Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: 2bL5PlVbkLzWd4TP4GonOZ3Yx1ufmbPaPXt844aYt48=
Subject key identifier: 1D:76:41:32:44:4D:BC:45:C8:82:CC:4D:65:0C:65:EB:61:16:D2:FE
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 01A0C4446774268A89088F84496D34E77C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 0DFD
Signing time: Mon 21 Sep 2026 14:00:12 +0000
Manifest this update: Mon 21 Sep 2026 14:00:12 +0000
Manifest next update: Tue 22 Sep 2026 14:00:12 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: iTLYnJy9sC9L94VQ3JANtxLeWQy7FMH2zuoByu8hhE8=)
2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:67:74:26:8a:89:08:8f:84:49:6d:34:e7:7c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Sep 21 14:00:12 2026 GMT
Not After : Sep 22 14:00:12 2026 GMT
Subject: CN=1d764132444dbc45c882cc4d650c65eb6116d2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:68:f4:69:e0:2b:17:b7:60:98:19:5b:c8:
b0:02:10:e9:07:a3:cb:c9:1f:4b:d5:36:04:3b:38:
4e:18:63:4d:84:dd:bf:3a:14:93:60:e6:c8:4a:96:
82:aa:25:2a:2c:80:e5:0f:2e:c6:5c:32:f8:54:eb:
00:8e:0b:87:cd:62:ea:61:71:01:9c:e9:6f:b6:a7:
2e:71:7d:21:e2:f0:e9:85:93:41:08:cd:0e:98:8c:
59:94:37:f4:c2:a9:66:11:5e:fe:71:1a:ad:d1:04:
3e:4c:c6:86:0a:b5:5e:a7:6f:c7:c4:53:64:e3:6b:
7d:eb:c1:db:bf:59:f1:1a:99:ca:40:e1:ef:15:c4:
e8:02:8d:cc:18:2a:e9:5c:37:aa:94:aa:8b:e2:4b:
01:40:4e:f7:9b:22:7f:a7:33:44:2f:fc:ec:62:c9:
8e:4e:cd:10:3f:e7:3f:70:a0:6d:53:fc:87:53:8f:
c8:2e:05:27:02:69:32:ae:c3:d0:f8:fc:cd:22:30:
03:39:04:cd:36:f5:10:5e:a3:aa:0a:93:18:48:9d:
01:78:f6:79:ea:17:71:d1:07:22:a7:aa:f1:fe:50:
3c:0c:75:84:67:26:d5:75:0f:a2:2d:97:fc:96:ca:
db:32:54:ea:c4:d1:94:0b:45:db:90:16:51:b9:94:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:76:41:32:44:4D:BC:45:C8:82:CC:4D:65:0C:65:EB:61:16:D2:FE
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:da:c6:77:d4:4a:5f:6a:11:3c:18:1b:4d:5b:20:cb:08:64:
a3:98:d2:0c:8c:0a:77:d1:24:4e:2e:6a:d4:aa:98:19:65:ae:
a7:50:3a:fd:4d:d6:eb:ce:ae:35:89:58:b5:00:9d:6a:9f:8d:
10:eb:10:ae:c2:d7:ee:91:68:54:68:55:1c:54:e7:a9:93:d3:
39:69:2a:7e:11:21:4c:bf:a2:db:4b:5b:26:9a:68:5c:9c:18:
ea:5d:23:28:6b:b6:04:15:5f:d2:95:b2:50:dc:ad:8e:af:ce:
39:c5:90:38:49:87:05:17:af:f6:b0:53:39:19:cf:f5:27:a3:
2b:d7:e3:cd:3d:0b:8c:32:6f:bb:30:3b:b3:e6:e1:a3:7a:0a:
ab:1f:5c:d9:f1:c2:38:0f:65:05:1c:7a:61:f1:50:e8:10:d2:
ee:f9:81:4f:12:b2:b0:61:de:06:73:18:e8:a9:f4:6b:f1:b2:
85:ca:67:d6:91:6d:9e:3c:6f:0a:1d:fa:cb:07:17:bb:84:f6:
40:f0:87:20:ff:5d:4f:28:8d:6f:87:9a:7f:a4:c3:39:00:ba:
43:f5:74:56:fe:5f:28:9a:e2:08:48:aa:45:70:42:72:0c:09:
bb:33:ad:9f:09:61:cf:0a:22:0a:91:57:42:c2:4c:bd:4b:9f:
1b:ed:a4:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERGd0JoqJCI+ESW0053yVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDc0Y2M3YmY1MjRhYjkzYmQwZjBlNDFiYjU3OWU5MThi
YjEzZWQwHhcNMjYwOTIxMTQwMDEyWhcNMjYwOTIyMTQwMDEyWjAzMTEwLwYDVQQD
EygxZDc2NDEzMjQ0NGRiYzQ1Yzg4MmNjNGQ2NTBjNjVlYjYxMTZkMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+5o9GngKxe3YJgZW8iwAhDpB6PL
yR9L1TYEOzhOGGNNhN2/OhSTYObISpaCqiUqLIDlDy7GXDL4VOsAjguHzWLqYXEB
nOlvtqcucX0h4vDphZNBCM0OmIxZlDf0wqlmEV7+cRqt0QQ+TMaGCrVep2/HxFNk
42t968Hbv1nxGpnKQOHvFcToAo3MGCrpXDeqlKqL4ksBQE73myJ/pzNEL/zsYsmO
Ts0QP+c/cKBtU/yHU4/ILgUnAmkyrsPQ+PzNIjADOQTNNvUQXqOqCpMYSJ0BePZ5
6hdx0Qcip6rx/lA8DHWEZybVdQ+iLZf8lsrbMlTqxNGUC0XbkBZRuZT21QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB12QTJETbxFyILMTWUMZethFtL+MB8GA1UdIwQY
MBaAFIoHTMe/Ukq5O9Dw5Bu1eekYuxPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYt
OWVkN2UzNjMyYmQwLzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYtOWVkN2UzNjMyYmQw
LzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdrGd9RK
X2oRPBgbTVsgywhko5jSDIwKd9EkTi5q1KqYGWWup1A6/U3W686uNYlYtQCdap+N
EOsQrsLX7pFoVGhVHFTnqZPTOWkqfhEhTL+i20tbJppoXJwY6l0jKGu2BBVf0pWy
UNytjq/OOcWQOEmHBRev9rBTORnP9SejK9fjzT0LjDJvuzA7s+bho3oKqx9c2fHC
OA9lBRx6YfFQ6BDS7vmBTxKysGHeBnMY6Kn0a/Gyhcpn1pFtnjxvCh36ywcXu4T2
QPCHIP9dTyiNb4eaf6TDOQC6Q/V0Vv5fKJriCEiqRXBCcgwJuzOtnwlhzwoiCpFX
QsJMvUufG+2kTA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:07:31 2026 by rpki-client