Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.mft
File: IFGGYcGayWFlFSYMvTUAPxnVVwg.mft (raw, json)
Hash identifier: +CHY8O4go0b1ZhgWu7uqJWD9WT++Ol4GwnORL0Mq7so=
Subject key identifier: 1D:88:EC:C3:1C:77:0C:6E:A6:C0:F4:21:73:56:53:A0:7C:9D:2F:6D
Authority key identifier: 20:51:86:61:C1:9A:C9:61:65:15:26:0C:BD:35:00:3F:19:D5:57:08
Certificate issuer: /CN=20518661c19ac9616515260cbd35003f19d55708
Certificate serial: 01A14082D4118BF0344F38F39513E6FFD5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFGGYcGayWFlFSYMvTUAPxnVVwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.mft
Manifest number: 4B
Signing time: Thu 15 Oct 2026 17:01:18 +0000
Manifest this update: Thu 15 Oct 2026 17:01:18 +0000
Manifest next update: Fri 16 Oct 2026 17:01:18 +0000
Files and hashes: 1: IFGGYcGayWFlFSYMvTUAPxnVVwg.crl (hash: yCHVMjha5I2s8VpPyrqkApWxjyZA19dzA/LE+VnApUc=)
2: ZE4BS2JcawYJEr0tY5n1GQ_Lyn8.roa (hash: 0OEKCMODj7NnbOp0jAsOZ215i8t2tQFW2QyRXNFmwhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFGGYcGayWFlFSYMvTUAPxnVVwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:d4:11:8b:f0:34:4f:38:f3:95:13:e6:ff:d5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20518661c19ac9616515260cbd35003f19d55708
Validity
Not Before: Oct 15 17:01:18 2026 GMT
Not After : Oct 16 17:01:18 2026 GMT
Subject: CN=1d88ecc31c770c6ea6c0f421735653a07c9d2f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:00:96:cc:65:8f:58:16:c7:73:e2:5e:01:
b8:26:9f:fa:12:16:6e:69:67:fd:4c:ce:74:29:c8:
e3:6b:77:47:0f:c6:14:68:e5:c5:b8:91:a5:ce:bb:
4e:8a:5c:f5:42:71:f1:78:c4:ff:46:da:cc:a1:b8:
be:e8:bd:32:bc:db:a1:ab:f5:c8:83:a9:ea:fd:64:
3e:ca:a5:0c:2a:b7:e7:b4:27:64:e9:47:49:d9:ee:
2a:30:92:e3:8d:9d:18:ae:ca:64:d0:b9:9a:16:5a:
ab:04:76:57:ec:92:fd:9a:36:fb:28:63:2c:6d:13:
2a:b9:73:4e:69:17:f1:16:35:ae:73:29:2d:74:46:
09:e3:bf:ba:81:e2:1d:70:aa:c0:e9:4d:7f:70:7d:
29:c4:62:b8:c5:a6:e3:d7:87:51:06:c0:88:e1:41:
d9:f8:02:43:a8:d4:69:46:08:8b:42:4e:f3:e2:46:
42:aa:0e:8c:46:45:e1:03:19:cc:13:1d:f0:52:02:
b6:03:ed:e8:d1:b0:95:09:2c:6b:19:ae:f0:24:ec:
0a:5f:43:dc:f8:85:14:1a:bc:e2:e8:80:21:df:20:
8d:b9:37:40:93:6b:59:1b:8b:28:b9:9f:89:24:63:
74:3e:02:91:b6:eb:b3:bc:b9:e3:eb:1d:79:6b:e5:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:EC:C3:1C:77:0C:6E:A6:C0:F4:21:73:56:53:A0:7C:9D:2F:6D
X509v3 Authority Key Identifier:
keyid:20:51:86:61:C1:9A:C9:61:65:15:26:0C:BD:35:00:3F:19:D5:57:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFGGYcGayWFlFSYMvTUAPxnVVwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d4:20:30:db:ce:9d:b6:1a:a9:34:72:48:e9:25:49:6a:e1:
96:5a:cb:08:72:e0:96:2d:b1:a8:62:9b:5d:c5:3e:3d:e8:8b:
76:b1:ec:94:60:c3:e4:4b:3a:ca:17:b1:ff:8e:4f:f4:f6:04:
4f:37:30:64:f9:e2:71:01:3f:b5:ad:01:b8:b6:ae:bd:c8:3c:
d9:31:f9:47:be:0b:a7:4b:9b:6b:b5:c6:8e:3e:71:16:d0:9e:
a8:51:69:a4:64:01:2d:7c:c0:93:23:8f:c9:4b:5f:43:ac:4c:
c6:f2:93:5a:b4:a0:51:f2:8e:74:06:53:bf:b6:17:80:e7:17:
32:7a:c7:ec:cd:46:18:68:5f:5d:7d:1e:3b:e1:fb:a3:39:1e:
a9:0b:8c:80:80:d2:44:54:8b:65:f4:93:12:f2:dd:b4:8a:8b:
a2:18:01:32:fd:75:06:0d:e8:79:4c:56:c3:e5:5a:d2:59:8b:
ab:e0:5c:51:e7:52:4a:a4:3b:9f:7b:e9:a8:64:b9:0f:85:27:
b5:58:fe:8f:df:15:30:48:a1:ff:d1:9c:d2:e0:82:31:82:d9:
2a:a4:59:9a:39:b1:c0:b2:83:55:d4:80:e7:65:92:36:83:67:
bb:50:5c:93:a9:8c:94:f8:dc:b0:7f:d9:c0:37:7f:a5:09:e0:
69:26:87:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:40:17 2026 by rpki-client