
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: 4IHUN8gZ0uwW0lIYzVGVuT8TbsHTsEDcLtAlj1g/FDI=
Subject key identifier: 97:38:C4:BC:F6:F0:18:57:BA:DD:F7:11:D3:44:27:5B:89:D4:8E:01
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 019EC0A3FF71C2D47CDC42F6581DB0A24BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 0CF2
Signing time: Sat 13 Jun 2026 11:00:33 +0000
Manifest this update: Sat 13 Jun 2026 11:00:33 +0000
Manifest next update: Sun 14 Jun 2026 11:00:33 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: pGcaTJGQo+9aiyfaKKu0iqAJ2tMb/vKo4Zw7m6tVzdk=)
2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:ff:71:c2:d4:7c:dc:42:f6:58:1d:b0:a2:4b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Jun 13 11:00:33 2026 GMT
Not After : Jun 14 11:00:33 2026 GMT
Subject: CN=9738c4bcf6f01857baddf711d344275b89d48e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:57:31:8e:86:fc:a3:c2:b0:f4:a4:ab:05:
59:ff:ad:88:d2:51:be:4d:73:b5:4b:c3:8f:93:31:
9a:f5:3b:bc:02:d3:e7:7f:e3:67:24:54:25:fc:04:
c6:bb:30:1d:84:ee:b5:32:3a:59:e1:35:cb:5b:ba:
8d:a1:50:cb:44:b5:d3:43:c6:54:73:fd:7c:d1:98:
b5:92:01:55:83:90:15:17:f9:a9:9e:9a:24:bf:db:
ce:c8:f0:7e:ab:be:87:e9:85:84:4a:29:cb:cd:a9:
ae:91:ef:4c:bb:21:1c:25:23:f9:4e:2f:71:6f:9d:
8f:32:44:9f:aa:0c:ae:b6:fa:78:8c:e7:8b:94:8b:
d6:38:16:5c:aa:af:15:4a:38:00:2b:40:2c:6c:41:
5a:70:99:b0:ee:78:87:11:09:3a:f1:c8:cd:5d:2c:
7d:9d:c5:ce:f7:46:34:bc:d0:c5:29:f6:e8:0e:19:
c6:be:ea:94:ca:79:81:e2:2e:fd:70:2d:f3:40:ae:
b1:a7:71:ed:2b:0e:90:5c:53:8e:d6:43:12:a4:9b:
fa:a9:b1:ea:31:8c:15:6a:3a:20:90:f0:1e:c9:2b:
b2:68:56:b3:52:16:58:4b:88:bd:bc:af:04:b3:2b:
ff:c6:87:9c:53:eb:e5:50:7a:e0:77:ec:f2:f3:4f:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:38:C4:BC:F6:F0:18:57:BA:DD:F7:11:D3:44:27:5B:89:D4:8E:01
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:95:2b:2b:66:42:31:34:e1:fa:12:1c:7d:68:d8:eb:0d:
94:f0:a5:ff:e0:89:0a:ef:1a:05:d4:aa:45:4d:20:f8:16:e7:
67:8b:85:a8:3e:85:d6:6c:36:f8:58:8d:42:1d:db:b1:08:40:
42:c1:88:39:5c:c0:ed:a2:30:bc:a8:de:09:07:0a:50:7b:1b:
6e:81:c3:d1:47:1b:26:a6:65:2a:77:1c:b0:32:8f:95:97:33:
fd:c2:a8:25:be:65:36:d9:b3:91:e6:fe:ed:8d:82:18:f0:3a:
6d:c9:94:63:85:3d:31:9a:6b:2e:69:e5:cf:f3:cb:f4:af:78:
38:7c:fa:92:51:39:19:8d:e8:01:fc:58:d4:55:38:03:05:c4:
cc:39:4a:0e:86:2c:a3:b8:1a:16:e2:35:70:16:9a:8c:bb:67:
bb:74:28:8b:36:f2:ff:81:91:6b:44:3b:aa:82:6e:48:f1:95:
da:54:49:e1:94:8c:0b:b7:3f:3f:44:8c:9a:c4:21:42:a0:21:
74:c2:62:92:27:3e:2e:d3:4f:9d:d1:21:10:08:bb:4b:cd:5b:
01:fc:6a:98:96:1c:ff:15:6f:3a:59:3c:cc:96:71:c3:14:39:
e0:41:ac:a6:f3:10:ca:24:db:37:db:32:82:bd:b0:69:84:46:
0d:b4:96:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:28 2026 by rpki-client