
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: eciqFMNd6LcccKH8SEMybV6smbGI8/Rjl5bOtw0jG7U=
Subject key identifier: B5:F1:BE:F7:4B:98:CA:C3:89:99:9D:F2:53:F1:18:E9:12:27:53:1E
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019EBFC83C92709D751B15ACB829650895A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 07:00:31 +0000
Manifest this update: Sat 13 Jun 2026 07:00:31 +0000
Manifest next update: Sun 14 Jun 2026 07:00:31 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: e0chh4OHGWR3sKeMdHXak6i2CIQ+mHyq9l5Lf/esPkc=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:3c:92:70:9d:75:1b:15:ac:b8:29:65:08:95:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Jun 13 07:00:31 2026 GMT
Not After : Jun 14 07:00:31 2026 GMT
Subject: CN=b5f1bef74b98cac389999df253f118e91227531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:53:be:03:65:0c:4d:8f:da:43:55:b6:0e:ac:
ca:7e:7c:ec:b5:68:f9:fc:e3:19:71:18:28:e9:9e:
ac:ba:29:6f:56:70:5d:d4:91:1d:66:62:3b:72:3b:
92:0d:51:8c:78:c7:00:1d:ef:05:bf:f4:73:84:04:
6b:34:89:0c:cf:38:28:d9:5b:c5:57:12:d4:aa:df:
30:e2:df:6d:62:98:c1:0b:4e:d8:8c:fe:f8:25:67:
52:13:9a:63:1f:99:9d:c4:1a:29:52:21:e1:fc:37:
e7:d3:da:7e:ab:3b:95:41:2a:a6:de:55:6c:5e:92:
3e:59:ed:1d:c7:1a:36:5c:e2:d9:50:5b:8a:29:6b:
eb:de:ee:20:19:81:f8:54:71:9c:b3:bd:2d:a3:17:
3a:9c:b5:22:19:fa:fb:52:33:2a:eb:84:1f:3d:ee:
51:05:af:33:ec:f3:30:dd:92:c2:5c:6f:f6:3d:b4:
27:fc:79:9e:07:a6:47:82:20:2f:1e:4b:79:d0:b8:
2e:91:57:68:ae:15:90:75:08:8e:a6:45:cc:0f:45:
fc:e4:c8:6a:ad:92:a1:eb:7e:10:3e:e7:ff:4b:7c:
e4:a7:98:88:75:6f:c4:18:f8:c9:2d:fa:77:c5:71:
62:b9:69:f7:38:c2:5d:d5:80:56:6c:75:a1:1c:a5:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F1:BE:F7:4B:98:CA:C3:89:99:9D:F2:53:F1:18:E9:12:27:53:1E
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:78:0c:55:a3:14:18:53:30:a8:4c:ad:b7:f0:d3:c1:81:f7:
52:09:0b:60:a8:d1:a8:9f:d8:fb:18:34:dd:fb:99:fa:26:1d:
fa:94:13:35:0b:49:12:78:e8:5a:26:7b:6f:b4:6a:30:ce:f5:
5e:e0:dd:2e:b0:8b:a7:fb:c8:16:02:f2:65:cf:eb:49:92:97:
59:c1:70:38:11:7e:b3:d5:09:94:0e:f2:d1:3e:04:c3:e6:de:
80:13:85:ff:cf:d7:31:86:b9:ee:31:a5:fc:0a:46:fe:21:48:
71:9b:9e:c7:a9:07:f3:9e:94:10:05:c2:ff:97:28:e2:21:10:
d6:59:09:68:15:45:fe:8f:6c:39:e3:c1:a0:1c:ab:1d:27:10:
5f:ae:2d:0a:a8:d0:8c:5a:b9:53:87:b7:a7:74:85:77:cb:e3:
37:c5:12:c5:e1:ce:18:36:a4:13:1b:6a:a3:f5:91:a0:76:e2:
91:a8:b2:24:d0:c7:b6:11:be:d3:92:23:1c:f9:c2:3d:63:d9:
9d:6f:82:4b:91:62:b7:ad:b3:ba:92:6b:aa:36:b3:f9:60:2a:
e7:d2:88:88:17:a4:21:44:b8:ac:46:63:a5:fe:09:45:5d:f2:
f3:a0:05:07:4b:10:96:df:0a:6c:dd:2e:be:55:bc:3e:a1:f5:
ea:a5:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:59:45 2026 by rpki-client