Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: /ID74NrIKsNDYkGjNxiRbFqvz738+of9TJ1BqqXBtMo=
Subject key identifier: B0:89:33:A4:7C:28:18:58:B1:D6:A6:AA:6E:B0:5E:2E:97:D0:47:5A
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019EE66874132B1F1FC30ADFB0A3441C6A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 196E
Signing time: Sat 20 Jun 2026 19:01:05 +0000
Manifest this update: Sat 20 Jun 2026 19:01:05 +0000
Manifest next update: Sun 21 Jun 2026 19:01:05 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: lYrbEfltZNqCwDIMYdscxj0hFCbwEhgq6pV6eRz/7lQ=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:68:74:13:2b:1f:1f:c3:0a:df:b0:a3:44:1c:6a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Jun 20 19:01:05 2026 GMT
Not After : Jun 21 19:01:05 2026 GMT
Subject: CN=b08933a47c281858b1d6a6aa6eb05e2e97d0475a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:22:46:0c:d2:70:1c:c3:76:09:c0:60:09:
9d:0d:b5:45:ae:22:c8:24:ba:83:d4:cc:d6:6a:4e:
60:7e:88:2f:01:a2:93:1d:22:8e:a0:6f:87:71:4b:
0c:ec:b5:9a:90:62:f9:3a:2f:02:5a:4b:38:ee:2c:
ae:9b:f7:1c:ea:31:4e:a1:f0:cc:68:bf:9a:36:1a:
b2:7e:9a:5b:ec:cf:85:da:e3:1d:3d:23:8b:c4:9f:
2e:80:a0:35:71:c2:fd:4a:e0:e4:6e:31:08:38:69:
ca:95:ec:09:83:73:ba:90:53:f1:2a:97:8e:cb:3c:
fb:11:ad:08:04:99:ed:f1:12:df:a4:a5:d5:2e:0a:
1c:e4:14:a1:89:6b:e6:6d:4a:62:9b:b5:38:f3:42:
88:21:3e:f4:43:9c:52:da:6e:53:3c:67:25:f2:22:
59:19:f1:0a:8f:f2:d6:15:b2:0e:7e:84:09:6b:0a:
e3:39:53:46:b3:fa:e6:8c:13:34:b8:54:95:46:30:
1d:19:8d:d2:3a:04:1f:af:14:25:f7:b4:29:9c:ef:
0f:c3:80:c5:1c:be:1c:01:b5:29:bb:7c:00:6c:6e:
5e:b5:86:46:9d:df:2b:3c:6c:90:23:c0:b6:2b:35:
c1:11:c4:0f:53:80:ac:5f:25:f4:31:7d:a4:a2:8a:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:33:A4:7C:28:18:58:B1:D6:A6:AA:6E:B0:5E:2E:97:D0:47:5A
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8b:4f:94:43:fa:91:f4:17:ab:ad:5b:37:be:45:50:c6:15:
91:86:88:b3:98:62:28:f0:d4:44:eb:5a:f0:d3:ea:cb:42:43:
bc:55:a3:67:17:8f:c3:87:fb:8d:6d:2c:7c:7d:ca:f3:31:68:
ba:8f:30:c1:08:e6:0b:91:e9:60:fd:53:d6:47:9f:34:78:63:
46:60:0e:0d:16:d1:c1:ab:b9:39:06:f1:ca:c2:36:e7:75:05:
4b:b1:ef:0b:3f:f1:0c:b3:cc:7f:b5:4b:89:c8:86:8d:5a:87:
90:59:ea:3a:8b:c1:82:4b:7a:67:34:bb:14:9e:b4:e8:80:00:
31:c9:e5:b6:41:8b:38:d3:de:95:cf:eb:f6:36:91:47:43:6e:
4b:34:4b:20:00:25:1b:af:1b:51:f1:96:69:73:bf:fd:e8:7e:
65:9d:2f:31:97:ae:1d:8e:0a:40:33:6a:90:22:ef:dc:de:1f:
51:b2:52:1e:81:43:9b:82:ed:bd:9a:a8:22:b4:51:0f:06:fa:
9f:50:a2:5c:49:d7:c9:96:cf:8e:79:8f:e8:cd:ba:34:62:45:
54:18:a7:86:d3:e7:94:1b:26:54:31:78:2b:c9:3e:8c:fd:85:
b6:ef:4f:b7:18:89:38:58:bf:9a:c8:33:ea:a2:b3:bd:16:5e:
4a:e8:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:00:14 2026 by rpki-client