Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier: tGJ++m7b/+AHdiMYACLTB8LuMPy2SSDYEk9R5mKSjrs=
Subject key identifier: F2:2C:A0:4E:62:FB:C4:4F:7E:BE:98:33:49:4F:5C:0B:9D:2C:54:4C
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 019D32D0B4149A0613FCCB3F9C01D295A864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number: 040E
Signing time: Sat 28 Mar 2026 05:00:31 +0000
Manifest this update: Sat 28 Mar 2026 05:00:31 +0000
Manifest next update: Sun 29 Mar 2026 05:00:31 +0000
Files and hashes: 1: EWJjDKL_EDwHB6BbjnvL5-KZVrA.roa (hash: k1Zkw+ZYuFbM+jxH6ZStxjeFuG08VsNzVKDLWpEMxiQ=)
2: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: H4l46aQYD+xXgBhVQmhkXMYzfOw9v0e3S8vc56Z+GyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:b4:14:9a:06:13:fc:cb:3f:9c:01:d2:95:a8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Mar 28 05:00:31 2026 GMT
Not After : Mar 29 05:00:31 2026 GMT
Subject: CN=f22ca04e62fbc44f7ebe9833494f5c0b9d2c544c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:f3:f8:44:ce:64:a1:4b:c9:70:e7:46:c6:
2e:ba:1e:34:ba:da:64:7b:25:0e:96:23:e7:e0:bf:
35:7b:d4:a8:b4:a0:1a:ce:e0:da:77:2e:73:4c:1b:
d8:88:4b:92:01:b1:1f:62:56:7c:b6:d4:db:db:d1:
57:fe:9c:0e:d9:5c:51:b9:c9:62:01:eb:1a:99:97:
9b:28:7d:1e:d1:c6:b4:42:70:59:c4:cf:ba:4a:8b:
b5:97:17:17:1d:94:0c:71:82:6a:0e:97:ad:f4:78:
7d:52:a6:06:c3:96:2e:3d:bb:e4:b3:b8:24:37:02:
eb:b1:11:4e:ec:b5:c4:1c:b2:da:46:d8:97:14:d3:
7a:2a:ec:52:8b:bd:61:bc:cd:df:1a:0a:46:20:db:
08:c9:b8:36:25:ea:26:5d:40:57:10:2a:0f:90:d3:
b6:30:8f:81:60:f5:eb:3e:88:a6:7d:14:d1:89:0a:
09:36:82:cd:d4:a6:b3:7a:69:9a:8a:bf:e3:3b:93:
89:e1:7e:0f:d3:e2:6d:9b:58:34:33:b1:54:8a:aa:
30:9e:b1:02:f4:c8:37:d6:4f:1c:e7:99:6b:7c:27:
f7:7d:25:20:f3:22:98:de:fd:cf:17:1b:45:4e:ec:
b2:d7:b8:de:2d:9a:25:e5:a3:de:a2:41:22:11:39:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:A0:4E:62:FB:C4:4F:7E:BE:98:33:49:4F:5C:0B:9D:2C:54:4C
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3d:dd:21:0a:f0:20:09:14:ab:6a:56:3a:cd:bf:8a:d7:f9:
a1:6b:3a:a2:05:93:dd:87:25:dc:c6:b6:59:8b:fe:1f:5f:f7:
46:06:8f:92:14:61:d9:37:8c:64:0d:eb:a5:c9:14:d2:7e:e8:
3b:d8:a0:c2:8a:10:27:a0:da:c8:b7:8e:c6:f0:14:d2:b2:22:
bd:21:b5:87:6a:0a:d6:29:ee:11:fc:f7:1a:20:9c:2b:a3:42:
7d:b8:4d:8c:90:09:8c:0f:3f:2a:82:98:a5:e1:de:27:29:09:
dd:7b:fc:39:72:af:54:5e:4b:e4:66:cb:4e:86:46:50:3a:c3:
6e:fa:f2:b8:21:af:84:03:1e:80:03:50:d1:b8:13:4a:1d:05:
22:41:54:48:08:e2:66:0a:58:e2:0f:97:6f:e9:e8:d9:44:28:
52:f7:38:7f:54:c1:c7:d7:dc:9e:90:52:9b:f2:4c:3a:dc:c9:
40:29:9d:ee:aa:c9:44:1a:3d:8a:45:a1:0b:f9:de:5b:87:eb:
83:ca:1c:00:94:6c:a2:be:79:94:f6:84:90:13:ad:51:86:ae:
b7:c5:9f:40:c6:2d:ae:4e:5b:d8:49:a3:22:9c:51:fe:d6:c9:
9d:29:56:bd:a2:56:e0:76:23:bd:d8:35:15:25:70:12:59:28:
1d:9f:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:13 2026 by rpki-client