Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: LKQa/NdXTsvtYTLIKSEpNNeuF/Buh01PISeyImGb0mw=
Subject key identifier: 2D:89:D0:5E:B9:C1:B1:09:66:8B:35:AE:12:52:E4:68:D6:2C:07:E3
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 019D992B4D2543CA1B1A3FE7443765B736E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 1823
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: rnF1Dasui+8sGkdmxkpGuxTQJJvmxMvUPXhME+5F0r8=)
2: qSWfUPbdifhrh3aKuAhxxmylP6A.roa (hash: fB+qGwcW2GhnHX2osyvSPDhd9KmuxX/DLSWIY8hF8h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4d:25:43:ca:1b:1a:3f:e7:44:37:65:b7:36:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=2d89d05eb9c1b109668b35ae1252e468d62c07e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:5d:1c:98:0e:3c:bf:eb:e5:d7:cb:a2:d8:
2a:50:76:bf:33:3a:ed:a9:58:2c:d2:20:d6:70:f4:
60:6e:85:cd:d0:c6:f2:9e:65:d6:85:0b:8f:2b:91:
e3:8a:af:d2:0c:5e:00:3f:bc:c0:d0:a9:17:2a:05:
d8:0a:3c:93:38:18:bf:86:99:d7:06:af:71:b8:eb:
18:ad:25:ac:8f:5b:d3:f4:4d:44:24:f8:8e:b2:92:
e6:10:19:0f:f1:20:f0:ab:94:3b:03:82:d6:d8:e4:
9c:cc:1d:fe:27:62:ee:f5:94:48:99:26:95:92:d9:
ce:2a:ae:46:2d:28:ce:de:69:48:41:dc:19:8d:6c:
f2:6c:e2:3c:aa:4d:92:e5:2b:58:d5:d7:d7:51:c2:
9a:e9:b7:ad:50:4f:e5:28:d1:b1:77:42:4e:50:ce:
8d:ad:fe:c4:f9:2e:0f:f9:c6:d2:ee:c2:0e:94:44:
07:11:50:23:dc:f6:41:ae:db:7d:1b:61:15:37:44:
a8:76:84:e0:6f:42:da:93:c1:1b:1d:0f:5d:21:a4:
c3:83:61:44:f7:aa:a0:56:94:b7:71:29:cf:17:ba:
e8:4b:8e:01:eb:17:31:f7:40:24:d1:2a:e9:b8:b2:
8a:fd:8f:09:e5:1a:08:a7:56:54:f1:86:0b:3e:e1:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:D0:5E:B9:C1:B1:09:66:8B:35:AE:12:52:E4:68:D6:2C:07:E3
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:58:f3:c5:b1:38:b6:2e:81:cf:f2:09:2f:fd:85:85:5b:d0:
f5:de:39:02:ba:5d:6b:4c:b3:0b:7d:49:fd:a8:b7:9d:00:2d:
f7:66:22:3c:4d:74:86:36:31:c0:50:43:8f:2f:6e:00:b3:e9:
b3:db:8f:5f:35:77:b6:23:65:57:51:b0:94:cb:b6:3b:9d:0e:
88:95:95:68:ad:56:67:2f:19:05:17:88:7d:bc:e5:d9:75:3b:
d9:7a:b2:5c:94:00:ed:5e:fa:44:9e:fe:40:33:16:68:c3:53:
10:ec:66:c9:92:a8:9f:53:5a:2d:83:a9:c3:16:f9:ad:9c:5c:
0b:09:c4:ce:4e:90:24:e4:2f:14:8f:58:b2:2a:86:10:c1:1d:
b7:2f:80:a2:43:05:98:80:33:8d:07:b0:fa:08:cf:cd:db:4c:
d1:5c:20:69:ee:c9:48:58:c1:8e:9b:57:8b:aa:5c:2d:6d:0c:
9f:e3:7e:a7:1c:2c:51:6c:1e:15:3a:76:44:9c:95:d6:06:eb:
c3:32:64:2a:4b:ca:4d:d9:ff:f6:c9:e7:11:35:2d:68:bd:43:
41:02:b6:a6:e1:4f:dd:41:93:fa:d6:bc:ec:4f:26:35:34:6f:
f6:ff:85:6c:68:e8:69:17:7f:4c:4a:85:b5:ba:99:82:31:70:
2e:5f:8e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK00lQ8obGj/nRDdltzbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmQxODJhM2I0NGE3YmUwNWQzZWU3MGRjOTBhODVkNTdh
YmZiOGQwHhcNMjYwNDE3MDIwMDQ0WhcNMjYwNDE4MDIwMDQ0WjAzMTEwLwYDVQQD
EygyZDg5ZDA1ZWI5YzFiMTA5NjY4YjM1YWUxMjUyZTQ2OGQ2MmMwN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00JdHJgOPL/r5dfLotgqUHa/Mzrt
qVgs0iDWcPRgboXN0MbynmXWhQuPK5Hjiq/SDF4AP7zA0KkXKgXYCjyTOBi/hpnX
Bq9xuOsYrSWsj1vT9E1EJPiOspLmEBkP8SDwq5Q7A4LW2OSczB3+J2Lu9ZRImSaV
ktnOKq5GLSjO3mlIQdwZjWzybOI8qk2S5StY1dfXUcKa6betUE/lKNGxd0JOUM6N
rf7E+S4P+cbS7sIOlEQHEVAj3PZBrtt9G2EVN0SodoTgb0Lak8EbHQ9dIaTDg2FE
96qgVpS3cSnPF7roS44B6xcx90Ak0SrpuLKK/Y8J5RoIp1ZU8YYLPuG+TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2J0F65wbEJZos1rhJS5GjWLAfjMB8GA1UdIwQY
MBaAFCBtGCo7RKe+BdPucNyQqF1Xq/uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEt
NjYwNzc4MDk5YjNkLzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEtNjYwNzc4MDk5YjNk
LzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFjzxbE4
ti6Bz/IJL/2FhVvQ9d45Arpda0yzC31J/ai3nQAt92YiPE10hjYxwFBDjy9uALPp
s9uPXzV3tiNlV1GwlMu2O50OiJWVaK1WZy8ZBReIfbzl2XU72XqyXJQA7V76RJ7+
QDMWaMNTEOxmyZKon1NaLYOpwxb5rZxcCwnEzk6QJOQvFI9YsiqGEMEdty+AokMF
mIAzjQew+gjPzdtM0Vwgae7JSFjBjptXi6pcLW0Mn+N+pxwsUWweFTp2RJyV1gbr
wzJkKkvKTdn/9snnETUtaL1DQQK2puFP3UGT+ta87E8mNTRv9v+FbGjoaRd/TEqF
tbqZgjFwLl+OyA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:00 2026 by rpki-client