Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: pGPQ25uXpwoMDfLH31w6WoVI4NVbI3wDnosMc5MGpdg=
Subject key identifier: 01:59:37:28:69:D2:7E:73:27:DB:31:99:58:B3:C3:B0:4A:3B:9D:73
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019D265FEF0057EBAB5AC7D887758C82C5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:54 +0000
Manifest this update: Wed 25 Mar 2026 19:01:54 +0000
Manifest next update: Thu 26 Mar 2026 19:01:54 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: rgrUInp+Myau+RfUfJzwiXcrDlZMMXSEwowdov193kw=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ef:00:57:eb:ab:5a:c7:d8:87:75:8c:82:c5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Mar 25 19:01:54 2026 GMT
Not After : Mar 26 19:01:54 2026 GMT
Subject: CN=0159372869d27e7327db319958b3c3b04a3b9d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:16:1c:8f:ed:b8:4d:af:f8:05:f0:b4:83:
12:37:2d:fb:d6:c8:49:a7:e6:82:a6:64:8d:58:5a:
4f:2a:f4:29:69:4c:dc:f0:92:c6:74:48:62:1f:9a:
95:96:7c:d9:39:18:15:10:cc:08:4a:ac:ba:6f:01:
74:9a:29:21:96:0c:10:c2:bd:e7:55:c1:34:fe:32:
fe:6e:87:b8:cf:5b:f4:4d:32:80:35:73:00:f0:b4:
d9:e0:80:ef:63:3b:24:e1:90:5e:49:cc:7f:2a:ca:
58:de:da:c7:54:85:1e:d8:81:90:a1:c7:89:b0:a4:
dd:ec:c8:59:bd:79:8c:2a:67:40:98:ef:11:f7:c7:
fb:aa:01:a6:38:0d:5f:d8:60:30:33:e4:b8:07:8b:
22:09:8e:ea:1a:15:1a:d7:1d:70:24:bb:11:be:79:
7a:5e:be:da:58:1d:3f:30:9a:44:da:33:22:f7:6e:
a7:4a:13:d0:be:7e:65:16:ad:e5:36:3f:a6:ea:a1:
7c:a1:de:90:bb:10:1d:48:43:cc:94:23:11:aa:5d:
3e:ec:cf:3d:89:43:b5:2f:c0:e4:92:1b:b9:fb:17:
79:a4:24:53:11:25:d9:31:d4:a5:7a:84:91:91:4b:
64:b2:39:13:ef:8c:f1:cf:b3:f9:51:87:f6:e3:e5:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:59:37:28:69:D2:7E:73:27:DB:31:99:58:B3:C3:B0:4A:3B:9D:73
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:35:37:c9:14:4b:53:20:45:95:fc:52:d9:0b:2d:cb:71:ff:
7c:90:a0:e1:56:51:3d:37:eb:4e:15:83:1c:6f:69:1e:81:1a:
36:f1:3d:42:d5:6e:25:32:dd:16:2b:e6:e7:30:7e:c9:fa:2d:
df:26:e9:3b:3b:b7:25:6e:ba:5c:cd:fd:a0:0d:64:42:01:71:
a8:0c:73:c0:4e:72:4a:2a:25:9a:da:d8:8f:fa:dc:e4:58:2a:
6a:13:8e:95:09:8a:7a:25:8b:e9:c8:b8:ad:1a:59:61:6f:3c:
54:eb:2c:45:ba:87:d4:ed:cc:d8:1b:0b:ef:f6:8e:cd:e4:e5:
2f:e5:44:ba:b8:da:65:49:95:80:2a:9f:ab:1c:14:fe:1a:e5:
1a:36:4d:cf:a2:19:85:5b:20:f7:1c:ab:01:c4:17:ed:67:06:
56:c0:91:6f:c4:c5:ec:c9:66:27:f4:c3:20:cd:ed:e7:ed:90:
01:4c:f3:0a:34:94:a7:f7:e7:6a:0b:64:63:4a:b5:36:01:7b:
06:d8:af:0d:c8:ae:80:9a:aa:2d:28:64:fc:9e:45:83:99:db:
55:12:07:97:d1:ff:0e:e1:2d:d1:4e:80:25:84:a0:8d:cf:d7:
46:ca:56:fc:61:86:88:6d:12:ee:b3:a1:4c:fe:83:da:45:e6:
d4:59:9b:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX+8AV+urWsfYh3WMgsXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5
OGVjZGQwHhcNMjYwMzI1MTkwMTU0WhcNMjYwMzI2MTkwMTU0WjAzMTEwLwYDVQQD
EygwMTU5MzcyODY5ZDI3ZTczMjdkYjMxOTk1OGIzYzNiMDRhM2I5ZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUsWHI/tuE2v+AXwtIMSNy371shJ
p+aCpmSNWFpPKvQpaUzc8JLGdEhiH5qVlnzZORgVEMwISqy6bwF0mikhlgwQwr3n
VcE0/jL+boe4z1v0TTKANXMA8LTZ4IDvYzsk4ZBeScx/KspY3trHVIUe2IGQoceJ
sKTd7MhZvXmMKmdAmO8R98f7qgGmOA1f2GAwM+S4B4siCY7qGhUa1x1wJLsRvnl6
Xr7aWB0/MJpE2jMi926nShPQvn5lFq3lNj+m6qF8od6QuxAdSEPMlCMRql0+7M89
iUO1L8Dkkhu5+xd5pCRTESXZMdSleoSRkUtksjkT74zxz7P5UYf24+WoewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFZNyhp0n5zJ9sxmVizw7BKO51zMB8GA1UdIwQY
MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt
ZWI2MmU4YzRkZmE5LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5
LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDU3yRRL
UyBFlfxS2Qsty3H/fJCg4VZRPTfrThWDHG9pHoEaNvE9QtVuJTLdFivm5zB+yfot
3ybpOzu3JW66XM39oA1kQgFxqAxzwE5ySiolmtrYj/rc5FgqahOOlQmKeiWL6ci4
rRpZYW88VOssRbqH1O3M2BsL7/aOzeTlL+VEurjaZUmVgCqfqxwU/hrlGjZNz6IZ
hVsg9xyrAcQX7WcGVsCRb8TF7MlmJ/TDIM3t5+2QAUzzCjSUp/fnagtkY0q1NgF7
BtivDciugJqqLShk/J5Fg5nbVRIHl9H/DuEt0U6AJYSgjc/XRspW/GGGiG0S7rOh
TP6D2kXm1Fmb3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:51 2026 by rpki-client