Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: ZHRydINm7obQ7Y+wIPtTJupCG3L2r8f9J3nmuQ99YzQ=
Subject key identifier: 32:7F:57:FE:0A:8B:0E:44:B3:C7:88:BE:71:6D:BA:C5:FE:39:18:83
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 019D284E1D9AA5C7A1FD9DE1056852CF9405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 04:01:41 +0000
Manifest this update: Thu 26 Mar 2026 04:01:41 +0000
Manifest next update: Fri 27 Mar 2026 04:01:41 +0000
Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: IzozBswO4CSO0wVubuM2S4PjTvtXLoWud1dT4JV3y7w=)
3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1d:9a:a5:c7:a1:fd:9d:e1:05:68:52:cf:94:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Mar 26 04:01:41 2026 GMT
Not After : Mar 27 04:01:41 2026 GMT
Subject: CN=327f57fe0a8b0e44b3c788be716dbac5fe391883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:a7:fb:ce:08:7a:54:20:d7:1e:ae:bb:b0:
d6:65:1d:7a:47:a6:f4:b2:17:a9:b1:d4:20:28:4e:
a6:9f:8a:bc:72:7c:5c:02:fe:13:08:56:71:9e:e6:
cf:65:fc:cd:88:ad:b0:50:e7:09:71:49:75:92:f4:
1c:8e:a0:13:e8:f8:5f:a7:e3:1c:67:92:23:82:6c:
4d:ed:5b:0e:76:15:92:85:54:f7:58:b0:cf:4e:25:
0c:b2:68:c6:49:b4:89:43:d2:66:2f:16:1e:ef:f0:
ec:d7:d8:b6:6e:ea:99:dd:6c:71:c0:95:43:ab:4f:
d5:32:64:1f:72:4e:25:f8:ea:2a:41:03:e0:8a:d6:
5b:e7:db:27:63:56:1e:87:3b:ac:cc:94:10:30:89:
c2:e9:d5:3e:ba:3e:a0:fe:c2:4d:9f:96:dc:1e:66:
7f:00:ec:4a:88:c8:5f:97:d5:37:ad:1b:0d:a4:18:
ce:d5:ac:c9:6b:cc:29:f9:3e:93:8d:b9:54:a2:c7:
20:79:80:00:39:39:b1:98:70:d5:d6:35:98:c3:5f:
3f:61:e6:d9:c9:c3:23:0f:97:0c:83:bf:06:91:47:
fd:e9:c0:a9:28:3b:c4:46:c9:14:ee:6a:61:4c:fe:
f5:cd:89:96:0f:ed:89:57:8f:3b:a9:9a:0c:c4:a2:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:57:FE:0A:8B:0E:44:B3:C7:88:BE:71:6D:BA:C5:FE:39:18:83
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:90:03:88:3f:69:39:55:a7:50:23:52:7d:d8:61:8c:b0:a2:
da:cc:1c:ac:34:3e:1b:5a:94:68:c8:f1:da:99:0a:53:b9:1c:
6f:9d:14:d5:7d:21:09:55:62:39:50:ec:62:c1:58:bb:bc:15:
65:92:c5:e1:7e:85:9a:64:51:c0:d9:21:b8:45:2f:e6:44:98:
09:fe:1a:1e:17:47:22:dd:e2:49:9a:a3:e4:4e:86:d2:55:24:
5f:c1:15:dc:e2:4a:e6:71:a6:c2:90:95:7a:ea:2d:8e:2d:58:
15:e3:01:c4:23:29:c8:96:9e:8b:a6:8f:1e:b6:0b:6b:aa:aa:
1a:99:ef:19:0b:fe:11:ee:58:4f:36:4e:f1:67:a7:30:bb:86:
72:1e:28:bf:3b:d3:6e:6f:61:df:36:03:c6:73:e1:c5:66:12:
ca:82:df:93:51:87:b4:70:36:cb:23:97:86:05:5c:eb:61:40:
3d:24:da:80:ea:48:a1:60:fb:51:d4:9a:a9:48:bc:c2:a5:ac:
ba:07:de:a6:cd:8f:81:47:34:76:44:24:c6:c5:be:0d:da:7e:
b1:0f:2d:91:41:22:40:7b:94:d5:69:21:db:d9:9b:68:b5:2a:
1a:76:26:39:b2:80:7a:eb:29:e5:6d:2c:bc:fe:2b:8c:46:4d:
41:49:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:07 2026 by rpki-client