Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: uC/HZmf91aOALooZdI1aSTtVnHl5R80ojwsgjzKj980=
Subject key identifier: BB:A1:01:48:3A:07:97:59:8B:20:0A:6E:65:A8:4F:47:37:B3:7F:C0
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 01A0C47B6DAB880650ED879CC9CA07513672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 064D
Signing time: Mon 21 Sep 2026 15:00:18 +0000
Manifest this update: Mon 21 Sep 2026 15:00:18 +0000
Manifest next update: Tue 22 Sep 2026 15:00:18 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: vAQuWFCG3ClauyKgmJ4Ppx3FMeR0FYFBnObuiqGfS1M=)
2: PPCzo4aoB52WIulHl2b-W42AOQQ.roa (hash: v7GTmELXw/VVFQyWL5TMg5z0A0nUbHsal/nQ+BR/mNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:6d:ab:88:06:50:ed:87:9c:c9:ca:07:51:36:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Sep 21 15:00:18 2026 GMT
Not After : Sep 22 15:00:18 2026 GMT
Subject: CN=bba101483a0797598b200a6e65a84f4737b37fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:db:c4:ef:6b:64:8b:16:ad:e4:86:a1:33:
da:b8:59:be:51:4c:2f:28:d0:d4:4b:7f:d0:87:c5:
5c:67:c0:d6:41:98:58:29:e1:e2:41:54:84:1a:22:
df:c7:84:d2:69:ca:d4:f5:0a:d7:b5:92:a2:16:fd:
f5:fd:8b:de:05:6a:85:fe:eb:ab:41:42:4a:0a:6d:
d0:34:41:e8:0f:de:b0:1f:44:e0:c8:e1:a9:3f:05:
92:ca:c9:aa:7e:9c:13:87:32:97:ef:c3:f4:7b:ba:
b4:2e:c9:21:57:f4:5a:47:ea:e4:d4:90:b0:e4:d9:
06:a0:06:21:72:ab:a6:ee:28:fa:b0:fc:9d:1f:8b:
ea:5c:b1:7d:85:99:6c:0f:c9:89:17:a9:1e:3e:2b:
91:59:6e:67:85:98:23:1f:01:83:97:37:b8:38:8b:
3d:5d:45:28:88:7e:80:2a:3e:9f:56:7b:43:dd:46:
f5:ab:40:19:da:7b:fe:32:3d:4b:7b:f3:06:d5:ba:
69:31:34:74:cb:e1:04:e0:7a:fb:ba:84:95:2e:13:
8f:0a:e5:88:88:62:7e:85:78:98:19:f7:5c:2d:3d:
bc:da:45:7f:f1:12:18:e4:83:7c:32:73:83:96:b1:
0d:69:d2:7c:42:87:12:c4:0b:4e:4e:04:13:d7:c1:
6c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A1:01:48:3A:07:97:59:8B:20:0A:6E:65:A8:4F:47:37:B3:7F:C0
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5b:3c:97:d9:3a:37:f5:fb:65:ff:56:b1:02:da:5e:23:f8:
b8:03:0e:af:0f:51:34:52:05:28:ba:be:48:9f:1e:b4:ac:ac:
17:ae:e8:13:98:c7:6a:0d:cd:64:95:d8:31:4e:53:7c:89:f9:
42:d3:53:5c:33:21:56:10:66:a4:4b:f0:9a:c3:16:0f:6a:59:
f7:f3:b0:b6:b9:11:cb:93:2b:64:64:6a:39:b1:9e:bd:06:96:
2a:ac:10:cd:a2:8a:aa:d0:1b:81:be:7a:94:17:b1:fe:44:70:
1e:b8:46:a2:8a:70:17:e4:2d:13:7d:8d:a1:e1:da:d0:a6:fe:
b2:14:e8:1b:5d:d7:e8:24:e8:d6:df:df:f0:d7:c6:14:41:0e:
01:78:68:12:fe:ca:8d:14:d7:11:41:74:a5:7d:80:8e:1e:35:
0d:2c:ee:5d:2c:81:d0:d4:83:6d:17:a4:b3:c3:c0:78:0d:18:
25:e9:b0:53:75:99:f2:32:75:c5:34:9a:b5:02:14:e4:c0:a1:
59:bc:fc:66:b1:d4:b5:41:f7:0b:71:f1:3c:66:49:12:6c:0b:
6b:14:f3:33:c7:7c:f1:85:78:c8:ae:e3:36:86:29:89:14:d0:
b0:fd:69:23:eb:55:09:e1:53:ac:fd:09:66:19:e8:b3:4f:fa:
d8:7c:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:16 2026 by rpki-client