Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: TbC0KUE5p0zfzlclAmamtoqBQW078v2Sp2RpwKg9ckk=
Subject key identifier: 94:E4:C9:94:94:5B:A8:4D:57:D0:00:9D:87:33:17:A4:0C:BC:92:65
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019CE6A45AEE8F75210AEFE11B1BD75E7A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 10:00:56 +0000
Manifest this update: Fri 13 Mar 2026 10:00:56 +0000
Manifest next update: Sat 14 Mar 2026 10:00:56 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: q+qdC92bId4v7CKSAblS1Gi/5nn0hh3KJ0RyunupsYc=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:5a:ee:8f:75:21:0a:ef:e1:1b:1b:d7:5e:7a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Mar 13 10:00:56 2026 GMT
Not After : Mar 14 10:00:56 2026 GMT
Subject: CN=94e4c994945ba84d57d0009d873317a40cbc9265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:a5:4a:81:0f:66:32:2f:48:9d:eb:d4:5c:
a1:7c:f9:5b:94:dc:35:24:a9:a2:2f:10:a0:13:15:
78:4c:d5:ce:33:98:ab:1b:9a:81:01:29:e9:a5:ae:
12:4b:68:d3:dc:dd:4b:12:9e:5f:3f:ff:62:45:d8:
4d:31:cd:75:25:94:0d:cc:26:6c:d9:9d:07:be:fa:
65:67:98:47:91:99:fd:89:a6:59:1a:77:cf:41:50:
be:00:62:09:c5:e9:e9:e8:45:82:8d:3c:b4:52:0b:
16:a8:1f:43:57:35:aa:ba:37:43:58:78:96:62:68:
38:d0:89:03:c4:d8:58:57:48:40:e4:67:ad:35:a1:
7e:78:9f:cf:3f:8f:30:5d:10:e3:a0:08:76:69:ea:
6d:9a:0f:f4:5f:cc:e9:bd:ba:db:1f:cb:78:68:35:
3f:a1:b4:ef:cd:e6:4d:cf:bd:3d:d1:6c:48:01:9f:
b9:e9:22:08:bf:e2:14:8e:54:fe:b0:4d:c2:d2:f1:
e8:f5:74:e0:4a:10:15:ab:f7:51:6c:44:54:1d:d4:
6f:a9:73:73:6c:62:59:90:14:bc:53:ad:6d:42:3e:
c1:a5:97:4c:70:a6:ac:86:ba:85:c7:98:7f:10:34:
c9:00:81:a9:b6:c4:41:57:26:f2:43:5f:df:20:26:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E4:C9:94:94:5B:A8:4D:57:D0:00:9D:87:33:17:A4:0C:BC:92:65
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4a:be:40:67:17:41:6a:32:aa:0b:35:49:07:77:82:1b:bd:
1f:21:de:f9:6b:66:7c:cd:1f:c5:41:9c:8e:ad:a3:c1:e1:20:
4a:89:fb:f6:57:9c:a7:e0:ea:c0:58:07:74:06:0e:8e:b1:a9:
fe:28:12:78:e9:90:c9:5a:2c:1c:6d:58:c2:90:94:3f:60:1a:
e7:c5:21:07:a5:6d:32:d1:75:bb:fe:dd:30:4b:7c:2b:66:8a:
2b:f8:a6:40:38:74:61:77:37:fe:9b:c1:6e:60:fb:f4:a5:59:
78:74:3f:d4:34:92:9b:85:cb:72:30:83:12:11:2e:38:d1:a3:
80:89:47:d9:ec:4f:e5:6c:26:c1:40:61:2d:38:53:9b:e7:74:
27:fd:1a:b2:15:90:a4:d6:c6:17:fa:e7:1f:99:2c:b9:1f:8b:
79:58:6c:8a:41:03:72:70:04:c0:9b:84:00:ef:7e:9e:20:a3:
e0:3b:03:4e:a9:1c:d7:f3:59:7c:ce:af:04:1c:d1:4b:d4:3b:
b6:d1:3a:73:2a:64:78:ef:e0:8f:fd:9b:6d:25:47:14:1b:84:
d7:f7:5c:4e:fb:3b:96:a5:2d:c2:2e:52:74:d6:c6:16:6b:26:
a0:a1:a7:84:fc:04:64:b2:f2:ee:5d:05:95:9b:09:08:0e:d1:
a9:3d:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:50:45 2026 by rpki-client