
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: 3wPE8KM4kTZ202t/Aznq4qCgNalD1mszam/u+IZcspE=
Subject key identifier: AB:17:D0:5A:95:E4:5B:54:B0:5E:46:24:63:22:BE:18:DB:A1:10:C1
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 019DA4C1A66EBCDFD80F946EF44BEB7E6813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 0C5F
Signing time: Sun 19 Apr 2026 08:00:47 +0000
Manifest this update: Sun 19 Apr 2026 08:00:47 +0000
Manifest next update: Mon 20 Apr 2026 08:00:47 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: SMTGJFPko/lHmr2BmyLIIIuEBV4esyeOzlZz63poZsY=)
2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:a6:6e:bc:df:d8:0f:94:6e:f4:4b:eb:7e:68:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Apr 19 08:00:47 2026 GMT
Not After : Apr 20 08:00:47 2026 GMT
Subject: CN=ab17d05a95e45b54b05e46246322be18dba110c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:d3:87:37:8c:4b:76:97:e4:62:08:9e:c4:
ee:c2:be:77:7d:ac:db:f9:43:f2:85:63:8c:21:6d:
b0:68:ae:ff:78:07:5a:c7:a4:1b:a8:93:e0:b5:bd:
87:64:c6:16:54:c5:c9:34:34:2f:5d:1e:a7:3f:ee:
db:1b:eb:51:db:c3:59:59:08:56:da:dc:09:42:25:
51:1c:19:09:19:7b:a4:96:2e:af:87:0c:12:33:82:
11:53:7d:03:20:0d:1f:e7:2b:05:4f:80:d9:42:27:
1f:fb:03:93:5b:2d:e3:c1:8b:df:c7:ec:cc:fb:99:
a1:3f:34:3c:f4:40:36:7b:78:e7:dc:3b:03:ac:9e:
7e:ca:87:26:0d:90:d8:61:d1:2a:e1:63:a5:48:cb:
00:8f:d7:3d:86:98:f0:98:c7:1c:66:88:12:16:5d:
ee:fe:eb:dc:9d:cd:84:df:67:bc:9a:39:71:b0:70:
6e:f6:e2:65:29:41:f4:6d:8c:44:4a:1d:9c:9e:d9:
4c:18:6b:ab:6a:88:91:11:7b:26:39:f0:d2:39:61:
d8:9a:d4:57:a6:1c:a9:b3:3d:a5:bb:ee:74:1b:a5:
e9:58:33:e5:3e:96:45:51:da:fc:e8:61:1c:00:f8:
6f:57:37:6f:3a:93:09:98:3c:95:7b:4a:0b:d7:97:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:17:D0:5A:95:E4:5B:54:B0:5E:46:24:63:22:BE:18:DB:A1:10:C1
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8b:e2:56:eb:9a:13:10:c4:0c:3b:2e:43:cd:16:90:50:9b:
3d:d7:6a:fd:1d:67:47:c3:77:0f:51:da:41:94:ab:e4:e9:d8:
d2:cf:7f:ea:0d:00:bf:c4:55:f0:7a:be:94:d3:56:27:91:2a:
11:65:57:4b:66:be:3d:9a:d7:82:51:27:43:a9:66:9b:a5:71:
33:88:19:d7:5a:e8:30:da:75:c6:c0:b1:39:1f:8d:55:17:90:
65:21:86:ec:74:f8:8e:e8:b5:6a:8b:84:a5:57:91:46:82:2a:
f8:82:fa:e4:6e:38:ce:33:86:4a:cf:d9:33:bf:86:0c:8d:c4:
16:52:7d:50:ac:70:7f:c3:a6:df:ae:2c:b2:da:ef:ec:43:44:
5e:55:ff:e8:54:9d:92:a9:ae:40:f2:67:c2:bf:49:cf:64:cd:
2d:2a:c6:23:b9:0c:d6:e1:17:85:f4:1d:78:ec:df:e5:39:4a:
4a:a5:b4:c7:0d:15:20:b2:9c:31:ad:ba:34:b8:bb:30:1a:b8:
c0:24:33:41:1c:3b:ac:ca:3d:ed:5d:2a:a7:f7:7f:aa:2d:42:
bb:a2:ae:b8:3c:0f:f8:49:b0:fd:ea:44:75:2a:aa:46:b6:f0:
c0:e6:af:b9:6f:73:dc:fc:7d:27:d8:77:34:39:9f:46:4e:ae:
dd:9a:e2:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwaZuvN/YD5Ru9EvrfmgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDc0Y2M3YmY1MjRhYjkzYmQwZjBlNDFiYjU3OWU5MThi
YjEzZWQwHhcNMjYwNDE5MDgwMDQ3WhcNMjYwNDIwMDgwMDQ3WjAzMTEwLwYDVQQD
EyhhYjE3ZDA1YTk1ZTQ1YjU0YjA1ZTQ2MjQ2MzIyYmUxOGRiYTExMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvTThzeMS3aX5GIInsTuwr53fazb
+UPyhWOMIW2waK7/eAdax6QbqJPgtb2HZMYWVMXJNDQvXR6nP+7bG+tR28NZWQhW
2twJQiVRHBkJGXukli6vhwwSM4IRU30DIA0f5ysFT4DZQicf+wOTWy3jwYvfx+zM
+5mhPzQ89EA2e3jn3DsDrJ5+yocmDZDYYdEq4WOlSMsAj9c9hpjwmMccZogSFl3u
/uvcnc2E32e8mjlxsHBu9uJlKUH0bYxESh2cntlMGGuraoiREXsmOfDSOWHYmtRX
phypsz2lu+50G6XpWDPlPpZFUdr86GEcAPhvVzdvOpMJmDyVe0oL15d8BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsX0FqV5FtUsF5GJGMivhjboRDBMB8GA1UdIwQY
MBaAFIoHTMe/Ukq5O9Dw5Bu1eekYuxPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYt
OWVkN2UzNjMyYmQwLzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYtOWVkN2UzNjMyYmQw
LzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoviVuua
ExDEDDsuQ80WkFCbPddq/R1nR8N3D1HaQZSr5OnY0s9/6g0Av8RV8Hq+lNNWJ5Eq
EWVXS2a+PZrXglEnQ6lmm6VxM4gZ11roMNp1xsCxOR+NVReQZSGG7HT4jui1aouE
pVeRRoIq+IL65G44zjOGSs/ZM7+GDI3EFlJ9UKxwf8Om364sstrv7ENEXlX/6FSd
kqmuQPJnwr9Jz2TNLSrGI7kM1uEXhfQdeOzf5TlKSqW0xw0VILKcMa26NLi7MBq4
wCQzQRw7rMo97V0qp/d/qi1Cu6KuuDwP+Emw/epEdSqqRrbwwOavuW9z3Px9J9h3
NDmfRk6u3ZriPA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:23 2026 by rpki-client