Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: VbZ85V6t0mYwlghMDkgTocZBZZ8UtRIif0nTP9kJ8IQ=
Subject key identifier: D0:BA:20:A3:E1:75:A9:25:47:A3:35:9A:7E:2D:6D:3E:FB:DE:DE:DD
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 01A09020D2E6926DDDC707CD79027790F526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 19AC
Signing time: Fri 11 Sep 2026 11:01:05 +0000
Manifest this update: Fri 11 Sep 2026 11:01:05 +0000
Manifest next update: Sat 12 Sep 2026 11:01:05 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: VvNaLwie8wRP8XD3ttA981tjKYJVrLoZchXRe4ko9bQ=)
2: qSWfUPbdifhrh3aKuAhxxmylP6A.roa (hash: fB+qGwcW2GhnHX2osyvSPDhd9KmuxX/DLSWIY8hF8h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:20:d2:e6:92:6d:dd:c7:07:cd:79:02:77:90:f5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Sep 11 11:01:05 2026 GMT
Not After : Sep 12 11:01:05 2026 GMT
Subject: CN=d0ba20a3e175a92547a3359a7e2d6d3efbdededd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:01:81:6d:03:44:be:bf:c6:4c:7b:a2:ac:
28:d5:8c:bc:fb:e1:79:06:fb:f0:b2:30:2a:6f:ac:
25:6f:da:d5:3a:05:9a:c5:bd:42:be:55:f8:4e:07:
19:32:be:01:59:d9:e8:1d:c6:7d:bd:68:e3:26:1a:
a3:a7:44:e3:65:bc:09:41:80:31:9b:77:85:03:e8:
0a:24:d0:6c:07:b3:a3:25:10:21:67:38:7e:12:97:
3f:b0:97:8a:57:f6:b8:4c:fe:46:92:5a:2a:8a:55:
e4:f3:e6:fd:c0:c9:aa:8e:f8:72:fb:44:c6:01:c3:
18:05:42:16:52:2e:eb:38:2b:d8:77:d5:4f:f1:99:
38:ef:6e:71:4e:70:1c:1c:86:a8:dd:f6:97:17:0c:
03:70:7f:fd:95:81:58:b8:10:ef:07:bd:66:cd:8a:
e6:89:c6:d6:17:c7:77:58:78:c6:7d:51:9f:28:7b:
93:67:fb:fc:11:8b:ca:f3:80:1a:85:68:09:fe:48:
1a:5f:1c:c8:c2:77:20:a9:8f:11:43:4d:c8:74:9b:
0c:60:dc:69:c2:a0:0c:3d:89:05:df:a7:98:93:1b:
fb:cc:b9:30:ae:2d:68:8c:8c:33:81:c0:48:0f:7c:
95:76:f2:2f:d3:50:2d:77:c1:26:bc:30:58:95:8e:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:20:A3:E1:75:A9:25:47:A3:35:9A:7E:2D:6D:3E:FB:DE:DE:DD
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ce:93:9c:61:4f:ae:e0:8f:d0:db:31:76:84:a4:23:10:0f:
2a:c0:13:d0:88:ba:b9:65:00:f3:d1:4e:ff:0d:24:2b:ad:11:
03:8e:cb:da:08:c9:1e:76:eb:75:fb:b0:16:78:f1:69:f1:db:
c0:2a:cb:28:68:db:a5:98:9d:9c:50:f6:4e:39:86:f2:e0:74:
1f:56:a9:ae:14:7b:94:0a:fa:bb:d4:11:c5:04:96:42:ce:65:
de:c6:23:79:90:94:d6:d0:d6:4c:37:e2:8a:65:2e:f9:92:11:
e5:14:de:7d:cb:d4:57:f6:4b:fb:06:31:b2:ab:23:8c:38:56:
88:3a:5e:9f:61:b1:fe:b0:6b:92:43:6c:51:0c:e5:fd:ff:52:
3f:2f:22:4e:ca:59:cd:fb:a8:18:d1:a3:90:0e:94:bb:1e:ef:
e6:1a:6b:5e:5d:68:ea:8e:a6:66:17:c9:74:31:9b:59:c3:04:
88:cf:34:b1:db:50:fd:d1:a2:ae:fa:d2:6c:b8:22:2f:d6:d1:
f1:92:82:a0:15:bb:af:7f:aa:0a:f4:af:9e:06:81:71:d1:3b:
79:4b:80:21:08:85:f4:51:d6:d7:6e:50:b2:c5:8c:51:c2:04:
37:8d:5e:ae:61:5d:7e:68:f8:60:1d:b2:44:e2:5d:c0:c2:a4:
0a:94:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:36:07 2026 by rpki-client