Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: eRehBSYz+s/Wm0DD3VNjGtBFhMlrqiXtsCLNew6yIXo=
Subject key identifier: 60:FE:DF:D0:80:97:77:55:0F:7F:E0:A7:D0:52:13:79:B0:7C:9B:2E
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 01A1C6316403485EBF37E7EBC98FBD7A9B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1AEB
Signing time: Tue 10 Nov 2026 16:01:27 +0000
Manifest this update: Tue 10 Nov 2026 16:01:27 +0000
Manifest next update: Wed 11 Nov 2026 16:01:27 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: GfLPL4tl4B6y9WMcEUPjd3UlpyfYng7ZoUqstlbzr2U=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:31:64:03:48:5e:bf:37:e7:eb:c9:8f:bd:7a:9b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Nov 10 16:01:27 2026 GMT
Not After : Nov 11 16:01:27 2026 GMT
Subject: CN=60fedfd0809777550f7fe0a7d0521379b07c9b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:f6:dd:8d:3e:a4:91:e6:51:3f:0c:5f:1f:
75:4f:a1:f5:01:9a:2a:07:04:1b:78:36:cc:ea:45:
59:97:45:7a:0c:20:47:22:57:c5:15:54:ae:e9:57:
0b:bf:be:7d:c0:75:35:1a:b7:2f:f3:87:35:08:46:
49:9a:a7:1a:8c:b3:10:40:29:a0:eb:c5:32:e2:67:
e8:7c:7d:ab:b9:01:0d:32:4d:a2:c6:09:b5:3a:ba:
ef:87:b1:57:cb:6d:af:42:3a:3b:84:6b:51:81:f1:
70:f0:5e:b7:53:5b:9f:3d:7d:83:bf:fd:c4:7d:eb:
74:02:13:79:d5:21:91:28:b9:b1:fb:ff:b6:e8:8e:
6d:34:43:bb:9d:73:ac:17:bd:06:a6:cb:6d:e8:81:
bf:61:70:48:39:50:00:41:91:b0:91:c8:09:a4:6f:
12:2a:74:5c:47:56:fd:b1:2e:ff:5c:94:3f:c6:1f:
ba:41:f0:3a:31:42:7c:fd:94:55:55:7a:b3:d7:18:
45:c8:25:3f:29:cf:99:cc:ab:41:54:05:6d:35:78:
d8:db:67:e7:23:1d:d9:f5:47:5b:26:1a:bf:55:6a:
c4:cd:c7:0c:ac:0c:0c:83:1c:ce:e7:9b:94:5d:1b:
44:a7:b5:fa:63:78:51:34:d6:f8:2f:1a:85:bf:8a:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:DF:D0:80:97:77:55:0F:7F:E0:A7:D0:52:13:79:B0:7C:9B:2E
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b3:cb:08:32:9e:5f:22:36:d9:d1:e4:95:4e:f7:b4:ea:6b:
39:77:4d:be:f6:e5:16:f6:c3:e4:d9:1a:ac:55:94:af:12:f7:
a7:a2:4c:4d:05:48:cd:6c:aa:e1:a8:12:01:84:25:32:09:15:
a8:2e:a1:11:c4:8b:5f:18:70:67:ee:d2:6f:b9:df:97:89:01:
af:23:fc:df:c6:94:1b:32:a4:06:fe:4c:4c:4e:58:84:18:61:
62:55:df:61:9a:88:c1:58:fe:f2:35:85:fa:b6:14:95:78:a1:
a4:85:a2:a0:2a:91:25:eb:22:3c:71:99:75:a6:ba:6f:e1:07:
e9:94:b3:3a:db:97:50:38:a3:fa:48:31:a7:2f:a0:84:7f:33:
bb:1a:c8:9e:e6:2e:44:ae:54:3f:41:71:d7:93:04:c3:4f:a4:
3b:15:ee:73:7c:f6:66:d4:7e:84:e0:ce:2a:86:14:b5:0c:5c:
47:90:1a:55:ac:74:4c:10:6c:06:5a:0a:e2:0e:9e:71:f3:8d:
fc:29:e5:7e:4f:65:9e:f3:1f:73:b1:d3:c4:c3:c1:1a:74:d4:
93:2c:66:c0:a9:b0:82:f8:81:cc:67:c5:aa:f9:21:63:24:31:
36:46:b0:36:2b:df:be:0e:7c:f2:65:42:3b:d2:56:d1:22:52:
82:bb:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 21:19:22 2026 by rpki-client