Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: VOyCQ+N9uf9TlAwP/YjaXTe0SbBpGMyjv2h+jlmJLqE=
Subject key identifier: C0:2A:65:D2:29:22:A3:BB:E1:89:9F:78:79:AE:B2:F1:3F:1A:53:F7
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019CAAC6D30E9838A2E1D48A004290515AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: fWxrDoUMTgpi0eSAiBnoxprbP3HQE5SJXvA0T05Ce+4=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d3:0e:98:38:a2:e1:d4:8a:00:42:90:51:5a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=c02a65d22922a3bbe1899f7879aeb2f13f1a53f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:92:e5:da:32:46:6f:f6:ea:c2:9d:17:58:
6d:a5:ec:a2:c9:bc:b2:26:89:21:57:4e:c5:f3:30:
79:fe:3c:a1:da:93:9a:83:9e:5b:f5:e4:b9:01:9a:
ae:db:fd:ce:e7:21:d8:1f:b5:dc:09:b4:56:be:7d:
00:9d:7d:7a:0d:c9:b6:11:c2:e9:85:71:65:0c:82:
79:85:58:80:eb:ee:26:ef:15:f1:bd:ab:ab:b6:71:
58:4a:1d:f1:99:39:36:b3:69:33:42:c6:36:67:c2:
06:28:2d:35:7a:86:83:93:01:51:99:3e:6f:0c:82:
4a:ca:42:38:ba:70:ef:04:f6:cd:28:7c:ee:5d:27:
68:2c:03:10:67:3a:6d:52:4b:a2:df:1c:18:2d:ff:
2f:53:e3:7d:8c:67:51:d6:18:cf:b6:1e:60:48:3c:
0c:01:65:64:8c:c6:7d:e0:5f:6d:9e:86:64:d8:82:
05:63:82:7c:20:c8:4b:bd:92:d1:c1:7e:f1:65:08:
4c:56:e9:75:57:45:8f:66:d4:e0:11:ef:10:e0:ed:
ff:3d:16:83:60:a5:6c:7e:0b:8b:bd:96:c2:91:7d:
9d:13:13:0e:85:89:8e:a0:19:cb:29:6c:a0:a8:6d:
c8:0e:80:29:4e:1d:c6:d6:19:3b:c9:2a:e2:ca:ed:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2A:65:D2:29:22:A3:BB:E1:89:9F:78:79:AE:B2:F1:3F:1A:53:F7
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:80:af:22:ab:74:3a:18:dd:80:75:4c:3e:ea:e5:66:1d:1a:
6b:1f:47:80:b9:22:b7:a4:0d:3a:d2:53:d8:aa:b9:46:0c:ea:
96:20:f1:5b:06:a8:c5:01:36:ec:d3:1b:c4:2e:07:5f:13:20:
96:1f:6c:d6:38:d4:66:64:dc:45:84:60:22:b9:bb:06:83:fb:
dd:f0:9d:d1:18:9d:7d:43:a7:1e:db:b4:6c:92:2d:b9:89:0e:
31:8c:a8:e2:56:44:d2:6c:1e:3a:e5:70:93:fc:d3:db:61:d3:
23:3e:8d:a5:1c:5d:2e:89:ab:1a:d4:13:d0:05:0d:7f:bb:4e:
15:25:82:bc:93:f6:2f:4c:e9:4a:34:26:27:8e:1b:aa:61:5d:
38:31:62:ee:58:e2:3a:f7:07:a1:26:81:bf:ed:f0:48:93:84:
49:ba:cd:86:cf:6f:f2:f5:5c:8d:32:1e:d0:d8:69:08:8e:98:
5c:34:5a:b0:33:b2:3e:cc:9d:b9:77:a5:3e:fd:0c:0d:c2:e7:
25:de:ab:f1:88:7b:3a:55:e2:5c:18:56:1c:fb:86:e3:99:9b:
38:30:8d:1f:b8:2a:08:97:8a:88:71:8b:26:a8:4d:90:1a:ca:
f9:de:eb:1b:09:eb:e8:ee:2e:34:58:fe:fc:b1:7f:ba:03:0f:
19:75:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:29 2026 by rpki-client