Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier: gS20zAK6niBP3MJo7bfL0kqcSdh+lC1HfeihNkRAV6Y=
Subject key identifier: CC:6C:4D:EA:A2:D6:0A:CB:70:9B:6F:84:B1:7C:B9:BE:40:D1:24:60
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 019D389C547EACE2A511A2F85F183A18D4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number: 0411
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: EWJjDKL_EDwHB6BbjnvL5-KZVrA.roa (hash: k1Zkw+ZYuFbM+jxH6ZStxjeFuG08VsNzVKDLWpEMxiQ=)
2: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: h1LnchwPgArIpHJTVSr9I+4ELS1orx6msLAhEP89C2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:54:7e:ac:e2:a5:11:a2:f8:5f:18:3a:18:d4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=cc6c4deaa2d60acb709b6f84b17cb9be40d12460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:41:79:3c:0f:17:a3:7a:4a:c8:97:c1:66:
ed:5c:5b:ad:bf:5c:a3:ac:ea:b8:3f:d5:db:71:a8:
d6:28:69:62:cb:52:5d:67:93:97:92:ea:b0:ec:68:
3c:36:3d:e0:ea:2c:45:56:56:8d:ff:6f:86:c4:d8:
71:11:2c:eb:00:6c:a7:4c:3b:80:90:39:68:23:15:
39:29:92:d0:a1:70:e4:3b:e1:5b:23:6d:1b:11:d4:
b6:93:87:72:f6:b4:e6:13:69:8b:e5:1a:8d:fa:a9:
4b:74:d3:69:0f:fd:65:09:89:26:ff:d8:e2:7d:c6:
e2:0f:12:75:27:71:cd:57:c4:1d:9e:96:86:37:22:
a3:63:a5:8b:cb:57:e2:d2:25:24:b4:a4:01:e9:16:
ad:07:02:f2:42:22:29:5b:e8:d8:4a:ef:ca:1b:5c:
4b:94:0f:e8:a0:e7:de:f2:a1:0b:c6:52:62:cc:51:
57:35:fd:b6:3e:85:6d:db:7f:ae:10:36:47:6b:87:
73:f6:bc:1d:00:1e:19:ea:42:01:7e:fd:49:66:5b:
38:85:17:a8:82:fa:25:a7:6c:09:a6:61:02:c4:35:
61:f1:77:38:f2:15:82:28:96:15:87:2a:9c:38:81:
b0:d4:49:fa:0e:cf:6a:8d:95:94:de:4a:87:32:84:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:4D:EA:A2:D6:0A:CB:70:9B:6F:84:B1:7C:B9:BE:40:D1:24:60
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e6:00:e2:ba:a7:be:ba:ac:82:97:9b:a9:6d:41:a6:d7:5d:
05:36:2e:02:cc:d0:48:c1:e9:41:b7:a9:d5:41:45:e6:f0:61:
69:ef:87:a6:ab:0c:37:2e:19:67:92:08:97:1e:b6:6b:e8:0e:
ab:a3:51:3c:3c:9c:01:c6:4d:47:e0:a7:82:37:82:6f:7e:d3:
bc:8d:27:99:e2:6a:3a:5f:db:9e:fc:af:19:88:aa:a9:f6:cf:
3c:37:2f:3b:0c:53:ce:0f:ad:82:85:f7:4f:68:a8:db:92:41:
db:69:ee:16:3d:52:89:cb:8e:3d:54:c2:3b:18:3e:56:80:02:
fb:5b:84:84:d1:68:f3:3a:53:fd:a1:20:ed:4b:98:fe:f7:bc:
9a:e7:a9:43:38:1f:5f:17:70:93:9e:de:80:b1:48:e7:59:ac:
de:ff:5b:8d:12:54:24:54:42:c7:f4:8c:37:38:3e:f6:04:36:
02:c9:88:43:f1:71:a1:98:ce:3a:9e:47:27:97:2b:42:5d:47:
32:9c:0c:45:47:86:84:bc:9e:ec:0e:a5:a4:45:b4:33:8d:39:
4f:b8:8f:18:22:a6:a8:48:75:b2:61:db:8d:2b:da:73:e4:28:
17:79:ae:b7:d6:b3:e7:32:93:e4:d2:0d:eb:55:e8:d9:99:f0:
3a:1e:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:50 2026 by rpki-client