Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: FVV1wpCOZW2s3cJfILKJ1NkmJ7pifkkee8DHM+Qkkq0=
Subject key identifier: BF:66:4F:AC:5F:1E:17:67:06:5C:F2:F5:AC:3F:CF:8A:9F:15:B3:10
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 019F95127171BF9E35B627614838243DE934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 192A
Signing time: Fri 24 Jul 2026 17:00:41 +0000
Manifest this update: Fri 24 Jul 2026 17:00:41 +0000
Manifest next update: Sat 25 Jul 2026 17:00:41 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: PPhwMWHbxUG1b8TyPcUgxjc/Xq9RYjGN6O/xnKDjBo0=)
2: qSWfUPbdifhrh3aKuAhxxmylP6A.roa (hash: fB+qGwcW2GhnHX2osyvSPDhd9KmuxX/DLSWIY8hF8h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:71:71:bf:9e:35:b6:27:61:48:38:24:3d:e9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Jul 24 17:00:41 2026 GMT
Not After : Jul 25 17:00:41 2026 GMT
Subject: CN=bf664fac5f1e1767065cf2f5ac3fcf8a9f15b310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:1d:6a:6b:7d:5b:bd:53:cb:a3:a8:e7:ef:
f4:a8:af:f8:a9:91:cc:07:87:ed:3c:25:61:de:78:
f8:84:78:8e:a1:9c:2e:43:5d:72:93:ea:b2:10:ce:
5a:d7:a7:b8:83:8a:9b:1f:75:3e:46:0f:88:3a:06:
94:dc:c3:d0:b6:c6:e5:3a:b7:01:45:4f:bf:0f:53:
f2:5a:4e:9e:fc:27:37:a0:d4:8e:5d:fc:ed:18:c0:
f2:b9:28:dc:75:c0:34:a9:30:e3:a9:b5:e7:2b:17:
cc:71:f9:d1:6f:e6:3a:54:f7:86:11:97:03:31:5e:
08:8c:a8:68:5c:cd:8f:f1:e6:50:f4:1f:8b:cc:a4:
17:f7:2b:4f:14:7f:68:10:05:e4:35:6e:10:61:30:
a6:b0:71:93:b3:a8:e6:36:9e:f3:06:ec:69:ad:27:
2a:91:05:bc:5c:8c:99:9c:8f:26:70:7c:f1:f6:6a:
35:c4:81:2d:90:6f:94:67:b5:67:49:3e:00:53:95:
01:3a:87:08:c4:da:58:73:98:3c:d9:d3:7a:63:82:
6e:5f:37:25:6f:9d:27:3d:58:fe:25:83:5a:ca:0a:
3e:c3:a7:d3:30:2a:14:7b:a5:07:d7:94:c6:af:a0:
5f:8e:d9:fa:2f:81:9c:0e:0a:aa:1d:ce:65:9e:c3:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:4F:AC:5F:1E:17:67:06:5C:F2:F5:AC:3F:CF:8A:9F:15:B3:10
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:31:6c:3e:85:e7:30:7b:8f:00:23:34:56:3c:84:3b:d7:95:
75:86:59:ad:0e:4a:67:e7:14:56:21:9c:ad:e8:9d:ff:ae:3a:
9d:c1:70:0e:4d:90:c8:65:04:86:a1:d6:0e:93:3a:05:de:0c:
df:43:9d:1f:0a:6a:5a:2f:56:f3:af:36:f2:0b:6c:fb:6d:fa:
f6:39:30:d9:1a:70:de:fe:f1:c2:42:f6:70:d3:a6:2a:22:47:
f3:ef:83:73:d7:95:27:69:bf:a9:1b:ca:fe:64:f9:7c:db:74:
f2:7c:4c:42:b7:53:a7:37:ca:84:05:05:15:6e:cb:18:e8:27:
97:07:43:10:46:8d:58:1c:a8:2e:30:87:71:c3:72:73:72:04:
44:9b:f4:bc:fe:67:2c:64:6d:16:bc:8f:94:55:f2:0a:79:77:
0c:c5:5c:5b:da:4e:07:22:8a:d6:0d:81:e3:93:e0:2f:ee:b5:
50:eb:8a:27:5c:29:a7:0a:ab:ee:de:a1:70:17:44:b4:51:68:
ea:85:9f:d0:60:4d:1a:db:24:4c:4a:d4:24:47:f7:54:8c:c4:
d8:66:e9:e5:b5:10:46:ba:e2:c3:9e:71:47:0f:98:f6:03:c1:
f3:f4:68:2c:8e:ac:35:6f:f8:0c:0e:e7:64:48:74:f2:f4:ea:
04:a9:8d:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEnFxv541tidhSDgkPek0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmQxODJhM2I0NGE3YmUwNWQzZWU3MGRjOTBhODVkNTdh
YmZiOGQwHhcNMjYwNzI0MTcwMDQxWhcNMjYwNzI1MTcwMDQxWjAzMTEwLwYDVQQD
EyhiZjY2NGZhYzVmMWUxNzY3MDY1Y2YyZjVhYzNmY2Y4YTlmMTViMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gwdamt9W71Ty6Oo5+/0qK/4qZHM
B4ftPCVh3nj4hHiOoZwuQ11yk+qyEM5a16e4g4qbH3U+Rg+IOgaU3MPQtsblOrcB
RU+/D1PyWk6e/Cc3oNSOXfztGMDyuSjcdcA0qTDjqbXnKxfMcfnRb+Y6VPeGEZcD
MV4IjKhoXM2P8eZQ9B+LzKQX9ytPFH9oEAXkNW4QYTCmsHGTs6jmNp7zBuxprScq
kQW8XIyZnI8mcHzx9mo1xIEtkG+UZ7VnST4AU5UBOocIxNpYc5g82dN6Y4JuXzcl
b50nPVj+JYNaygo+w6fTMCoUe6UH15TGr6Bfjtn6L4GcDgqqHc5lnsPYEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9mT6xfHhdnBlzy9aw/z4qfFbMQMB8GA1UdIwQY
MBaAFCBtGCo7RKe+BdPucNyQqF1Xq/uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEt
NjYwNzc4MDk5YjNkLzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEtNjYwNzc4MDk5YjNk
LzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzzFsPoXn
MHuPACM0VjyEO9eVdYZZrQ5KZ+cUViGcreid/646ncFwDk2QyGUEhqHWDpM6Bd4M
30OdHwpqWi9W86828gts+2369jkw2Rpw3v7xwkL2cNOmKiJH8++Dc9eVJ2m/qRvK
/mT5fNt08nxMQrdTpzfKhAUFFW7LGOgnlwdDEEaNWByoLjCHccNyc3IERJv0vP5n
LGRtFryPlFXyCnl3DMVcW9pOByKK1g2B45PgL+61UOuKJ1wppwqr7t6hcBdEtFFo
6oWf0GBNGtskTErUJEf3VIzE2Gbp5bUQRrriw55xRw+Y9gPB8/RoLI6sNW/4DA7n
ZEh08vTqBKmN5w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:19 2026 by rpki-client