Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: SKWdyfOT0nYeB88jF51b7ccVxL0Lv1bb9pNOgmoHdXM=
Subject key identifier: A0:FB:B6:F1:F8:35:BD:2D:1C:3F:C0:CA:3C:3C:10:B4:30:40:36:2B
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 01A12B44DA5D01F4F455A13B58AAC3BC78F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 07B4
Signing time: Sun 11 Oct 2026 14:01:34 +0000
Manifest this update: Sun 11 Oct 2026 14:01:34 +0000
Manifest next update: Mon 12 Oct 2026 14:01:34 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: na91RnbeKbCSrFqa12icdsOsBFXTAz3yMgch8vDiHI0=)
2: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (hash: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:da:5d:01:f4:f4:55:a1:3b:58:aa:c3:bc:78:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Oct 11 14:01:34 2026 GMT
Not After : Oct 12 14:01:34 2026 GMT
Subject: CN=a0fbb6f1f835bd2d1c3fc0ca3c3c10b43040362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:2f:77:09:11:86:98:2f:aa:8d:99:bc:e1:
54:89:f3:d3:2a:27:50:a0:39:a4:3d:bc:9b:1f:83:
02:e1:50:44:39:02:72:b1:b4:aa:8f:4e:d4:cc:ac:
05:53:31:57:55:0b:5f:90:77:41:5f:e7:4a:ff:c5:
b3:3a:b3:15:de:74:da:4e:f2:d9:10:b2:d2:0e:8c:
6f:eb:80:80:1a:ef:b2:3c:20:7c:dd:05:86:dd:15:
2f:34:99:90:78:3d:47:a7:68:c0:0b:43:5d:2c:5d:
8b:f7:31:59:39:40:59:5f:48:c4:e6:4d:71:96:04:
9f:e7:4f:0e:41:4a:51:cb:50:20:12:43:ef:47:b4:
99:d8:d6:70:91:00:74:91:75:8c:f7:ec:f3:64:ec:
54:75:40:36:86:31:41:5d:94:f2:5c:ae:b3:30:5e:
ad:cd:be:89:67:9e:ab:27:c8:ac:0b:ce:41:34:d0:
67:bd:f8:a1:e7:25:c6:1b:30:3c:7b:92:ca:bc:37:
64:b1:ee:76:a3:24:48:bb:5d:4d:8f:17:ca:02:7b:
49:9f:8a:f3:ca:93:87:54:0f:0f:a1:a3:21:f7:4e:
82:f7:ef:45:79:64:89:d8:25:fd:fe:fd:c1:04:f9:
55:63:1f:39:60:6a:e1:35:90:3d:db:b1:c5:58:7b:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FB:B6:F1:F8:35:BD:2D:1C:3F:C0:CA:3C:3C:10:B4:30:40:36:2B
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b8:27:b7:cd:d1:71:24:33:bf:8e:21:15:db:fe:49:98:3f:
93:81:13:ef:c7:85:6a:00:7e:4c:38:89:6e:3e:08:61:79:c9:
a8:6a:f9:bc:29:43:3f:fd:a2:ac:2a:ca:29:14:fb:2f:04:fb:
f8:0e:03:63:12:1b:5d:53:ad:cb:3d:c2:7f:20:16:c1:44:8e:
ff:06:5a:df:8a:83:42:07:26:a3:c5:fb:5d:64:d7:16:36:1a:
25:fc:ee:8e:1e:40:65:8e:00:ca:96:f0:48:2d:5b:34:51:4b:
c2:c6:fe:8f:e3:ee:4e:80:43:5e:e6:82:39:1c:27:46:09:5e:
65:60:83:7c:a1:a6:9b:f4:01:6e:ce:62:e8:0b:eb:df:74:cc:
3b:36:84:47:57:ac:14:71:a1:ff:4a:fc:8b:61:f0:62:64:bb:
57:37:99:37:91:59:c8:f3:1e:d8:d7:5a:a4:1a:af:d8:80:ee:
ed:ec:0f:ba:5c:8b:3d:e3:4d:9f:f5:c5:65:9c:c6:6c:57:8f:
f4:33:5c:2f:74:51:16:a7:c1:b7:9a:19:52:49:38:0b:01:0a:
9b:ce:26:3e:d8:75:f1:d4:1f:25:c4:c7:8d:b3:aa:56:77:ca:
d4:b5:2f:76:b1:16:f6:90:9c:3d:d3:86:a6:20:f6:f9:85:20:
b8:b2:9f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErRNpdAfT0VaE7WKrDvHjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx
NjI3ZTAwHhcNMjYxMDExMTQwMTM0WhcNMjYxMDEyMTQwMTM0WjAzMTEwLwYDVQQD
EyhhMGZiYjZmMWY4MzViZDJkMWMzZmMwY2EzYzNjMTBiNDMwNDAzNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKQvdwkRhpgvqo2ZvOFUifPTKidQ
oDmkPbybH4MC4VBEOQJysbSqj07UzKwFUzFXVQtfkHdBX+dK/8WzOrMV3nTaTvLZ
ELLSDoxv64CAGu+yPCB83QWG3RUvNJmQeD1Hp2jAC0NdLF2L9zFZOUBZX0jE5k1x
lgSf508OQUpRy1AgEkPvR7SZ2NZwkQB0kXWM9+zzZOxUdUA2hjFBXZTyXK6zMF6t
zb6JZ56rJ8isC85BNNBnvfih5yXGGzA8e5LKvDdkse52oyRIu11NjxfKAntJn4rz
ypOHVA8PoaMh906C9+9FeWSJ2CX9/v3BBPlVYx85YGrhNZA927HFWHsqGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD7tvH4Nb0tHD/Ayjw8ELQwQDYrMB8GA1UdIwQY
MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt
MzhmOGVkMDAwMWVkLzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk
LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbgnt83R
cSQzv44hFdv+SZg/k4ET78eFagB+TDiJbj4IYXnJqGr5vClDP/2irCrKKRT7LwT7
+A4DYxIbXVOtyz3CfyAWwUSO/wZa34qDQgcmo8X7XWTXFjYaJfzujh5AZY4Aypbw
SC1bNFFLwsb+j+PuToBDXuaCORwnRgleZWCDfKGmm/QBbs5i6Avr33TMOzaER1es
FHGh/0r8i2HwYmS7VzeZN5FZyPMe2NdapBqv2IDu7ewPulyLPeNNn/XFZZzGbFeP
9DNcL3RRFqfBt5oZUkk4CwEKm84mPth18dQfJcTHjbOqVnfK1LUvdrEW9pCcPdOG
piD2+YUguLKfVQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:07:54 2026 by rpki-client