Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: 2HUAugBIYpm9CNEo2fCpda6hueVW0a9EGYfZT1y+cwI=
Subject key identifier: DE:7B:BE:37:C9:DF:CA:92:DA:C2:77:B4:F1:77:64:AF:AB:0C:CB:FB
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 01A192E8A55A906B9C8E936EEFCBEFE8B179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 1A32
Signing time: Sat 31 Oct 2026 17:01:22 +0000
Manifest this update: Sat 31 Oct 2026 17:01:22 +0000
Manifest next update: Sun 01 Nov 2026 17:01:22 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: kcQpikJgu/BvwwXaxiERDfOdcOl9emoXWGZh30uwQfE=)
2: qSWfUPbdifhrh3aKuAhxxmylP6A.roa (hash: fB+qGwcW2GhnHX2osyvSPDhd9KmuxX/DLSWIY8hF8h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:e8:a5:5a:90:6b:9c:8e:93:6e:ef:cb:ef:e8:b1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Oct 31 17:01:22 2026 GMT
Not After : Nov 1 17:01:22 2026 GMT
Subject: CN=de7bbe37c9dfca92dac277b4f17764afab0ccbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:75:b7:da:e7:40:1f:eb:6e:a0:d1:04:ce:
d8:6f:ac:d4:39:e2:83:c4:05:80:ff:e8:47:29:77:
9e:02:c2:a1:02:a2:19:9f:f3:11:7d:95:3c:90:6d:
c1:2a:5c:39:26:24:a5:7e:3e:bb:1a:be:b0:03:f1:
15:7b:1b:7f:9f:29:e4:26:37:36:4c:59:9a:23:4d:
cb:f6:8c:0f:37:83:bb:6b:f0:d6:56:36:ca:f6:85:
79:6a:87:66:ce:94:fc:ce:dc:69:51:27:17:4c:bc:
6c:79:8e:6e:d6:2c:a9:fe:54:77:c3:ca:2f:9c:12:
c6:58:8e:35:00:83:b0:45:69:9a:71:bb:c9:2a:9c:
e5:de:83:a4:33:d7:19:3d:67:f5:c0:ff:ed:47:c9:
52:23:15:bc:7c:be:a6:df:6a:41:3e:8a:74:ac:c5:
cc:43:1e:5e:42:f4:ea:27:26:82:84:f9:d9:09:20:
76:28:d3:06:85:61:01:ca:7d:da:6d:5a:9c:f8:da:
f0:b9:bb:75:a3:fd:80:f7:4e:d2:e9:34:69:c7:d9:
fb:c2:4e:c6:46:f8:c5:32:49:ab:00:0a:74:4e:28:
9f:dc:da:79:a9:79:37:42:95:a1:90:15:75:10:8b:
dc:e2:2e:bc:32:ee:9d:b6:a4:0d:54:e3:84:b8:37:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:BE:37:C9:DF:CA:92:DA:C2:77:B4:F1:77:64:AF:AB:0C:CB:FB
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:6d:bd:2d:cc:ac:9f:d6:c0:be:89:00:3e:f1:93:5a:c2:df:
a2:ca:bd:c2:9e:b5:21:3b:91:e2:4f:0e:8f:bb:cc:3e:ce:dd:
f2:72:6a:be:7c:46:f2:e3:29:fe:39:21:40:cf:47:4e:6c:2c:
61:6a:08:3d:b5:37:7f:f0:ce:75:2f:52:99:6c:41:b1:b1:97:
6f:84:79:df:ae:b3:08:90:ef:fd:60:04:1f:84:aa:ff:21:a3:
93:f3:0e:2e:cd:e4:56:17:a4:da:9f:3a:89:07:50:d2:c9:49:
dc:b3:48:0f:82:cc:ef:f3:0b:eb:83:09:1e:63:ee:ca:3a:40:
8b:15:3d:25:56:e3:98:e6:36:33:84:e8:cc:b2:f6:d3:f5:f3:
24:8e:d2:a1:5b:00:9e:c0:4d:66:a0:67:30:ac:6a:1f:71:a7:
02:b7:79:ef:3f:28:67:a4:b9:2c:8c:bd:00:a3:70:e2:91:cf:
5a:de:8d:20:78:30:3b:21:17:a1:6e:9b:c9:95:e8:30:cd:58:
a8:5f:6e:16:c2:4d:f3:ff:0f:73:0e:bf:f1:42:d5:70:54:8a:
27:2f:2c:81:a8:6f:4b:a8:4a:ac:88:05:df:04:46:a7:96:9e:
d1:8e:af:3b:fc:cd:4a:48:58:81:98:35:ec:83:8a:4c:ca:c9:
0e:e3:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:25 2026 by rpki-client