Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: u4lhD+cW9dNGp918T58jP1n/XjPalhQRiSZPm505Vuk=
Subject key identifier: A3:96:6A:07:50:56:BA:EF:74:61:B2:FD:5B:E0:20:CB:5E:0B:69:A1
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 01A0D4CBAD79631765CAB19E7861D071C17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 19:01:53 +0000
Manifest this update: Thu 24 Sep 2026 19:01:53 +0000
Manifest next update: Fri 25 Sep 2026 19:01:53 +0000
Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: 7hT+itCxP4D1J/UhZgQ9BtZQXiUCFSkfRuLIo3NejF4=)
3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:ad:79:63:17:65:ca:b1:9e:78:61:d0:71:c1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Sep 24 19:01:53 2026 GMT
Not After : Sep 25 19:01:53 2026 GMT
Subject: CN=a3966a075056baef7461b2fd5be020cb5e0b69a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:fd:8d:ab:b8:0c:52:d6:78:21:77:d1:62:
fa:9c:19:50:4a:7a:bc:a3:4d:ea:87:21:4d:71:86:
3e:58:fa:13:f8:62:1c:77:e7:ea:2c:05:74:91:6e:
18:8a:db:22:8f:84:6a:ab:86:0d:60:29:5b:be:39:
bc:f1:57:ed:7c:61:00:8b:b5:58:10:81:d2:be:dc:
a0:a1:56:67:2b:11:6b:c9:9e:bc:c1:83:04:de:b9:
eb:02:ac:35:8c:6b:79:54:a8:36:5e:88:b2:f2:29:
66:86:71:b6:b3:c3:4b:de:51:35:21:f8:1f:ae:4d:
62:8d:2c:1a:f7:ff:05:ad:cc:92:06:f6:cf:27:4e:
a4:b2:9a:13:d4:cb:04:39:8b:d9:be:79:b1:32:e0:
9c:a1:0b:ad:b5:3a:41:52:b3:73:8a:dc:12:74:9a:
a4:2c:4b:7c:d7:00:00:94:5d:33:f3:e6:20:4e:bc:
53:0f:45:74:95:91:00:7b:eb:a9:43:b5:66:0d:51:
9a:e5:7b:db:d8:14:09:eb:bd:13:2d:63:f9:3d:70:
9b:23:01:f0:4d:f2:b2:22:78:06:94:5f:04:eb:6f:
58:45:ca:70:e8:c9:34:90:a9:69:1a:40:fa:45:b5:
ac:8e:2d:9b:c5:0d:91:18:e3:bf:9d:80:28:aa:35:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:6A:07:50:56:BA:EF:74:61:B2:FD:5B:E0:20:CB:5E:0B:69:A1
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:90:3a:11:f9:81:a2:ea:25:47:be:73:ba:54:8c:3c:bc:de:
81:9c:d0:18:7c:c4:83:e6:35:35:bd:fe:22:48:fb:10:01:98:
3c:48:e0:10:a8:ff:fc:e0:bf:e1:2c:af:cb:60:f4:09:d5:7d:
a0:9b:29:43:9c:bc:07:90:e0:50:d8:22:29:94:08:c6:59:8a:
68:2a:03:8c:ee:60:77:b4:58:92:ea:3c:26:38:11:ff:79:a7:
a3:e5:43:b8:0e:3e:04:ab:ab:c9:69:a7:7b:42:a6:c6:56:87:
99:c1:cc:c3:11:24:bc:e2:e3:28:1a:02:3b:10:38:62:2a:e2:
12:14:0f:5c:98:db:2f:d1:9d:b7:7a:a6:d8:09:e3:d9:94:49:
ec:3a:a8:55:fd:cf:4b:26:0a:32:2c:e8:48:40:6c:c8:dc:e5:
5f:e6:3e:ce:51:22:7d:9c:a7:46:af:85:6e:27:dd:82:a2:c2:
2c:2c:c1:51:c7:10:13:ff:5d:9d:90:b0:09:c0:c0:03:41:70:
e5:dd:c3:0e:72:de:28:ba:c0:58:a9:a4:13:ce:08:04:10:81:
ee:ab:f7:02:14:78:a2:26:4c:72:27:ae:ba:25:74:7f:01:a7:
67:87:f9:ab:bb:dd:d7:e1:a5:0b:64:7f:f0:86:a4:75:9f:f8:
a9:fe:51:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy615YxdlyrGeeGHQccF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMGY0MTNmYjBhZjBiZDhmZTEzMDgyMGQzMDQ5ZDBlNzFl
ZDRiYjAwHhcNMjYwOTI0MTkwMTUzWhcNMjYwOTI1MTkwMTUzWjAzMTEwLwYDVQQD
EyhhMzk2NmEwNzUwNTZiYWVmNzQ2MWIyZmQ1YmUwMjBjYjVlMGI2OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25b9jau4DFLWeCF30WL6nBlQSnq8
o03qhyFNcYY+WPoT+GIcd+fqLAV0kW4Yitsij4Rqq4YNYClbvjm88VftfGEAi7VY
EIHSvtygoVZnKxFryZ68wYME3rnrAqw1jGt5VKg2Xoiy8ilmhnG2s8NL3lE1Ifgf
rk1ijSwa9/8FrcySBvbPJ06kspoT1MsEOYvZvnmxMuCcoQuttTpBUrNzitwSdJqk
LEt81wAAlF0z8+YgTrxTD0V0lZEAe+upQ7VmDVGa5Xvb2BQJ670TLWP5PXCbIwHw
TfKyIngGlF8E629YRcpw6Mk0kKlpGkD6RbWsji2bxQ2RGOO/nYAoqjVkZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOWagdQVrrvdGGy/VvgIMteC2mhMB8GA1UdIwQY
MBaAFCIPQT+wrwvY/hMIINMEnQ5x7UuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2Njkt
ODJlYmEwY2IzYjBkLzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2NjktODJlYmEwY2IzYjBk
LzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZA6EfmB
ouolR75zulSMPLzegZzQGHzEg+Y1Nb3+Ikj7EAGYPEjgEKj//OC/4Syvy2D0CdV9
oJspQ5y8B5DgUNgiKZQIxlmKaCoDjO5gd7RYkuo8JjgR/3mno+VDuA4+BKuryWmn
e0KmxlaHmcHMwxEkvOLjKBoCOxA4YiriEhQPXJjbL9Gdt3qm2Anj2ZRJ7DqoVf3P
SyYKMizoSEBsyNzlX+Y+zlEifZynRq+FbifdgqLCLCzBUccQE/9dnZCwCcDAA0Fw
5d3DDnLeKLrAWKmkE84IBBCB7qv3AhR4oiZMcieuuiV0fwGnZ4f5q7vd1+GlC2R/
8IakdZ/4qf5RNQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:46:52 2026 by rpki-client