Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: 5y+sITn0dx4TXb6td40kWylx/plk/b0jriVFicPcurM=
Subject key identifier: FD:A3:92:7E:CB:28:0C:09:8F:CA:3A:6C:A9:74:A0:B5:BA:40:9C:89
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 019CABA1DFCA4A10B12F19A5AC3BF95F0472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 0BDE
Signing time: Sun 01 Mar 2026 23:00:38 +0000
Manifest this update: Sun 01 Mar 2026 23:00:38 +0000
Manifest next update: Mon 02 Mar 2026 23:00:38 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: uz3msUNKw1CrosMzcNRJ6yuoLAL1nW9aET0Eoh8T1Z8=)
2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:df:ca:4a:10:b1:2f:19:a5:ac:3b:f9:5f:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Mar 1 23:00:38 2026 GMT
Not After : Mar 2 23:00:38 2026 GMT
Subject: CN=fda3927ecb280c098fca3a6ca974a0b5ba409c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:00:4d:f1:10:eb:a8:8a:f5:28:f5:dd:a9:
a3:f4:67:d5:21:58:88:1b:be:28:99:8f:a0:97:79:
92:84:a1:23:1a:54:18:7e:e1:60:17:b3:38:25:70:
c3:b4:9c:1b:12:14:c5:a8:b2:79:68:28:0f:60:f6:
ce:b7:7c:f2:cd:01:7f:4f:8d:21:fd:00:42:e3:f5:
6b:7d:7a:de:a7:4d:35:16:0e:6b:3e:92:d2:06:04:
75:bc:67:be:3f:3c:af:1e:54:79:67:9c:9d:83:63:
87:e0:ce:58:74:0c:64:88:66:0d:db:fe:52:3e:2f:
6a:a6:d6:01:e6:be:cc:a1:78:4d:3c:bf:ca:9e:cd:
ef:de:fe:1b:9f:b9:ce:ca:0b:2f:15:e5:74:9c:18:
67:67:36:54:63:47:0a:de:3b:68:da:af:6f:3a:69:
d5:c2:a6:dc:ec:5a:8b:6d:f1:68:6c:c7:e4:f5:bf:
35:76:bf:0b:ea:d2:d9:bd:6a:df:69:00:24:ba:09:
2f:1d:14:41:1b:50:b0:30:66:0c:33:14:8f:d8:31:
91:92:da:0f:cb:45:dc:79:1e:98:71:4a:2f:01:48:
9f:8e:e5:44:62:d8:ed:db:2c:ba:3c:7a:b6:a3:16:
f0:04:c1:b8:60:da:48:15:c4:8a:0c:3c:e8:67:45:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:92:7E:CB:28:0C:09:8F:CA:3A:6C:A9:74:A0:B5:BA:40:9C:89
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:01:17:30:93:df:ad:67:33:ed:54:92:1e:3a:79:9d:1e:39:
8f:3d:48:fa:d0:9d:8b:6b:90:86:c7:68:5c:b7:99:69:5f:d9:
72:0f:6a:99:a5:8d:13:0b:d9:02:e4:7b:ac:c0:dd:6c:87:7c:
4e:94:6b:ff:63:a4:ec:0a:c1:7b:10:e8:68:ea:4d:75:5d:60:
23:fb:ad:9a:ff:ff:d5:60:5a:d7:8a:44:a8:f5:c8:03:8b:76:
87:90:e8:40:de:b6:d1:ac:b4:52:42:64:be:54:6d:58:1b:9d:
8d:6e:aa:4f:79:45:9a:9c:64:f9:68:1e:46:44:0b:3c:5b:14:
ce:77:2e:a3:93:d8:e4:5f:94:b3:20:28:fc:32:53:ce:6b:57:
71:49:53:b2:83:7e:c9:52:4a:54:e4:5d:70:18:fc:a9:6f:17:
10:3c:e2:09:0f:fd:86:d3:85:46:2a:06:f5:91:db:b0:14:a2:
39:2c:81:d1:c3:c8:69:ea:5f:71:bf:9f:68:2e:94:a5:79:58:
98:6b:d7:c0:0e:9a:51:7c:b6:08:99:bd:74:96:9b:28:b2:8f:
40:a6:f3:7b:2e:9b:a8:f8:b6:f9:d8:a3:8f:19:e1:05:73:d3:
a5:9f:fd:cf:43:22:d2:cc:02:e3:00:71:3d:88:d9:02:75:ce:
36:9d:fb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:15 2026 by rpki-client