Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: ZiHY8DZiRZGrtAy6B53oQy2OXyfVtn+JNW7uc6koKto=
Subject key identifier: F7:01:85:62:E9:61:B3:47:5B:70:B4:00:F6:1A:CD:9E:FD:2F:C5:C4
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 01A1DB6F8409291A8A3F5536D4D6D9D79314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1AF6
Signing time: Sat 14 Nov 2026 19:01:20 +0000
Manifest this update: Sat 14 Nov 2026 19:01:20 +0000
Manifest next update: Sun 15 Nov 2026 19:01:20 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: 3LZ/X6slN/lC082DheYtwU168eU4aEc2LQ37S6SmiJM=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:84:09:29:1a:8a:3f:55:36:d4:d6:d9:d7:93:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Nov 14 19:01:20 2026 GMT
Not After : Nov 15 19:01:20 2026 GMT
Subject: CN=f7018562e961b3475b70b400f61acd9efd2fc5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:68:11:65:3d:a0:61:45:7a:10:1b:15:7a:
43:a7:34:f0:53:be:e1:83:c3:54:4e:66:db:8c:a1:
28:be:81:a4:bf:84:e8:c7:d7:9f:76:ff:91:5d:83:
25:34:52:bf:0e:1a:3e:50:99:e2:d8:1d:d9:f3:2a:
9b:19:70:de:b5:ec:30:26:dc:8c:67:bf:6a:7e:73:
e6:23:e5:70:55:1d:c2:c1:90:c2:32:c1:c7:18:86:
54:d1:e9:7f:4d:d3:fb:8b:09:38:d6:77:4b:31:7e:
3e:41:33:a1:c3:73:18:02:10:b8:90:12:65:80:8a:
87:62:62:49:8c:96:95:d5:2f:58:25:70:74:e2:92:
6c:7c:86:22:1f:c7:f7:95:93:a1:0f:9b:da:7c:2c:
6d:ed:ee:ce:9b:43:59:7a:a8:2e:b6:5a:dd:69:9c:
68:3a:08:14:f8:66:d1:98:88:47:c1:76:87:57:b1:
64:a6:59:1e:d3:9b:d0:a1:da:fc:27:41:44:6a:e4:
5f:a8:34:0f:54:df:a1:c3:a3:06:66:7c:4f:61:a8:
2c:50:9e:ed:2a:0c:26:53:52:fa:06:8a:fa:ae:53:
9f:9c:6d:e8:8b:33:89:61:bb:46:f5:95:c1:3c:2b:
a8:08:80:9f:6c:25:f8:02:22:f8:66:d2:99:67:3d:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:01:85:62:E9:61:B3:47:5B:70:B4:00:F6:1A:CD:9E:FD:2F:C5:C4
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0a:4b:75:52:23:ec:a8:59:3a:02:3a:da:15:e3:ed:76:c4:
02:46:91:e9:44:b4:32:d9:81:0b:84:b3:92:79:cd:89:1e:c1:
fa:ba:ac:01:22:c1:74:3f:8e:75:bc:64:2d:0f:45:d7:f7:3a:
7a:3c:91:b1:c8:74:94:11:da:25:23:5e:a8:05:d9:1a:9b:8e:
20:59:c0:41:f1:ca:1f:30:40:5d:48:53:de:87:dd:8f:ed:8e:
47:c0:42:54:1b:d5:49:09:3e:23:1b:66:06:6a:0c:3c:07:0e:
51:f2:64:df:03:6b:20:df:1f:cd:62:0a:b4:e1:eb:d2:22:6b:
62:a2:c9:6f:1c:cb:f3:24:5b:0a:71:81:63:5a:3f:16:79:a5:
6c:ab:08:70:cc:00:ce:1c:94:0c:65:b5:5f:3d:dd:b2:61:0b:
e7:cc:d0:7f:7d:48:8e:ef:92:e8:76:a8:9a:ac:0b:f0:09:cf:
e1:64:fa:f7:73:f4:72:70:5b:f4:65:8a:42:5f:16:9f:9f:e6:
1b:15:3c:8c:01:f2:1f:f8:f9:c7:2a:59:25:59:08:2d:6c:25:
37:16:24:38:99:db:48:cb:76:bb:e2:b3:31:ab:75:e3:d0:84:
fd:46:0b:c7:1c:48:a5:14:d3:c6:1b:27:96:47:0a:a1:e9:95:
5d:8e:48:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbb4QJKRqKP1U21NbZ15MUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5
OGVjZGQwHhcNMjYxMTE0MTkwMTIwWhcNMjYxMTE1MTkwMTIwWjAzMTEwLwYDVQQD
EyhmNzAxODU2MmU5NjFiMzQ3NWI3MGI0MDBmNjFhY2Q5ZWZkMmZjNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoJoEWU9oGFFehAbFXpDpzTwU77h
g8NUTmbbjKEovoGkv4Tox9efdv+RXYMlNFK/Dho+UJni2B3Z8yqbGXDetewwJtyM
Z79qfnPmI+VwVR3CwZDCMsHHGIZU0el/TdP7iwk41ndLMX4+QTOhw3MYAhC4kBJl
gIqHYmJJjJaV1S9YJXB04pJsfIYiH8f3lZOhD5vafCxt7e7Om0NZeqgutlrdaZxo
OggU+GbRmIhHwXaHV7Fkplke05vQodr8J0FEauRfqDQPVN+hw6MGZnxPYagsUJ7t
KgwmU1L6Bor6rlOfnG3oizOJYbtG9ZXBPCuoCICfbCX4AiL4ZtKZZz0ltQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcBhWLpYbNHW3C0APYazZ79L8XEMB8GA1UdIwQY
MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt
ZWI2MmU4YzRkZmE5LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5
LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQpLdVIj
7KhZOgI62hXj7XbEAkaR6US0MtmBC4SzknnNiR7B+rqsASLBdD+OdbxkLQ9F1/c6
ejyRsch0lBHaJSNeqAXZGpuOIFnAQfHKHzBAXUhT3ofdj+2OR8BCVBvVSQk+Ixtm
BmoMPAcOUfJk3wNrIN8fzWIKtOHr0iJrYqLJbxzL8yRbCnGBY1o/FnmlbKsIcMwA
zhyUDGW1Xz3dsmEL58zQf31Iju+S6HaomqwL8AnP4WT693P0cnBb9GWKQl8Wn5/m
GxU8jAHyH/j5xypZJVkILWwlNxYkOJnbSMt2u+KzMat149CE/UYLxxxIpRTTxhsn
lkcKoemVXY5I0Q==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:34:16 2026 by rpki-client