Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: EzmFNx6R+zrCf7u9bmMIRF7iT2u0UJ1snyr2v6mqjyE=
Subject key identifier: 56:E7:4C:1B:74:FE:DD:A0:85:03:95:88:EE:20:3B:45:01:9B:B3:34
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 019FA9750A747C70D0F17C1F06B8B721CBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 16:00:47 +0000
Manifest this update: Tue 28 Jul 2026 16:00:47 +0000
Manifest next update: Wed 29 Jul 2026 16:00:47 +0000
Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: d3bwVKqIdtFX/kIBdnUWJRK5A5DIMXj6Dic+RENZIxk=)
3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:0a:74:7c:70:d0:f1:7c:1f:06:b8:b7:21:cb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jul 28 16:00:47 2026 GMT
Not After : Jul 29 16:00:47 2026 GMT
Subject: CN=56e74c1b74fedda085039588ee203b45019bb334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:21:75:0c:13:ae:39:e1:25:a0:a6:4f:8e:
d7:6f:45:af:f2:46:23:8b:f0:af:92:bd:1e:8d:66:
97:56:18:b2:e3:a7:c4:3f:4d:0c:fa:03:69:ef:39:
a0:d6:ab:6e:fd:1f:18:73:1b:6b:52:6d:e3:e5:53:
51:0e:1d:37:46:94:7f:cd:0a:c9:9e:c1:99:cb:91:
99:d0:73:98:22:60:d4:be:d6:e4:9a:cc:25:5d:47:
d3:8b:f8:00:fb:45:b6:83:93:fc:05:2c:69:c9:49:
f3:ec:dd:b0:41:37:88:2f:4f:4e:8f:22:fa:3b:24:
60:87:57:cf:2b:e7:a0:3c:77:ab:53:09:a4:51:59:
5b:ca:e8:ef:a0:96:de:a9:61:b9:d7:08:b6:e1:c9:
a8:13:d9:0e:01:1f:8f:ec:6a:c4:03:47:48:0b:14:
ea:0b:af:22:8e:67:37:d2:19:d0:c8:ce:a5:ab:c6:
81:e7:57:61:06:8d:e1:66:73:3b:72:5d:6e:86:35:
51:10:0a:af:7f:36:3d:5a:57:29:9f:65:83:65:d4:
58:47:3c:e0:9d:6f:b0:57:24:ee:54:41:49:0a:3f:
ec:a3:ea:b8:c1:4d:ba:f0:ce:c7:6b:56:ea:e0:08:
64:c5:24:f5:d6:e5:13:b7:93:2c:c6:d1:9d:fe:c4:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:4C:1B:74:FE:DD:A0:85:03:95:88:EE:20:3B:45:01:9B:B3:34
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d7:79:b8:80:d5:fc:a9:f6:e0:e7:82:76:a4:50:fc:80:af:
81:42:fb:e6:25:43:5a:5b:58:51:8b:fc:67:d5:76:9f:c7:94:
60:cc:e3:dd:3d:23:aa:5e:98:a6:1f:26:ae:fe:a1:c9:00:ed:
6b:fc:a8:9f:12:a3:16:f6:43:7c:29:da:32:6f:c6:22:e1:fb:
5f:d8:a2:4c:3f:cb:f3:36:5e:f9:3a:50:cc:2e:08:c3:d6:ee:
10:b8:bf:f4:fd:f7:a2:cf:dc:58:63:76:bc:e5:94:5e:3a:78:
ca:6f:cd:17:b7:8d:ff:29:9e:c4:75:a3:43:8c:61:a9:02:25:
26:b8:8c:62:0a:e7:de:7f:9f:d3:10:2b:26:2e:c5:07:ed:f0:
b4:ba:e5:57:b4:7a:30:1e:32:9b:94:73:74:97:8f:69:c5:a8:
16:80:62:87:98:5c:c4:bc:d2:5b:49:46:32:37:cc:9d:76:37:
19:cc:6c:a9:44:88:c4:49:05:cb:6b:36:c2:0a:fd:9a:d4:bb:
97:7c:0e:8d:b9:91:80:85:4c:27:af:74:dc:14:86:14:0e:cc:
97:0e:c4:4f:a7:12:d1:05:57:cf:eb:3f:7a:7d:08:f5:10:6a:
99:3d:1d:d3:dd:4f:ea:68:56:0f:6c:c5:90:82:ac:9b:53:38:
f2:56:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:00 2026 by rpki-client