5a:2c:94:c9:08:02:8d:38:dd:49:8e:a6:14:24:78:58:
ee:36:ee:8a:a8:7b:cf:37:01:2a:d4:21:a7:2a:f9:eb:80:41:
c4:76:e9:8d:8c:dc:c1:88:97:b8:ae:62:17:1d:eb:89:22:77:
01:0b:52:dc:24:de:b4:b8:86:23:0c:72:02:78:76:ec:dc:74:
7c:27:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:04:01 2026 by rpki-client