Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: rMhb0/EBn6flVJxbPR721h4A001ZqKZHpmnS1wrRbe8=
Subject key identifier: 4C:2F:E7:EF:2E:F8:C3:AF:8C:9F:DE:57:7F:C9:34:86:2D:93:5F:B7
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 019D265FA54017226B38B940945029771407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 19:01:35 +0000
Manifest this update: Wed 25 Mar 2026 19:01:35 +0000
Manifest next update: Thu 26 Mar 2026 19:01:35 +0000
Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: vQQXlyfKIuHTm2+FXIZ9lk4WAaZ3xfL/vcaqVG/DQ9s=)
3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a5:40:17:22:6b:38:b9:40:94:50:29:77:14:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Mar 25 19:01:35 2026 GMT
Not After : Mar 26 19:01:35 2026 GMT
Subject: CN=4c2fe7ef2ef8c3af8c9fde577fc934862d935fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:3d:a3:d3:8d:74:9d:43:56:0e:6c:f5:bf:
58:68:91:23:18:91:da:50:45:ab:8b:c7:30:8c:c9:
f8:9d:81:df:cf:fd:4d:c5:2d:bf:99:bc:97:99:5c:
94:cd:d8:37:62:ca:c0:27:7d:64:7e:10:50:e3:dd:
ee:a9:64:82:3b:45:0c:5b:b1:88:6f:9b:51:23:1c:
21:8f:cd:a6:b9:55:a9:e0:13:cf:0a:3b:5a:8b:4b:
61:68:54:7d:c3:33:10:51:f5:cb:8c:ea:e0:97:c4:
a8:8a:c8:9f:f6:5c:59:64:23:91:3d:e1:1d:6f:cc:
95:49:9b:ee:5a:87:58:d8:3f:02:e7:2c:72:ec:fd:
fd:b0:27:b5:1a:a9:ad:6a:14:df:b9:2c:d5:13:1e:
89:45:71:1a:41:24:60:ed:66:28:c8:a9:70:c7:c5:
92:0c:82:7c:79:77:56:71:e4:e0:71:d0:22:a2:e6:
94:10:99:67:e0:c9:15:1a:f7:e8:02:e8:f5:10:7f:
31:2a:cf:cc:c7:f2:5c:19:8b:01:00:31:87:b1:b6:
9c:3e:84:50:f1:d0:ed:fa:84:cc:8d:e0:78:2c:dd:
89:47:03:82:7d:2c:e6:73:0b:2e:48:cf:4a:ac:94:
8d:0f:67:06:7f:70:c3:9a:3c:e6:3f:ca:29:76:c4:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:E7:EF:2E:F8:C3:AF:8C:9F:DE:57:7F:C9:34:86:2D:93:5F:B7
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d7:d1:b6:02:f6:f3:f8:c7:75:59:44:54:d2:d1:f8:6b:6c:
14:81:cf:29:52:50:bb:c9:1f:7c:cc:ef:78:7e:d7:cb:42:6a:
4e:a3:0b:c0:35:a6:88:f6:eb:93:3f:3f:f2:9a:ab:5f:52:fd:
21:82:bf:a5:e1:16:e9:76:b7:51:fb:6a:1c:2d:89:e9:ce:f4:
43:33:e9:b1:ee:ff:5d:9b:d7:8e:2d:96:69:23:ac:f2:24:ce:
b2:2e:32:b5:17:05:a0:ed:a5:ec:74:5a:92:5b:8a:1f:79:7c:
8d:8e:07:6a:8f:a4:c9:ae:de:6f:4a:5f:30:37:7f:0a:33:d4:
c0:e2:f2:e2:4e:61:a2:0f:0c:aa:60:aa:62:71:87:f7:ef:b5:
89:64:0e:3d:a4:2c:b5:61:b7:84:b4:6f:2f:44:b4:3b:47:2e:
8d:32:2a:29:e3:e2:7e:ca:ce:ad:76:31:27:d3:0f:57:2a:e1:
26:37:80:d7:49:d6:40:68:89:2c:f9:c4:ba:94:d5:2b:a5:8b:
65:2c:25:0b:a6:08:cd:a8:c6:a1:77:66:d0:71:6e:79:33:ee:
17:86:ed:82:16:7f:16:45:16:ae:24:7b:35:51:72:21:b8:d5:
b4:18:ec:78:8c:70:47:45:f1:cc:1f:fd:6a:d6:cb:2a:48:48:
a3:74:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:56 2026 by rpki-client