Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: 6y0MguhCJVlvv6nQLtfL8yJy6dZeS+f5IVojwMt0GzI=
Subject key identifier: 57:50:0B:52:21:2D:F6:CB:11:15:FD:58:69:0E:E0:04:8B:6A:DC:E2
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019FA975A326C9739FC24F0E3E70E1FF3E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 16:01:26 +0000
Manifest this update: Tue 28 Jul 2026 16:01:26 +0000
Manifest next update: Wed 29 Jul 2026 16:01:26 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: J4mP3ELRSLqpO0K0gamw6Q/5WvAKL0rUu/lI9oDFaAc=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:a3:26:c9:73:9f:c2:4f:0e:3e:70:e1:ff:3e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Jul 28 16:01:26 2026 GMT
Not After : Jul 29 16:01:26 2026 GMT
Subject: CN=57500b52212df6cb1115fd58690ee0048b6adce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:f0:9d:d7:3d:1d:03:a8:ba:50:9b:f9:18:
c6:ac:c2:76:64:9a:2b:c9:04:13:3b:62:00:83:09:
2e:14:57:48:09:2e:2c:63:b1:35:4d:06:a9:a5:98:
11:4f:41:a0:d4:b6:8f:ac:80:20:ae:1d:64:89:62:
bd:eb:f9:29:c4:12:d2:ea:5a:7c:72:29:f8:bf:87:
ff:ed:0a:b2:e6:77:83:c4:46:22:b0:9a:fc:cf:6f:
40:7c:b0:8f:26:7a:29:f2:61:cf:21:95:77:73:a5:
eb:a6:a0:18:ca:6d:4d:58:84:2b:fd:b5:67:c9:0c:
35:09:ba:6c:76:22:96:5f:67:1c:45:07:22:19:49:
f9:7c:47:7b:6a:a3:e2:77:58:0f:0e:d1:6f:5e:7f:
d5:29:f0:1e:9d:01:fa:82:21:a2:85:86:e2:ff:65:
e4:37:c6:ba:e0:ca:25:e3:89:3b:04:75:9f:17:7a:
19:11:72:9d:88:e0:89:ee:39:61:18:c2:16:cd:9b:
01:13:37:dc:6c:a2:95:4d:ca:5a:e7:71:3b:f8:3d:
06:9d:7b:2b:73:c2:38:20:58:3b:2c:36:b2:9c:f6:
e3:7e:ba:24:30:b0:ea:2f:9d:2b:7c:12:4e:68:38:
97:b5:6b:26:76:37:30:ce:df:db:92:aa:87:e0:71:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:0B:52:21:2D:F6:CB:11:15:FD:58:69:0E:E0:04:8B:6A:DC:E2
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d0:1d:45:39:1b:51:83:bb:0c:99:30:a0:37:4c:5a:4e:54:
e7:f6:64:9e:19:d3:d1:d0:97:94:36:08:af:e7:cd:0d:df:0a:
c8:86:f4:c1:56:8d:52:63:87:6a:30:8c:11:f5:ce:cd:9d:9d:
b5:45:03:a8:8a:ab:1c:07:13:f8:e8:70:60:2d:ad:14:be:d8:
4b:83:1f:54:d3:31:0a:50:39:1a:2f:f1:24:21:68:34:69:38:
f4:e0:49:11:6d:41:de:6e:62:fd:03:e7:85:64:ee:ce:09:53:
c5:54:0b:c6:81:ca:64:94:7a:eb:b2:19:a1:a2:8b:33:57:62:
1b:a5:64:8c:ec:0e:16:8e:91:9f:61:db:49:01:d1:f1:35:39:
1d:a7:6b:5a:89:cf:a7:af:46:5d:1b:f2:03:99:c9:1a:35:bb:
87:a9:c5:02:31:52:cf:a9:3d:f6:18:28:85:e1:ca:86:db:96:
4c:b8:f8:87:54:0e:e6:aa:61:ef:32:f7:55:27:3a:9a:e1:a2:
b1:7a:77:60:a6:1b:24:9a:28:61:12:08:37:07:22:7d:5c:ed:
50:bd:aa:61:ea:48:0d:fb:d9:e1:5a:e1:79:57:90:41:32:95:
f7:b6:da:4c:59:8b:ff:4f:f7:62:2d:4a:39:8e:2b:53:d5:b8:
ff:d4:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:18:50 2026 by rpki-client