Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: PfKOZcAnBZMEG69k7BAoFYQO4LSzWOyyCsuVMUeTlmc=
Subject key identifier: 0E:1D:83:43:0F:DE:0D:D6:4E:79:0F:C2:F7:2B:E1:F8:5C:65:34:97
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 01A0D8A7FEF99A98C308D3B2CD0BFA458428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 13:01:23 +0000
Manifest this update: Fri 25 Sep 2026 13:01:23 +0000
Manifest next update: Sat 26 Sep 2026 13:01:23 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: geP4vOh8s3BEijEhnLkzxAkkRWteviL7H5up7DEZjUE=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a7:fe:f9:9a:98:c3:08:d3:b2:cd:0b:fa:45:84:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Sep 25 13:01:23 2026 GMT
Not After : Sep 26 13:01:23 2026 GMT
Subject: CN=0e1d83430fde0dd64e790fc2f72be1f85c653497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:1d:75:26:dd:9c:05:8e:21:48:e8:66:dc:
92:17:01:fa:1f:c2:3d:b0:f1:39:b9:76:92:7f:ec:
bf:e9:ee:9d:bd:8f:f0:90:d9:4b:7f:80:ab:b5:ce:
05:52:cd:40:9a:1b:a3:66:3e:bd:33:5a:e6:4b:0f:
e5:17:08:50:f1:f4:5a:d3:1a:4e:75:2a:39:83:7a:
41:2d:10:b1:b6:fa:9c:0b:dd:80:be:69:c3:b1:65:
ee:86:20:77:ac:44:61:f7:9e:a3:df:26:e3:33:8e:
6a:b9:d0:58:a1:a5:a7:0e:b7:4a:1a:01:0d:77:75:
86:d7:a9:2f:98:a8:be:d1:fc:1f:12:97:a0:42:de:
f0:6d:5a:35:15:90:85:bd:c7:9d:2f:72:88:7a:06:
a6:09:d7:c0:43:97:68:c8:66:9f:99:47:47:20:a4:
df:2a:63:b8:30:13:92:4d:5e:72:8f:3e:49:67:6b:
c1:b3:00:18:7d:bb:a6:52:be:12:81:46:09:43:fc:
c3:64:09:e5:41:c3:3f:43:7f:07:7d:b8:d5:33:4e:
d3:31:8d:7f:4c:5c:a2:e5:6f:33:76:b3:fa:be:7f:
ee:ce:f2:87:00:a1:96:82:7d:dd:f7:6b:73:c6:0d:
9e:b4:90:d4:36:7f:92:10:d1:ef:4f:d6:9c:02:af:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1D:83:43:0F:DE:0D:D6:4E:79:0F:C2:F7:2B:E1:F8:5C:65:34:97
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:2b:a3:c6:60:7b:ae:ec:bd:4d:be:0e:ca:c7:b7:f1:0c:29:
db:df:2d:85:cf:8a:d4:e4:6f:4a:98:35:49:d2:75:a1:f2:01:
9e:b8:92:c2:1c:3b:cc:90:a0:07:38:c2:a8:a8:85:e7:37:a3:
ec:8a:94:c3:f5:d0:2c:13:72:93:5c:b0:1f:d2:0e:dc:65:14:
a5:ac:a4:3e:c0:66:64:21:e8:b0:13:e6:a0:e8:4f:ee:cd:07:
ac:a7:b3:aa:ee:5f:4b:70:69:94:6a:26:f3:98:dd:9a:32:a7:
90:e7:83:45:a1:fc:c7:cf:10:f0:42:82:47:b0:49:11:d1:20:
6f:ab:a0:ac:bd:90:18:7a:07:be:37:f9:06:78:9a:db:ec:b2:
dc:4d:7b:b8:d5:58:78:13:95:fc:0e:d8:f9:83:aa:c4:b6:53:
be:17:4f:1c:07:24:41:14:0e:52:45:7b:e5:40:8e:a2:30:9b:
c9:98:19:63:aa:b2:7d:92:1a:c7:74:8d:c4:7b:a2:57:62:1e:
15:00:9e:0c:bc:14:a2:c6:40:b1:97:c5:ab:f2:31:dc:3c:b0:
13:23:e2:ea:bd:73:d5:c2:53:81:ce:48:c0:3f:1e:7f:85:7b:
fb:d6:17:fb:13:f1:b7:f9:45:55:cc:84:d1:17:a1:68:f9:08:
bf:cc:b4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:09:51 2026 by rpki-client