Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
File: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json)
Hash identifier: qEltOmHWrnxv9af8kue7GotLHB0cPJABaha8KALQ2+E=
Subject key identifier: FB:79:8D:85:2A:96:C6:32:72:D3:CD:2D:3C:6B:36:6B:A6:04:CB:81
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial: 01A1393698BEFB2B68D2A58871556E78A362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
Manifest number: 0A9F
Signing time: Wed 14 Oct 2026 07:00:41 +0000
Manifest this update: Wed 14 Oct 2026 07:00:41 +0000
Manifest next update: Thu 15 Oct 2026 07:00:41 +0000
Files and hashes: 1: Ikq2mGUlslqkD1ZeqGUCsBqCrfo.roa (hash: E6NdR2fVzdULD14RMMCq1nu2I2iubEiAOLLdM23/Ci0=)
2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: vmW0iZeW4BajX0TGBqckRZp9S4HfXcyKR0yM2/t6+t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:36:98:be:fb:2b:68:d2:a5:88:71:55:6e:78:a3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Validity
Not Before: Oct 14 07:00:41 2026 GMT
Not After : Oct 15 07:00:41 2026 GMT
Subject: CN=fb798d852a96c63272d3cd2d3c6b366ba604cb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:ad:8f:88:46:62:17:77:80:18:40:68:57:
c5:2e:80:5c:9a:48:8d:f5:98:5e:a7:06:a0:20:48:
5b:5f:2b:98:1e:6a:90:b5:d0:ce:25:95:0f:15:fd:
0d:1d:53:24:c8:57:1a:26:da:8c:64:35:56:4e:0d:
c3:09:02:72:c9:3d:9a:a2:e6:ff:72:7e:3e:03:5a:
e9:cc:eb:f1:5b:f6:34:5a:b8:2f:03:d2:96:f7:a4:
c9:08:de:44:4a:96:c5:10:65:ef:a9:9f:7f:09:e4:
19:0f:73:ab:79:f9:82:99:f4:70:32:e8:e2:91:52:
2b:f3:65:1c:3b:eb:65:f8:85:a4:ff:a5:23:34:e0:
37:2c:47:25:ed:92:28:f3:0e:06:0f:d5:7b:b7:c7:
83:f6:99:63:46:56:c1:a0:fc:87:c0:0b:30:6f:3a:
b0:e4:ff:66:70:02:b4:44:80:14:17:b0:41:66:a5:
3f:bf:b5:69:49:93:54:e1:23:f3:c8:ee:4c:0d:70:
95:fd:2b:53:7b:40:8f:1d:82:f5:ea:a8:75:db:db:
e6:31:08:9f:f7:bd:d4:0e:0d:50:93:f1:7a:a3:35:
54:ae:6d:42:23:df:12:a8:53:c0:f4:94:a8:ce:de:
91:14:15:a9:b3:59:b5:4e:27:d9:2e:db:f2:d6:e1:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:8D:85:2A:96:C6:32:72:D3:CD:2D:3C:6B:36:6B:A6:04:CB:81
X509v3 Authority Key Identifier:
keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f7:e9:18:5a:0e:d9:7f:81:4b:38:26:7a:ec:d0:6d:87:19:
22:fe:b2:ea:20:58:93:ab:89:6a:10:81:e7:b0:79:8f:61:85:
89:9c:3e:20:d3:b0:d2:f6:73:ab:28:96:ac:29:77:1c:97:b7:
c9:00:f8:4c:47:dd:a2:ae:0a:e8:3b:e9:a5:28:d0:6a:bc:0f:
8b:1f:2f:2f:cf:04:89:87:f7:17:be:5d:ab:50:6d:7d:dc:14:
2f:23:cb:00:8a:47:ed:6b:f6:bc:d1:85:ef:92:c0:41:cc:d2:
b9:e7:6a:3f:05:a0:0d:88:38:b2:ff:df:4f:8c:63:00:25:cb:
1a:d6:f9:5e:db:84:e1:a5:f0:63:e3:ff:6f:c1:72:27:fa:22:
ea:db:33:9c:d9:09:d6:58:fc:91:9e:96:02:44:73:db:89:10:
87:7a:ad:38:62:a7:e6:b8:fc:e1:6d:1a:35:0a:ed:de:fb:eb:
31:9f:7a:bd:03:d9:48:47:b4:90:d7:1b:1a:fa:aa:e6:b1:33:
49:9a:6d:73:50:12:21:f0:e4:9f:8c:85:af:da:80:58:73:46:
d4:43:d6:dc:46:e4:20:08:f9:f4:81:b7:47:4b:42:aa:77:1d:
20:52:b7:6b:0b:5c:3e:bb:93:b6:22:9d:ff:15:cc:8b:3f:d3:
d6:b9:18:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:24:01 2026 by rpki-client