Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: 6RQFrP61HVvHBRosjjeE1R1nsIrkQe7FVAUXXNY7I6g=
Subject key identifier: 9F:51:61:05:2A:FD:E3:F2:5E:E7:77:A5:0B:BF:B7:46:E2:89:80:C8
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 019E1E6C0E8460DA9A12AD78B39FEEC0590F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 1868
Signing time: Tue 12 May 2026 23:00:58 +0000
Manifest this update: Tue 12 May 2026 23:00:58 +0000
Manifest next update: Wed 13 May 2026 23:00:58 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: vwukTPTZRs8r8EnqtoffMMN7qIchIJy2ZFs6oopOAdA=)
2: qSWfUPbdifhrh3aKuAhxxmylP6A.roa (hash: fB+qGwcW2GhnHX2osyvSPDhd9KmuxX/DLSWIY8hF8h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0e:84:60:da:9a:12:ad:78:b3:9f:ee:c0:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: May 12 23:00:58 2026 GMT
Not After : May 13 23:00:58 2026 GMT
Subject: CN=9f5161052afde3f25ee777a50bbfb746e28980c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:10:39:ee:82:64:6d:88:bb:36:f2:23:bc:
55:99:60:88:88:9f:59:51:25:d7:d2:23:b7:93:56:
77:28:93:55:27:74:8c:01:e1:d8:d9:04:ac:7c:1a:
63:61:fc:b3:9f:1d:39:16:90:c4:01:57:ef:60:fa:
7d:f8:b3:e8:af:2f:b3:79:8a:e9:c3:b8:c1:c8:b8:
af:52:4d:43:6a:18:9a:eb:9e:90:4a:c9:93:ee:9f:
71:c6:a3:8a:ca:ba:77:07:a0:34:00:83:e7:fd:20:
94:35:ee:96:69:02:26:37:54:0b:9b:cb:83:0a:19:
4b:92:b6:25:0b:33:56:44:d6:7c:42:cd:b2:5f:fa:
4a:4e:7d:e5:97:87:13:1f:f4:9c:61:e0:4d:9e:52:
99:9b:c3:a5:87:b2:85:1a:5d:d7:f8:e7:65:bd:99:
f9:3f:3f:62:3e:5a:9b:9b:87:01:8d:95:35:56:a5:
93:b1:3a:31:e9:1c:00:4c:dd:e5:b5:28:63:53:dc:
6d:2c:0f:63:14:20:b7:b6:33:5f:81:7a:0d:7d:bb:
67:a0:c7:df:ce:73:7c:1b:83:73:c2:c5:59:10:36:
38:c3:34:67:23:22:26:5d:a2:10:38:ec:ac:37:b7:
a9:d4:43:85:d5:d9:2a:7e:92:75:22:54:72:3a:6a:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:51:61:05:2A:FD:E3:F2:5E:E7:77:A5:0B:BF:B7:46:E2:89:80:C8
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:99:b5:c6:a3:3a:6f:73:d6:c6:6e:61:0e:08:6d:e8:b9:90:
e0:34:0b:c9:ce:98:28:2b:5a:9a:a3:99:2e:2a:73:b3:90:f6:
18:f3:03:75:ec:8d:ba:9a:09:98:84:16:2d:b5:fb:95:9c:1c:
a9:a2:55:0d:26:f3:58:a1:88:f7:4e:1f:01:d5:aa:83:98:a6:
5f:9f:88:28:54:20:2a:e0:65:57:7a:ab:a2:ed:ab:3e:58:ec:
0e:db:b9:04:ea:ca:5b:49:87:52:05:88:1f:dd:5b:56:6b:b3:
99:48:fd:48:c5:54:8b:eb:76:6f:b2:1d:92:11:2a:ce:92:33:
ed:39:78:f6:8b:2e:2f:a3:35:9c:a5:c0:90:42:22:a6:cd:ea:
47:e5:27:ff:e3:8f:f1:a4:1d:f6:17:bf:9c:b1:01:4d:a8:d5:
70:c2:a3:9c:30:80:e3:06:53:b0:b7:31:cf:f9:5d:fe:78:d3:
db:93:d8:71:cb:8a:f9:d1:01:00:cf:9b:61:2c:70:a7:73:eb:
c4:d9:e4:9c:ca:e2:a0:f5:a9:3e:2c:d0:82:26:d3:34:d9:1b:
a9:16:44:61:66:f8:85:25:94:65:89:fe:7d:3b:72:d4:37:3c:
62:d0:e9:e1:c7:c9:57:5f:06:4c:74:f4:af:6e:e7:b9:a1:93:
c9:bd:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:05 2026 by rpki-client