Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: x+7K06LsN95c5wMxxgf3Lmxuwvo5oQqNpeoVsOPzD+Y=
Subject key identifier: EA:DA:DD:9E:98:EA:11:E7:7E:81:6A:9F:13:4B:A7:FF:D7:9F:EE:01
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 019F9059D1B0B70D5188A723591831B4F4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 19:00:33 +0000
Manifest this update: Thu 23 Jul 2026 19:00:33 +0000
Manifest next update: Fri 24 Jul 2026 19:00:33 +0000
Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: vnfS36+tQUqdf9/wCKXJTeXTa/XlvNSQ5cG8eyXXhpI=)
3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:d1:b0:b7:0d:51:88:a7:23:59:18:31:b4:f4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jul 23 19:00:33 2026 GMT
Not After : Jul 24 19:00:33 2026 GMT
Subject: CN=eadadd9e98ea11e77e816a9f134ba7ffd79fee01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:44:a6:14:32:f9:91:fd:42:a2:ed:ec:8e:
bd:f2:16:59:1f:17:5c:04:9b:7e:e2:01:62:0a:a4:
b6:fc:40:e6:28:4f:2b:e1:1b:1e:d2:3f:5f:91:18:
90:f3:14:12:5f:f0:45:37:fa:b0:e7:98:1f:46:29:
2f:74:5d:6d:e6:46:68:f3:74:b5:95:c6:b8:d9:b8:
1d:4c:a5:7f:98:5c:e0:ee:d2:56:ec:4c:68:80:12:
46:6b:df:af:48:84:7d:8e:85:94:30:33:9c:d7:86:
84:aa:40:26:72:83:5f:13:b3:91:3b:69:e9:20:53:
4a:33:42:f4:35:2d:64:7b:e1:96:75:f3:54:df:80:
0e:ce:df:9a:7f:54:1c:82:b5:55:96:f7:20:9e:82:
12:ea:52:63:58:c8:cd:fe:30:80:4c:df:c7:c0:ed:
b0:77:1f:15:aa:6b:94:5b:d7:93:c0:35:2b:5e:81:
43:da:4c:7f:61:c4:b5:67:93:d4:c4:d4:0e:6e:f4:
cc:6a:7a:de:06:80:b8:f0:32:18:af:f1:04:0b:e6:
5b:e5:17:62:32:ce:59:ed:4a:19:5a:a7:5e:d2:fa:
6c:05:82:00:18:86:7c:f0:9c:cd:1d:da:b2:e4:8f:
46:af:cf:fc:84:48:a0:3d:49:3c:b3:72:44:c4:dd:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:DD:9E:98:EA:11:E7:7E:81:6A:9F:13:4B:A7:FF:D7:9F:EE:01
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:28:40:ec:d7:80:9d:24:f7:83:ac:ba:95:8d:a8:31:30:5a:
f4:5c:7d:43:a9:26:d7:23:6c:cd:bd:16:42:06:72:0b:13:82:
7c:a2:99:c4:29:c9:4d:68:94:a7:04:53:7e:7f:4e:c0:b1:36:
f7:78:47:93:ac:2d:7a:ae:79:74:39:09:2e:53:62:b3:ea:49:
4f:3a:1e:76:79:e1:8c:07:f9:a0:38:5a:87:2f:b5:c2:55:7b:
7c:63:4f:a5:74:45:87:74:e1:ec:65:47:4c:7a:43:1e:48:33:
e9:b3:df:cc:0b:7b:33:95:15:72:9d:03:46:9a:ad:88:3e:7d:
5f:d8:9b:f0:12:0a:1f:8c:68:11:3b:86:8e:20:67:0e:0e:5c:
39:67:77:6c:4e:13:96:b7:1e:c5:bf:04:50:16:19:9d:3c:4b:
2e:fa:4c:25:d4:53:61:67:6e:1b:c4:a2:23:4e:c8:20:32:f1:
24:e6:98:33:c8:31:a0:98:8d:47:95:2e:15:3a:e1:ea:b3:6d:
0c:19:f4:8b:9d:b3:06:1c:83:b0:8d:6f:1f:13:70:00:22:77:
4c:38:b2:02:67:94:91:49:bc:e0:cf:ff:94:e8:f6:cd:65:a2:
c4:87:ff:a2:b0:c8:7d:67:e9:03:e9:15:ed:50:c1:80:fc:2e:
da:de:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:10 2026 by rpki-client