Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.mft
File: IFGGYcGayWFlFSYMvTUAPxnVVwg.mft (raw, json)
Hash identifier: HcQE+dwopwJv4E88KuUFuCUsi7RPSX3IQZWDmS/Hag8=
Subject key identifier: B0:EB:AC:15:74:59:F6:21:BF:23:C1:14:87:89:79:36:E2:BE:4A:DF
Authority key identifier: 20:51:86:61:C1:9A:C9:61:65:15:26:0C:BD:35:00:3F:19:D5:57:08
Certificate issuer: /CN=20518661c19ac9616515260cbd35003f19d55708
Certificate serial: 01A18FB0C81DE848EE7C7653E7FCA10D5B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFGGYcGayWFlFSYMvTUAPxnVVwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.mft
Manifest number: 74
Signing time: Sat 31 Oct 2026 02:01:29 +0000
Manifest this update: Sat 31 Oct 2026 02:01:29 +0000
Manifest next update: Sun 01 Nov 2026 02:01:29 +0000
Files and hashes: 1: IFGGYcGayWFlFSYMvTUAPxnVVwg.crl (hash: iZrlxcKVcOJX2POfX0m79ADVlnPwXD4zSxqF+iJV2Jk=)
2: ZE4BS2JcawYJEr0tY5n1GQ_Lyn8.roa (hash: 0OEKCMODj7NnbOp0jAsOZ215i8t2tQFW2QyRXNFmwhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFGGYcGayWFlFSYMvTUAPxnVVwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:c8:1d:e8:48:ee:7c:76:53:e7:fc:a1:0d:5b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20518661c19ac9616515260cbd35003f19d55708
Validity
Not Before: Oct 31 02:01:29 2026 GMT
Not After : Nov 1 02:01:29 2026 GMT
Subject: CN=b0ebac157459f621bf23c11487897936e2be4adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:98:7e:ff:e6:68:0b:e8:1a:bd:60:e1:d1:
73:35:3d:11:43:2f:45:5a:7e:3d:9f:da:2e:b0:23:
69:f7:13:3c:40:ab:94:b6:70:09:5f:b0:35:4b:c4:
32:67:f7:16:d7:b1:53:5d:e3:f5:c9:3b:2c:68:ab:
a5:a3:20:9c:00:36:be:9a:ba:de:24:fc:98:4f:a9:
6d:39:f3:1b:05:2d:6f:da:c6:8e:3e:0d:53:71:32:
da:b1:c1:b0:47:b0:43:12:c1:5e:bc:89:0e:f1:7e:
a7:20:e9:77:9b:55:0f:bc:ad:00:3d:4b:3b:32:4e:
98:d4:5d:cb:bb:fd:70:18:96:1c:95:0b:17:f9:c4:
57:bd:dc:9f:02:35:53:cf:a5:61:f7:3f:05:92:56:
9d:22:5b:a3:f4:33:2b:a0:76:b4:85:cd:63:64:da:
da:73:17:6d:dd:09:34:4b:a6:b5:9d:f2:32:79:32:
32:4b:78:fa:ef:9a:d7:5f:83:14:89:bc:2c:7f:e3:
89:62:ff:9c:9e:d7:f0:51:55:bf:e1:6e:0b:08:ed:
81:a7:78:47:54:f1:24:f8:48:6b:10:05:ad:0b:2b:
37:33:77:b6:76:be:4e:81:4b:ee:d6:e7:c2:3c:28:
e9:3b:6a:94:1b:2b:99:fe:86:8f:82:3f:e0:51:64:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EB:AC:15:74:59:F6:21:BF:23:C1:14:87:89:79:36:E2:BE:4A:DF
X509v3 Authority Key Identifier:
keyid:20:51:86:61:C1:9A:C9:61:65:15:26:0C:BD:35:00:3F:19:D5:57:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFGGYcGayWFlFSYMvTUAPxnVVwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b2:0b:f5:fa:3e:ae:6a:76:2c:bb:1a:30:ca:77:02:d1:8e:
55:37:58:8e:a4:bc:f4:21:a9:cf:7b:89:77:e3:c6:74:dc:3e:
d4:61:82:48:2a:8f:0a:6b:12:9d:c5:ae:41:cd:e0:1a:dd:f5:
d8:96:d4:7f:6c:58:34:f6:b4:6c:98:8f:31:cb:83:72:6d:ae:
40:28:75:05:d1:6a:55:7d:17:83:3b:34:b6:d1:86:38:34:e9:
a1:c4:a6:64:bc:db:90:17:38:0a:44:b4:82:ae:36:52:14:8f:
0d:f5:4d:0a:cb:7c:ca:33:8d:22:d3:9d:c1:ad:c8:5f:7a:4d:
d7:63:39:bb:f8:8b:1b:9d:65:40:eb:1e:01:69:34:3d:be:6e:
08:df:af:91:dc:90:4f:99:e7:98:11:fc:46:8c:36:ad:4b:3a:
cf:de:32:13:d6:29:07:c8:48:0d:da:b8:69:ec:f7:b8:b5:2a:
3c:16:de:86:9a:21:23:aa:c7:e5:37:d0:83:3c:0d:24:3c:3b:
0a:0a:2d:5b:4b:9a:6d:80:11:68:bf:04:49:03:2f:f1:c9:c8:
79:9e:c8:ea:ac:0f:6f:31:83:de:58:16:b3:cf:37:d7:39:b1:
1a:3f:b4:34:a2:f4:ac:c3:66:f5:9d:95:21:62:aa:1b:4f:1e:
58:08:10:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:32 2026 by rpki-client