Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: T7QKE02QN/QlWps7uEU65mci8uEhel8CvubqFOXTa34=
Subject key identifier: 3B:24:7A:28:58:AA:0D:45:29:21:2B:76:7A:6D:7E:18:5C:7B:D6:6B
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019F924874D41872532D197F078F86FB2284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 04:00:49 +0000
Manifest this update: Fri 24 Jul 2026 04:00:49 +0000
Manifest next update: Sat 25 Jul 2026 04:00:49 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: ukWvYqEzN0edlbGvVazPPh5byI4mAmD4+0qEOPmf1LA=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:74:d4:18:72:53:2d:19:7f:07:8f:86:fb:22:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Jul 24 04:00:49 2026 GMT
Not After : Jul 25 04:00:49 2026 GMT
Subject: CN=3b247a2858aa0d4529212b767a6d7e185c7bd66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:a7:a7:29:1c:ee:d2:9e:3f:65:dc:a9:39:
77:b8:9f:29:fe:43:50:c9:57:5c:3c:61:85:30:43:
fb:e1:c7:e8:ad:00:2e:08:77:cc:c6:ba:e1:35:9b:
70:03:45:82:f0:a8:f6:d0:41:40:43:de:3d:66:12:
9f:7b:7d:80:2a:e6:1c:04:3c:05:b3:16:e2:81:85:
bb:97:7f:cb:30:1f:d4:af:04:71:42:05:1a:d6:d3:
cb:d7:f8:d9:b7:dc:33:2c:20:86:32:04:7b:c1:fd:
93:55:34:cc:68:9c:4c:78:10:8b:14:4b:58:f7:83:
90:a1:9e:7d:b1:0c:d5:7d:76:f2:df:b4:ba:2a:5b:
ea:f6:fb:6c:0f:6a:17:e8:a9:6a:b0:58:e7:9d:34:
5d:e4:da:ab:56:3e:ed:59:e1:d0:bb:5f:70:3a:30:
e1:7d:31:cd:b9:d5:8f:b1:33:08:1e:e6:cd:99:54:
5e:8b:86:fc:b1:78:01:de:65:0e:a7:bc:60:30:03:
4b:61:b4:78:ed:d6:4f:4d:04:0d:d3:f6:16:da:e1:
6d:05:12:ec:30:b1:4a:6d:9e:21:ac:fc:e8:e0:e3:
46:cc:d5:f5:f0:50:a3:75:73:5c:bd:36:b0:36:4d:
bd:6a:02:a2:94:9e:f7:1a:9d:66:07:93:48:3b:d9:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:24:7A:28:58:AA:0D:45:29:21:2B:76:7A:6D:7E:18:5C:7B:D6:6B
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:34:ef:2d:8e:5e:2b:83:73:78:ef:6c:19:18:1f:a7:81:d8:
1f:e9:51:73:28:6c:6b:9a:56:44:c2:80:c8:f5:2c:8b:f6:c4:
a1:f4:ac:5d:9b:5b:3a:50:bf:e7:a5:7f:ef:53:80:92:9b:0d:
74:fe:a8:04:99:75:24:2a:13:75:f2:09:ff:1d:cb:a6:23:18:
8a:f9:0c:f0:11:00:b7:47:e6:2f:e3:4b:2a:b6:c0:59:fd:f1:
d8:13:af:f0:08:5b:ea:c3:f6:67:cb:3a:87:3d:25:92:ba:df:
fe:bd:38:63:bb:28:5f:6c:cb:6c:50:37:ca:db:ad:bb:f8:98:
b9:0f:95:56:6a:a2:fc:94:8a:0b:be:3d:fb:3d:d3:df:1c:20:
9d:86:70:6d:a4:26:34:ca:3b:66:30:2b:56:e9:3d:71:9e:ba:
bf:11:af:f8:53:4b:c5:29:34:0f:30:dc:a7:aa:83:3b:8b:c1:
4a:cb:fc:87:db:fe:29:34:8e:e3:04:25:fa:8c:6c:6c:b0:20:
6e:10:51:6d:c6:af:fd:43:c5:37:9a:ee:68:c1:62:ef:b2:47:
50:b5:b7:99:0c:60:23:3d:0e:03:05:0b:5d:4e:e6:ef:3b:cc:
85:64:73:48:69:d8:0a:4d:6b:d3:92:a9:7b:d3:b5:c7:cc:56:
b1:bd:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:17 2026 by rpki-client