Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: d0v2mEejsHxYUT5YuwcgNn1h4cT6gw9BslEFRJAIrzY=
Subject key identifier: 99:D3:93:75:93:79:94:2C:67:D4:60:7D:E8:34:C5:94:0E:99:71:D9
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019DFACD5A638E50178F3CBD93887D596FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 18F4
Signing time: Wed 06 May 2026 01:00:55 +0000
Manifest this update: Wed 06 May 2026 01:00:55 +0000
Manifest next update: Thu 07 May 2026 01:00:55 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: DqL9b/RQaIygX5vEkCmVW1y6ECt6GASqCizul+JbOCA=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:cd:5a:63:8e:50:17:8f:3c:bd:93:88:7d:59:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: May 6 01:00:55 2026 GMT
Not After : May 7 01:00:55 2026 GMT
Subject: CN=99d393759379942c67d4607de834c5940e9971d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:ce:4a:c1:e0:10:c8:93:0e:ef:04:ca:c7:
62:bb:cf:3f:ff:64:97:ba:66:0f:e5:cb:03:00:98:
61:b1:0e:7c:81:fe:19:c8:89:1b:4c:55:d5:ef:6e:
1b:ef:47:40:c3:51:90:a8:f2:57:55:57:3d:50:be:
cb:d1:b9:6f:d7:39:2d:7d:9b:87:7a:bd:dc:46:22:
0f:63:44:87:9b:05:43:e8:99:21:15:af:1b:fd:cf:
10:cc:8c:b3:43:fa:61:00:88:3f:5b:02:8e:3c:7e:
a6:b8:7c:74:68:91:60:05:2c:95:f5:9c:ee:7a:02:
f2:27:bc:46:25:15:24:78:de:16:de:94:7c:2c:3b:
9b:b8:ee:88:29:21:f9:79:1b:3c:31:7b:d1:9f:72:
02:5c:21:4b:ee:94:2d:bd:b4:cb:37:49:9a:3f:a7:
18:3c:03:f6:55:b0:6b:b9:01:5c:59:dd:f1:88:ae:
c8:cf:ca:6c:af:f1:8a:ec:c2:78:ea:bb:c6:51:d5:
80:12:5a:26:b0:3a:4b:bc:8d:33:e7:90:ed:ae:42:
91:19:e4:a2:af:a9:1d:3b:b8:2f:d8:f2:fc:ad:a2:
e7:68:7f:29:89:55:08:24:af:37:f7:7e:11:7a:30:
aa:6b:3a:64:0e:bf:c0:fa:a1:89:f9:5f:84:e5:c6:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:93:75:93:79:94:2C:67:D4:60:7D:E8:34:C5:94:0E:99:71:D9
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:90:e7:21:ed:96:78:9f:a6:75:f5:ed:4c:41:0e:06:4a:ef:
fb:3f:22:ef:24:f6:0b:ea:e9:cf:f9:44:7b:8c:71:0d:6d:d3:
94:dc:5c:ab:59:8a:72:97:dd:3a:7e:7c:28:df:b9:ee:7b:2a:
d6:76:c9:6e:10:9c:e1:26:92:92:e9:d4:be:a9:ce:cd:50:79:
1e:df:90:4c:79:d9:c8:98:f5:27:f7:f8:af:91:94:ab:89:a9:
5a:a1:f1:e1:ac:17:99:3a:fe:69:6e:fe:54:29:03:05:6e:69:
44:2d:d7:5a:83:37:1a:76:57:62:58:bc:0e:ba:9f:f7:88:d8:
83:45:8d:53:ae:db:18:cd:d0:db:71:c1:55:b5:34:0e:b4:11:
2b:7a:c6:97:64:46:09:25:ef:46:00:e3:f5:8a:ef:90:06:d3:
a9:d5:5e:86:30:63:3c:fa:36:f6:69:c6:f6:a5:72:74:8b:83:
39:ad:a2:fb:c7:f9:92:d8:31:ce:d6:22:e6:1e:81:59:d1:c0:
68:72:12:ae:70:74:ad:bf:cb:1a:31:58:d8:72:31:d5:12:4d:
6a:99:60:af:f0:34:64:61:5c:92:13:f9:e7:68:a3:b8:6d:69:
25:56:4a:2c:16:bd:32:bd:f1:74:7f:74:f3:ac:ce:59:2d:12:
90:54:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:26:38 2026 by rpki-client