Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: Pnl1bk8CCeTX9gk8105ub8Oiqx1f1cytrMsibR07P9k=
Subject key identifier: 53:22:C2:78:3C:6B:FA:59:9B:95:17:BC:9A:19:19:0C:7B:B0:D7:A3
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019FED0D8CBB88C2D7C1B148F421346F2071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 19F6
Signing time: Mon 10 Aug 2026 19:01:55 +0000
Manifest this update: Mon 10 Aug 2026 19:01:55 +0000
Manifest next update: Tue 11 Aug 2026 19:01:55 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: 2B9LDHxwaaxQZr8UMKHCNn0tdf0IfzcAh7m3G/uk5Ug=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 14:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:0d:8c:bb:88:c2:d7:c1:b1:48:f4:21:34:6f:20:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Aug 10 19:01:55 2026 GMT
Not After : Aug 11 19:01:55 2026 GMT
Subject: CN=5322c2783c6bfa599b9517bc9a19190c7bb0d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:d3:62:17:62:c3:fa:c0:85:36:aa:2b:fd:
2d:a7:19:fe:9b:db:91:41:c1:97:7a:07:c0:f0:77:
3c:e1:f5:9a:a6:d6:80:74:61:1a:34:14:9a:85:e1:
25:dd:f4:87:4b:b2:58:90:2d:fa:81:2d:7d:b6:94:
45:d7:61:b3:17:40:40:a4:ee:79:9e:66:19:6c:28:
53:c8:96:0e:b8:fd:d8:6f:6a:c6:4e:4a:7f:61:e2:
e2:15:58:12:f3:f1:99:97:ee:4c:af:6c:91:13:cf:
51:8b:a6:03:ca:f7:45:a0:bd:e3:10:55:99:3b:27:
4d:0b:93:f9:84:15:12:cc:07:43:ec:4d:23:eb:c5:
ae:a0:23:b9:f8:41:47:94:0b:f9:94:be:4f:20:02:
e9:ca:98:bd:2e:be:28:d7:1d:45:69:bd:15:3c:4b:
ee:07:ec:7b:36:2e:b1:7b:67:53:72:36:4f:18:4e:
b8:8e:9e:da:03:c2:7e:61:9f:01:fa:06:bd:f2:a3:
9a:bd:b0:aa:65:db:83:07:62:ec:1c:f7:0b:b9:8c:
d7:fc:42:07:07:5d:aa:6b:74:c6:e9:af:60:23:4a:
43:d8:0e:03:ce:18:ba:9f:7d:e9:c8:19:89:7b:99:
18:19:a5:8f:4a:a7:56:ca:07:ae:85:25:33:61:34:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:C2:78:3C:6B:FA:59:9B:95:17:BC:9A:19:19:0C:7B:B0:D7:A3
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6c:27:be:9c:54:e5:c6:47:ff:16:d6:42:dc:ce:1d:a3:9f:
e9:2b:59:75:ea:b9:ee:77:4e:09:45:35:ab:2a:bd:92:63:7f:
82:47:8f:5d:9d:23:5d:1a:95:e0:7b:3e:77:28:c0:a0:cc:c9:
d2:6b:d7:5a:d0:59:e7:96:96:13:ae:9f:ce:99:ce:3c:93:93:
3a:8e:7d:48:79:35:36:ec:e4:5e:1a:04:8e:93:b3:c6:d5:1c:
ee:0a:1b:bd:26:87:85:2e:6e:5b:ce:db:7a:96:51:d1:b4:fc:
5b:f6:5f:88:1b:12:ed:ec:97:7d:80:16:cd:6d:6d:f9:f1:eb:
a3:8d:69:1e:a9:86:32:b6:91:80:79:c0:8f:80:78:e4:9d:e2:
4a:90:47:2b:ec:1d:22:3a:0b:34:b8:39:7b:b7:8d:6f:85:21:
57:67:17:fc:13:b9:c2:10:e4:30:c3:9f:82:51:1c:a4:38:18:
d9:0b:06:30:1f:05:cf:08:ba:c3:66:30:d4:d9:a9:bb:ca:f6:
54:7e:82:77:93:e9:6d:37:5d:c9:15:ea:ac:89:d7:5b:0d:69:
a2:84:02:63:0a:13:c6:19:d3:4e:b8:ea:26:2c:eb:44:0f:93:
d5:e8:db:71:d0:3f:61:0a:5c:3d:ba:d1:fc:b0:0a:85:60:39:
d2:07:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 00:06:39 2026 by rpki-client