Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: t5Z+yMrpn4HUtGCkVtwarO8yNEI29Ev6t8eAoUcHl4A=
Subject key identifier: 11:B0:61:89:D8:6D:D6:08:E8:35:33:6B:3B:47:CE:86:18:5D:44:37
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 019F916D8C5E8E7F3B0F5F8A713C2EA46246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 05AE
Signing time: Fri 24 Jul 2026 00:01:43 +0000
Manifest this update: Fri 24 Jul 2026 00:01:43 +0000
Manifest next update: Sat 25 Jul 2026 00:01:43 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: aJWEdMnemmybOCJpoRVUxcgrBRff2Yfa57OdFNm88dc=)
2: PPCzo4aoB52WIulHl2b-W42AOQQ.roa (hash: v7GTmELXw/VVFQyWL5TMg5z0A0nUbHsal/nQ+BR/mNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:8c:5e:8e:7f:3b:0f:5f:8a:71:3c:2e:a4:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Jul 24 00:01:43 2026 GMT
Not After : Jul 25 00:01:43 2026 GMT
Subject: CN=11b06189d86dd608e835336b3b47ce86185d4437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:31:7b:34:8b:06:1c:2a:47:6f:f0:d1:4a:
43:8f:5a:ed:a6:b5:c0:c5:46:3b:19:40:17:10:6f:
7b:9e:f3:09:49:f8:6e:e2:c0:ac:ee:f7:0b:dd:b3:
43:70:ea:ba:3c:e2:3a:6c:91:bb:73:a1:53:dd:ed:
b1:23:13:e2:34:7f:e7:fb:d9:77:84:b4:96:40:71:
02:12:09:b9:92:ac:15:37:bd:5b:93:71:db:b6:4e:
e7:c8:a6:c6:78:b4:c8:9d:44:ab:4c:e3:33:cc:42:
5e:b8:69:db:38:dc:6c:42:d1:20:a6:18:c2:6d:41:
bf:c3:5d:c2:9f:8a:9a:e6:20:01:9d:09:1f:df:60:
2c:11:87:b6:1a:43:e1:c2:e4:42:25:a3:aa:5d:a5:
7a:ee:a1:e6:cd:e5:2e:2d:19:67:da:1f:64:d1:9d:
e0:aa:1e:e8:b0:ec:2d:13:0b:1a:61:13:3e:4d:3a:
92:8b:15:4f:a1:ba:a2:0f:ff:79:52:07:db:86:b3:
fb:43:8c:a6:4b:db:4c:19:fd:09:7c:6f:06:4d:5a:
a7:ce:a4:42:d8:07:b7:2f:9a:29:12:34:57:df:89:
2c:79:ec:be:3b:57:5f:e2:98:8a:37:b1:b1:51:cd:
b1:3c:5f:e8:f5:ff:f7:a5:06:9b:ee:de:0b:4e:ef:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:61:89:D8:6D:D6:08:E8:35:33:6B:3B:47:CE:86:18:5D:44:37
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c4:c4:47:8b:d0:4c:60:37:c2:7e:20:d8:8b:6c:3b:25:a8:
db:b8:d1:13:6b:2c:ae:f3:c1:7c:f8:d2:5c:f7:cf:38:bd:ad:
c2:1b:5e:ad:4b:e5:55:69:06:04:64:de:e7:aa:c2:29:f3:3c:
41:d4:2e:fc:bf:68:de:6b:5d:7f:55:7b:24:87:35:c3:3e:98:
c3:02:3f:c2:c7:ee:c3:aa:00:04:ed:1d:42:19:77:e9:4f:00:
73:13:fe:c1:ee:a5:32:95:00:18:e8:d2:11:f9:13:08:15:f4:
e1:0a:ed:f3:99:30:c0:27:c8:29:f9:e2:a8:e8:34:9f:b5:49:
2f:3d:da:5a:0a:08:51:26:ad:4d:d5:3f:c8:1d:d0:2b:0d:66:
90:2e:32:02:11:ae:52:1f:f5:dc:d4:12:83:23:52:89:26:8b:
e4:80:69:40:e1:20:b9:91:67:52:f6:c0:23:e4:58:e0:62:67:
cb:63:ed:55:3f:ef:83:a6:c3:cf:6a:23:d3:00:08:44:e9:eb:
a1:15:3c:8b:b5:eb:2d:66:40:78:de:4c:4c:00:03:0f:7b:96:
6b:55:1d:c8:a5:62:6d:56:6c:8e:a6:ff:13:80:6b:b2:1b:1d:
e2:94:07:61:d9:10:70:e6:92:d2:14:22:5f:ba:b4:18:fd:ee:
d1:1e:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:24 2026 by rpki-client