Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: YCYFfttSsJDZMStBryMwwC/IEIbtVifWc5ZGPAK4hTA=
Subject key identifier: 8F:67:7E:52:F5:CC:07:2B:CE:6D:D7:D6:06:C4:87:42:66:05:48:91
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 019D273ABAD4DFD29C442770DE7D64F145BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 17E8
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: OS34Ut8boy6WxO9M6SWW+CsijRfbfzSjooCWYDkPMfo=)
2: qSWfUPbdifhrh3aKuAhxxmylP6A.roa (hash: fB+qGwcW2GhnHX2osyvSPDhd9KmuxX/DLSWIY8hF8h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ba:d4:df:d2:9c:44:27:70:de:7d:64:f1:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=8f677e52f5cc072bce6dd7d606c4874266054891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:a6:b6:a0:96:70:d6:7f:8b:37:96:ca:a9:
47:dc:c6:35:37:23:c0:96:13:7f:81:31:7e:66:46:
13:fd:12:ec:39:ba:8a:a4:e5:d1:33:8c:2f:bb:d4:
22:85:8d:21:e2:6a:5e:88:af:69:77:f0:5b:2d:05:
92:5e:3f:92:52:0f:58:78:ff:26:16:25:d3:2d:00:
1a:ff:3a:9b:70:12:ea:78:5a:63:ec:f4:9b:3e:59:
30:9a:a9:20:8e:1d:d6:04:49:d0:03:5f:0d:b6:67:
fb:2a:61:b5:87:83:8b:c6:f8:36:ed:a3:0c:bd:e4:
35:c3:16:57:39:62:65:47:6a:d8:1f:19:a6:56:19:
c1:6f:3b:27:a4:61:74:25:f5:30:a8:fe:8c:44:8d:
39:70:73:f5:14:f9:37:27:88:4e:e3:05:ab:c2:24:
2a:24:59:f2:74:34:44:65:27:f0:a2:42:49:0c:dc:
dc:87:82:6a:a0:13:06:79:e2:68:8a:12:64:cb:5e:
05:16:94:f9:8a:fd:ef:32:fc:9d:06:89:b5:8e:fc:
38:c6:db:07:26:a3:9c:12:f5:95:26:13:81:5b:83:
b9:ee:ff:16:4a:57:41:f4:3d:f9:44:90:cb:fb:76:
6f:bc:a7:d5:77:48:53:51:8c:27:83:35:04:8a:6c:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:7E:52:F5:CC:07:2B:CE:6D:D7:D6:06:C4:87:42:66:05:48:91
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:84:fc:bc:89:0c:8d:3b:6a:b4:e2:bd:d6:84:ae:59:37:67:
d4:64:e4:22:72:25:87:ee:58:fe:20:9d:f6:62:4b:45:93:77:
c4:50:fb:5b:37:0e:c9:31:cb:91:df:d3:f7:06:6e:12:ca:f6:
7a:5b:d3:4a:f6:bc:cd:fa:6a:f8:be:50:7d:db:2e:a5:db:57:
71:36:66:41:11:03:99:c5:35:68:de:df:f6:09:ab:2f:1d:16:
20:7b:45:26:0b:f6:fb:0b:43:4a:a4:55:f0:03:44:39:32:a5:
38:b2:f0:9a:35:21:95:02:44:56:9e:cf:c5:e3:a4:d9:f5:fb:
97:b3:37:a3:eb:da:32:9f:76:b6:04:39:b8:6f:3d:db:d4:b9:
d0:43:47:18:8c:80:5c:b1:3e:96:a0:1c:98:78:95:15:59:ae:
d3:bb:e8:17:de:e0:ce:8b:cc:a6:4a:49:7e:5a:f5:44:3a:7d:
ce:ec:3e:79:8e:5f:03:0d:08:da:59:92:04:d9:e8:82:8b:48:
7e:0a:df:5f:49:51:15:73:05:d4:87:7a:06:6b:e7:40:9e:24:
57:2e:ed:eb:1d:c2:4e:17:43:78:f8:c6:3c:e7:45:63:e7:99:
ed:aa:c9:8a:09:c5:d5:07:93:de:58:8a:de:98:09:21:01:08:
3a:64:07:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:13 2026 by rpki-client