Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: 1HJ1XzzfkzxmLf0hEPg6X15lmlcdI2re5yhsWxHdM3E=
Subject key identifier: 84:BE:B5:1D:C9:4B:BE:FF:83:D1:59:98:45:BB:70:AB:72:83:7C:DB
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 01A0D2007B638895630AE32CAFFE374DCC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 0654
Signing time: Thu 24 Sep 2026 06:00:41 +0000
Manifest this update: Thu 24 Sep 2026 06:00:41 +0000
Manifest next update: Fri 25 Sep 2026 06:00:41 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: K9qbCw0V7uWwWivVCHeYcxBrybUXLhVFl6nn8ai2RDM=)
2: PPCzo4aoB52WIulHl2b-W42AOQQ.roa (hash: v7GTmELXw/VVFQyWL5TMg5z0A0nUbHsal/nQ+BR/mNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:7b:63:88:95:63:0a:e3:2c:af:fe:37:4d:cc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Sep 24 06:00:41 2026 GMT
Not After : Sep 25 06:00:41 2026 GMT
Subject: CN=84beb51dc94bbeff83d1599845bb70ab72837cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:18:49:4b:41:71:81:fa:26:17:9a:c7:e4:
be:a0:40:61:ad:2e:4f:63:ce:2c:8e:59:5d:75:10:
02:26:fd:f4:d8:74:2a:05:2c:78:cd:f8:8a:5a:ae:
88:89:23:6f:b9:8f:c4:1a:74:2f:ba:d2:db:db:b4:
37:bd:00:55:44:7e:4f:7c:96:8b:28:a1:54:d3:10:
66:82:c0:9a:8a:de:83:20:fb:ca:af:93:d8:8e:0a:
6b:e3:63:8c:eb:b8:e6:c0:58:c1:46:34:48:3b:fd:
05:35:0f:57:b9:e2:63:e8:bc:c0:0b:e2:52:43:bc:
08:26:54:9e:f1:a3:17:fb:d0:7e:34:26:02:6f:28:
cd:b8:9f:d6:ca:12:f9:d3:37:c0:8e:96:ad:49:c9:
7f:3d:7a:c6:f5:64:17:2f:60:4b:b1:a1:11:a4:fc:
b6:fe:1e:d6:46:00:59:4b:98:4f:52:fa:2e:9e:00:
a9:91:b8:7b:13:8a:12:c7:86:a1:36:55:77:cf:cd:
a9:8a:54:1a:1f:50:da:fa:47:0c:70:e0:62:06:6c:
c5:34:37:a3:e2:6c:6e:04:6e:80:12:9c:0f:f0:56:
6b:aa:02:7b:2d:f3:e6:bf:80:4f:66:16:b5:5a:77:
94:19:7c:a2:a4:a7:8b:52:8b:c0:b4:ae:5c:2d:f0:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:B5:1D:C9:4B:BE:FF:83:D1:59:98:45:BB:70:AB:72:83:7C:DB
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e6:35:ff:32:5f:77:98:68:3a:a4:5a:02:ae:59:46:86:4d:
ef:d6:04:1f:b6:15:43:4e:3d:98:67:15:f6:27:09:e3:61:6e:
17:a9:74:dd:04:2c:66:bc:29:b1:08:ce:eb:e1:83:84:b1:e3:
1b:a0:63:30:0a:29:99:ef:fe:6c:91:e8:85:f8:4a:33:0c:a7:
d2:45:5b:d5:f0:71:f3:22:a8:f8:d5:ac:ce:89:12:81:ca:34:
fb:c5:96:7e:0b:c1:f0:3c:45:67:6f:e0:9f:9b:c5:0b:ac:96:
47:07:13:3a:21:4a:dd:66:e9:c9:98:11:32:65:4f:20:2b:cc:
3e:b6:42:a4:f8:4f:58:1d:92:52:ac:0d:8d:d0:9f:c7:0b:cf:
45:39:5f:85:fa:17:b0:9d:9f:1f:4d:8c:5b:19:cd:4a:7f:02:
64:dc:e8:8c:98:2a:fe:08:2a:b0:3a:1c:27:a7:bc:ed:42:b8:
a1:b2:b5:f0:c4:64:95:ed:65:08:21:a8:6d:82:15:ba:40:cb:
59:db:bd:da:37:e3:0a:0c:6e:4a:33:39:21:0c:37:19:93:80:
88:db:cc:6d:41:af:3d:1c:37:02:07:76:1a:3c:73:41:5c:d9:
97:ee:ac:38:77:a0:12:49:83:3e:c4:44:4e:61:bb:b9:22:66:
8a:db:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:18:52 2026 by rpki-client