Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: X5Wws76rtRtQeuuI9SO5qjHOfn2FGFI0qzRTf0l3e38=
Subject key identifier: C9:A2:DC:DE:65:1D:9A:7B:C4:8C:AE:38:BE:96:C5:02:81:97:3B:6E
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 019F81F9DA23D94A30A94B0CF12FB24F9294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 05A6
Signing time: Tue 21 Jul 2026 00:01:02 +0000
Manifest this update: Tue 21 Jul 2026 00:01:02 +0000
Manifest next update: Wed 22 Jul 2026 00:01:02 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: 8LXGDmSqrrrtsi/kkh9mIk3WLe4+IYThElLIFToal2E=)
2: PPCzo4aoB52WIulHl2b-W42AOQQ.roa (hash: v7GTmELXw/VVFQyWL5TMg5z0A0nUbHsal/nQ+BR/mNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:da:23:d9:4a:30:a9:4b:0c:f1:2f:b2:4f:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Jul 21 00:01:02 2026 GMT
Not After : Jul 22 00:01:02 2026 GMT
Subject: CN=c9a2dcde651d9a7bc48cae38be96c50281973b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:01:95:a3:b6:c3:e8:b5:ae:14:7e:3e:bf:
aa:bb:11:b4:ac:89:14:aa:a3:59:75:db:7c:d9:e6:
4b:35:43:fe:7d:43:1a:13:8c:f9:0e:f8:c4:93:aa:
5f:65:d2:70:24:0a:d0:4f:79:c4:49:36:13:a8:ee:
89:4d:10:d3:ab:0a:32:4e:25:26:0b:fe:4a:06:0a:
79:5c:39:9b:7d:da:5c:70:d2:a3:9c:81:3b:c3:60:
94:c8:cd:1e:c7:b6:2f:d8:ce:f3:63:fc:d4:d8:c3:
10:82:b1:a2:bc:e8:57:24:cd:7e:cd:00:11:85:a0:
c7:8c:50:10:55:90:7a:ee:3a:21:4e:03:cb:95:1a:
49:85:5c:2f:dd:ee:35:6a:1c:39:e8:4e:29:19:4c:
4e:31:be:bf:5b:eb:ce:f3:86:5e:f9:f0:65:48:0e:
a3:f3:64:9d:c3:fc:f4:20:2d:ff:31:9e:47:f2:44:
e2:28:c4:cc:11:ce:29:9e:de:fe:d1:ab:a8:f4:39:
f1:41:fb:b3:73:ec:cf:c5:61:ad:b8:04:fa:da:c3:
03:87:11:47:c2:a1:3b:1f:5d:62:a2:36:8d:5e:b0:
b2:db:bc:3a:9d:ec:b1:3d:cc:77:b3:24:b8:4c:0c:
64:c3:a3:d8:bb:c5:9c:62:3a:38:b1:a7:e7:8e:4f:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A2:DC:DE:65:1D:9A:7B:C4:8C:AE:38:BE:96:C5:02:81:97:3B:6E
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:eb:40:ac:1a:bc:fa:9b:c2:0f:81:e4:e8:5b:3f:a7:b9:bc:
3a:8b:9b:82:ae:d1:32:08:f7:70:5a:c3:1c:65:81:0b:20:0b:
68:b0:ce:b3:a6:4c:79:05:26:48:a4:df:39:cd:a5:19:d2:9d:
52:ce:1d:d9:2c:3e:48:cf:06:f7:e4:b5:94:62:3a:f1:ed:59:
69:e6:01:be:6a:5c:f5:49:e1:ac:9a:df:68:d9:75:33:87:e4:
18:c1:01:c6:81:24:0e:7c:3c:f6:26:f0:0c:48:09:9a:6c:33:
37:c5:d1:91:19:61:88:cd:07:9b:01:ad:c4:d8:32:5e:51:a2:
a3:5e:9c:e0:6e:39:d5:a7:3e:24:d5:6f:f5:59:d3:a1:47:05:
c2:4d:94:8f:e6:35:80:d6:a7:83:9c:8d:8f:7c:9a:eb:86:3e:
a2:a3:2f:f9:8f:d8:4d:bf:53:d3:b2:36:4b:d8:fd:79:19:32:
a9:a9:40:60:33:44:46:b8:60:a7:0c:61:4b:ee:1a:ee:a1:4f:
01:f2:0a:0a:86:c1:3b:1c:14:00:be:4c:7f:71:cf:9f:9d:82:
8d:fc:59:8e:7e:80:e0:5a:e9:a4:98:58:13:26:1d:f7:d0:45:
6e:b4:42:26:07:4b:b5:2b:18:e4:d7:24:8b:65:86:09:8f:b3:
eb:3c:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:58:31 2026 by rpki-client