Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: EdImVCyr5qtVQnTazZVFQZ95FpbI+Y46eMirXgCVXaQ=
Subject key identifier: 3A:2B:3C:AA:5D:E0:50:AC:A5:C2:8E:0B:3C:4F:48:4F:3E:0D:AB:20
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 01A0C17A86998F1B9501D4F45E4F3F6DB044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 01:00:27 +0000
Manifest this update: Mon 21 Sep 2026 01:00:27 +0000
Manifest next update: Tue 22 Sep 2026 01:00:27 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: W+iBV1MRccNTwmD0F75IF8j0/klbCFWdVx187bZ8fio=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:86:99:8f:1b:95:01:d4:f4:5e:4f:3f:6d:b0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Sep 21 01:00:27 2026 GMT
Not After : Sep 22 01:00:27 2026 GMT
Subject: CN=3a2b3caa5de050aca5c28e0b3c4f484f3e0dab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:91:3d:92:5b:1d:0d:f3:40:78:f5:39:83:
29:f4:87:a2:61:5b:a6:cc:ef:64:8f:7d:92:b7:71:
85:2b:3e:77:27:33:41:8b:7b:e6:c0:a0:6f:8d:8d:
ec:3d:81:9c:b5:f5:aa:d6:3c:04:c4:a3:80:e3:9f:
8f:53:e3:a4:8d:b5:4e:d0:b2:60:98:dc:2d:d9:5f:
52:18:46:59:ca:9d:60:87:d3:4d:b2:13:46:93:e8:
dd:4b:b0:bf:2c:47:57:89:0c:c6:29:94:d2:75:c7:
bf:41:55:5f:73:0f:61:30:19:2e:fa:4b:76:e0:fe:
5b:0c:df:18:42:74:a1:04:2a:6f:62:6e:11:7b:07:
41:01:ed:75:d2:4b:31:21:0d:66:5b:be:59:15:f7:
13:93:8a:26:df:64:f8:9c:f4:7a:84:cf:f2:3e:b7:
b1:3a:70:bc:79:34:be:b5:84:80:e6:4b:97:dc:c8:
c7:ed:a8:b3:8f:e3:05:92:ea:f3:c9:2c:ee:1a:33:
1b:de:4e:0d:ee:1f:af:05:1b:65:99:91:e8:f7:3a:
6c:2e:21:37:80:c8:de:31:13:f4:b9:17:a2:43:ba:
52:ba:80:37:d1:af:c2:71:56:42:e3:0e:df:58:15:
52:4a:78:d1:89:5d:df:c9:ed:70:64:0e:96:b1:fc:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:3C:AA:5D:E0:50:AC:A5:C2:8E:0B:3C:4F:48:4F:3E:0D:AB:20
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:37:f3:b4:c6:40:68:c1:66:69:e0:e6:2c:92:3b:2a:a6:be:
74:fe:aa:c6:97:0d:a0:37:7c:a5:e6:2d:3e:b8:cd:dd:d8:db:
6a:c6:32:cf:fd:c8:a7:ba:51:17:33:ce:f1:c9:35:b7:39:a7:
3d:c0:5d:77:a5:2a:b4:1a:f1:37:bd:d8:ca:f4:cd:f0:43:00:
c4:9d:0a:b8:69:10:56:86:25:41:32:67:58:e6:3d:1a:04:fc:
a3:7f:16:b2:f0:68:7b:cf:23:da:b1:7e:c4:09:72:d1:2d:6e:
20:7f:1e:ab:ae:66:c5:49:9a:53:52:1d:80:90:72:1c:3b:e0:
15:4c:7c:08:b6:00:71:4d:ac:23:d4:6c:d7:31:cc:a1:3d:e2:
b0:ce:02:b9:5b:2d:48:e2:d3:24:10:c7:f7:07:e1:63:14:32:
95:55:74:4f:03:05:4e:97:91:a2:fa:21:a4:68:43:b4:b8:b3:
6f:f9:68:6a:de:7e:55:fa:b5:4a:59:8b:a8:39:ca:8c:f4:63:
34:ba:be:3e:e7:06:02:6e:3f:cf:1a:53:5f:2a:66:a0:ae:96:
81:8b:5b:f7:1d:1f:3d:09:61:26:58:73:9f:92:bb:30:21:13:
ea:e2:86:61:6c:c9:84:26:f5:c8:21:1c:fc:ad:87:ad:76:2b:
d0:10:9d:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBeoaZjxuVAdT0Xk8/bbBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5
OGVjZGQwHhcNMjYwOTIxMDEwMDI3WhcNMjYwOTIyMDEwMDI3WjAzMTEwLwYDVQQD
EygzYTJiM2NhYTVkZTA1MGFjYTVjMjhlMGIzYzRmNDg0ZjNlMGRhYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTuRPZJbHQ3zQHj1OYMp9IeiYVum
zO9kj32St3GFKz53JzNBi3vmwKBvjY3sPYGctfWq1jwExKOA45+PU+OkjbVO0LJg
mNwt2V9SGEZZyp1gh9NNshNGk+jdS7C/LEdXiQzGKZTSdce/QVVfcw9hMBku+kt2
4P5bDN8YQnShBCpvYm4RewdBAe110ksxIQ1mW75ZFfcTk4om32T4nPR6hM/yPrex
OnC8eTS+tYSA5kuX3MjH7aizj+MFkurzySzuGjMb3k4N7h+vBRtlmZHo9zpsLiE3
gMjeMRP0uReiQ7pSuoA30a/CcVZC4w7fWBVSSnjRiV3fye1wZA6WsfwuMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDorPKpd4FCspcKOCzxPSE8+DasgMB8GA1UdIwQY
MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt
ZWI2MmU4YzRkZmE5LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5
LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizfztMZA
aMFmaeDmLJI7Kqa+dP6qxpcNoDd8peYtPrjN3djbasYyz/3Ip7pRFzPO8ck1tzmn
PcBdd6UqtBrxN73YyvTN8EMAxJ0KuGkQVoYlQTJnWOY9GgT8o38WsvBoe88j2rF+
xAly0S1uIH8eq65mxUmaU1IdgJByHDvgFUx8CLYAcU2sI9Rs1zHMoT3isM4CuVst
SOLTJBDH9wfhYxQylVV0TwMFTpeRovohpGhDtLizb/loat5+Vfq1SlmLqDnKjPRj
NLq+PucGAm4/zxpTXypmoK6WgYtb9x0fPQlhJlhzn5K7MCET6uKGYWzJhCb1yCEc
/K2HrXYr0BCdFQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:03:10 2026 by rpki-client