Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: SQeJr5QrX9Yz6FS97k37brGxJYdIvCdRIIXarJa4whM=
Subject key identifier: E1:1C:80:B3:90:70:AC:83:5D:74:A4:28:2E:D6:E6:25:75:B9:6F:C4
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 01A15364E5F8D210F20FEA80D160683F7746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 0697
Signing time: Mon 19 Oct 2026 09:01:23 +0000
Manifest this update: Mon 19 Oct 2026 09:01:23 +0000
Manifest next update: Tue 20 Oct 2026 09:01:23 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: GAfdqJbQDur6uLbHPON7DoU2DrC5TQIJFiRQJ1oG5qQ=)
2: PPCzo4aoB52WIulHl2b-W42AOQQ.roa (hash: v7GTmELXw/VVFQyWL5TMg5z0A0nUbHsal/nQ+BR/mNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:64:e5:f8:d2:10:f2:0f:ea:80:d1:60:68:3f:77:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Oct 19 09:01:23 2026 GMT
Not After : Oct 20 09:01:23 2026 GMT
Subject: CN=e11c80b39070ac835d74a4282ed6e62575b96fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:4e:de:49:cc:fe:2b:0b:63:66:68:74:57:
84:16:0c:84:a9:da:99:22:7d:3a:35:fc:0c:cd:03:
96:a5:33:97:43:70:d1:41:52:3f:e3:ba:72:b4:3f:
b0:d0:af:90:57:d8:4b:5b:ee:cd:36:fb:93:43:ec:
1a:5a:ed:99:44:e3:d4:cd:30:b1:b9:12:1c:33:34:
1a:63:89:36:d7:d6:e6:8e:56:4e:b4:4d:3f:a0:4d:
74:3e:8a:d8:6f:07:09:e2:e6:d8:80:7e:74:bb:8a:
47:bf:6f:57:b5:64:60:90:bb:f3:8e:f0:4d:94:d5:
79:34:49:69:59:da:33:91:eb:da:df:54:3b:84:b4:
dd:bc:39:03:5e:44:f8:46:78:1b:2e:08:b9:26:17:
c6:60:a7:b5:ae:98:3f:b8:7f:7f:f0:0a:52:c2:29:
85:66:54:7e:81:19:f7:a3:98:c5:62:a8:ff:66:ab:
e2:9e:81:e4:0a:64:4e:31:6a:c0:90:09:8b:bd:f5:
69:f1:86:ef:59:1c:d4:49:81:58:16:c6:c8:62:20:
57:ea:f7:b0:14:c0:3d:f7:bc:4e:f6:88:15:43:01:
0c:52:e5:b5:5e:09:c8:17:93:b7:bf:38:cf:99:62:
bc:da:ac:9a:8d:17:12:42:74:17:5e:95:b6:11:9e:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:80:B3:90:70:AC:83:5D:74:A4:28:2E:D6:E6:25:75:B9:6F:C4
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:71:79:4c:dd:1f:71:90:49:96:e5:2d:56:85:3b:78:f7:72:
07:e8:69:33:a8:93:05:1f:be:f9:a0:aa:65:26:a5:1b:82:a4:
02:43:18:db:91:59:3f:30:33:af:62:ad:e8:8b:6e:bd:49:56:
26:07:c3:8a:b0:2d:ec:a3:6e:f7:63:0d:3f:1e:d2:01:17:8e:
89:91:f7:26:79:53:52:05:a1:e5:f8:54:aa:13:6d:8a:a3:16:
ac:2a:a8:be:08:1b:a1:1e:05:34:28:d7:15:31:64:17:52:24:
15:42:b2:7e:e7:7b:71:67:4f:be:1d:3a:45:8b:8b:20:b9:67:
58:c9:cb:a7:a3:6b:99:8e:84:68:1a:a9:90:7d:bb:33:e4:4c:
2f:f5:57:1a:82:50:73:d2:0e:e1:14:fc:2f:f4:df:74:e1:82:
ba:96:84:4e:2d:a3:a9:ab:02:48:d8:04:59:dd:20:a2:04:73:
da:14:fa:95:f7:7a:28:cc:79:68:de:65:0a:6a:58:18:38:52:
12:8f:a2:cb:de:d7:d3:7f:a1:e1:f8:1a:c0:bb:e4:9c:82:01:
89:5f:f6:ab:a7:c7:27:b2:c2:aa:8b:69:3b:7f:66:8e:09:f9:
08:a5:75:1b:87:f7:f4:ef:fb:d3:a2:16:d2:1d:ba:2b:48:44:
c6:e6:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:34:51 2026 by rpki-client