
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: kH0pkSkfgOLsi8tn3+M+/zF5QKZEqW7LhlTQSuFXdYY=
Subject key identifier: E6:CD:E9:B3:07:F8:64:8F:53:7D:C2:74:60:55:C1:29:B3:7E:D5:48
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019E1D901B2BFC552D78B00770BB9009382A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:00:43 +0000
Manifest this update: Tue 12 May 2026 19:00:43 +0000
Manifest next update: Wed 13 May 2026 19:00:43 +0000
Files and hashes: 1: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (hash: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4=)
2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: xJ+4ZXH8cnsGqy+nFS0HissCqxc1RMUp/20AwsgQ6ds=)
3: JuxIitzUr2hFBOCtFiGnp22yBGQ.roa (hash: 79W8uwreRKkXOWWJ78T/ZxjFFxIlTscrV8quE7vQsjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1b:2b:fc:55:2d:78:b0:07:70:bb:90:09:38:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: May 12 19:00:43 2026 GMT
Not After : May 13 19:00:43 2026 GMT
Subject: CN=e6cde9b307f8648f537dc2746055c129b37ed548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:da:e6:70:cf:27:38:17:63:48:d5:df:53:
aa:f2:1f:70:6c:bc:63:aa:ef:10:72:60:21:74:e7:
32:9b:6f:83:20:01:14:b1:a5:92:9c:59:ae:0c:7e:
71:86:d8:83:a4:fb:7b:46:46:cd:88:23:aa:ea:6c:
38:d7:96:78:16:c5:d1:7f:d2:16:a1:3e:b0:22:ce:
57:26:4e:0a:b8:57:8a:e1:27:a6:ad:90:08:e5:93:
a8:e6:14:1e:bb:8e:8a:84:6c:0b:dd:7b:8c:77:83:
4c:b2:ac:f6:d0:2a:5b:8b:43:da:4c:18:03:50:66:
54:42:07:72:e1:31:be:e2:bf:7a:ff:23:00:7b:56:
e9:dc:df:b4:23:74:c7:7e:8f:4a:b6:13:a5:9d:34:
f2:a8:43:21:e5:44:d8:0f:1b:f8:ec:56:44:ec:a5:
12:68:da:56:e1:28:73:40:46:3e:e7:20:c8:3f:e9:
72:9a:dd:5d:65:a7:5a:71:c7:73:5f:6e:04:21:e5:
6b:07:d6:a0:86:14:96:70:fa:cc:a4:86:2b:91:be:
15:f7:e2:90:2b:6f:79:58:0c:51:1b:36:8e:f8:a1:
c8:a7:b8:81:ea:9f:b4:a0:35:e1:38:11:e1:f1:79:
44:99:8c:26:10:cd:a7:14:a5:a0:7f:77:a8:23:41:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:E9:B3:07:F8:64:8F:53:7D:C2:74:60:55:C1:29:B3:7E:D5:48
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:98:fe:26:38:6d:2f:33:1d:a3:9f:d5:8a:5b:90:4e:ff:63:
72:4c:ea:97:15:6d:c5:6d:62:8e:e5:11:5d:7f:f8:3a:bc:5a:
d4:09:76:12:5d:89:46:2f:da:f9:87:ed:13:f9:72:90:c3:f2:
81:1e:e5:aa:1f:06:10:f0:3b:de:2f:07:de:6b:65:4b:59:f4:
17:6c:80:cf:39:53:6c:fb:77:f7:6c:89:d5:6e:23:4f:e6:59:
50:9b:92:75:7a:b3:22:22:e5:91:56:80:d3:50:ab:e4:cd:12:
d4:62:5a:ba:0c:6c:e1:2f:9b:cf:f7:ff:1e:96:fd:ee:77:cf:
f6:67:66:87:08:66:df:3c:8d:8e:63:74:e8:80:6f:dd:94:e7:
03:41:92:30:06:b2:a6:cd:c4:91:6a:49:2c:49:a8:a1:fb:58:
bf:33:6e:81:21:19:c2:ef:26:b7:9a:71:63:d0:31:aa:94:75:
56:4e:1c:b6:37:1b:dd:54:e5:22:2b:65:c3:4b:14:58:4f:93:
3f:bd:d8:1d:4b:69:40:78:cf:06:2a:a7:57:26:02:97:09:43:
5a:a4:5e:86:6a:ce:10:e5:a7:50:c6:21:2f:c4:3f:92:f2:67:
37:da:e6:8f:f0:f8:6a:e3:cd:f5:13:37:f7:f2:da:a0:fd:21:
58:9f:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:43 2026 by rpki-client