Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
File: Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft (raw, json)
Hash identifier: gBIlASWz+ImaR0Pj94/7ryxGP6H7tJSPFIkUSW2eUpY=
Subject key identifier: B6:F8:8C:57:9C:8D:99:92:33:30:B3:ED:3C:29:A8:2C:50:FA:F0:2B
Authority key identifier: 22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
Certificate issuer: /CN=220f2767315875ec0efc2e255856f586a4ddf99c
Certificate serial: 019D3909DDC285BF9FFFA179553F5EA36A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl (hash: JtsovEwCHU+M9Z8XriLN4DEkxSx17TO+skvVT8ZyJ5g=)
2: pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa (hash: 4nqaIka8KRsnuFWOYZD3ShbhJq0aiv3A2wx6tpUOgnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:dd:c2:85:bf:9f:ff:a1:79:55:3f:5e:a3:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f2767315875ec0efc2e255856f586a4ddf99c
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=b6f88c579c8d99923330b3ed3c29a82c50faf02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:c6:ac:10:b7:b2:a2:b4:5e:94:cd:bf:dd:
69:0b:76:d8:b0:93:40:37:bd:10:bd:6c:9a:70:78:
1f:0c:e7:2f:d7:47:be:56:5b:3e:df:e3:d7:71:22:
27:36:06:ea:d0:36:8d:d1:87:da:a6:62:37:61:e7:
2e:fe:a9:46:46:79:62:aa:a2:79:5d:58:8d:5c:2f:
09:07:ba:94:4d:38:9f:24:6b:29:e9:ae:39:17:3d:
20:31:3c:e2:1c:a5:b0:b5:35:0c:94:50:85:e6:ce:
a3:7c:64:6c:bc:01:aa:c4:bc:71:cd:b3:71:49:43:
b9:52:09:47:d7:9a:8a:47:bc:dc:1d:d9:55:37:d1:
09:58:27:61:b7:18:76:88:3d:f4:68:75:64:b2:a9:
dd:d6:5b:3e:b0:62:96:ae:c6:37:e2:ca:0e:9d:74:
54:59:5c:21:99:f2:a2:31:af:0b:63:53:43:92:97:
e4:4a:eb:1b:7d:79:83:9e:93:1d:cb:51:2c:f1:27:
61:4d:a2:5c:ac:57:92:4c:ae:ee:ff:40:61:54:ab:
a9:40:be:98:32:52:84:5a:44:d8:13:c6:47:d4:78:
84:4c:66:ef:3e:fa:e0:1a:11:51:08:ee:f9:9a:aa:
01:78:54:f1:12:4d:6c:81:f9:c3:56:e4:8d:d7:eb:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:8C:57:9C:8D:99:92:33:30:B3:ED:3C:29:A8:2C:50:FA:F0:2B
X509v3 Authority Key Identifier:
keyid:22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:05:f6:43:6b:b7:93:79:26:dc:94:4c:b3:42:ed:93:83:2a:
04:4d:1c:34:70:8d:c0:fa:8b:f6:0e:a9:f5:49:5c:f5:d3:78:
22:46:71:6d:50:65:25:8e:51:a4:50:d5:cd:a5:e5:c9:f1:52:
55:5c:62:43:d3:b9:fd:cd:74:48:3b:8d:12:fc:29:48:4b:9d:
c5:9a:b6:6a:4d:56:06:ee:c4:be:b9:70:6f:e4:32:21:0f:56:
dc:fb:4c:55:0e:b0:7b:18:90:5d:34:9a:b3:42:71:3f:cb:ed:
fb:b9:a9:dc:f4:cd:90:07:00:55:ad:77:57:3e:42:05:c1:f5:
b4:98:cb:87:96:ef:55:8f:ef:84:41:41:5a:e3:11:bf:30:69:
4d:2b:a5:39:2e:c2:7d:8f:09:d4:9f:c0:93:90:a7:17:06:a8:
e5:c5:7b:a7:63:6a:6d:1d:b8:1e:5d:6b:85:e7:81:c6:f4:71:
33:3a:64:c7:5c:a2:f6:51:55:29:e5:59:b9:48:9c:00:80:77:
47:a6:f3:b8:97:53:32:e5:7c:1d:08:15:5a:1c:91:04:56:5e:
4a:ba:f7:60:2f:47:a0:29:30:67:52:e3:9b:6f:af:ac:32:de:
68:c2:9f:5b:8d:8d:4c:b9:fc:18:32:5f:cb:0b:3b:b3:d8:2e:
58:e6:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:28 2026 by rpki-client