Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: LuULeEXjLXrTkY2nTRDZ18MA207UQCsO++TAkaKty0k=
Subject key identifier: D9:8F:BB:07:23:CA:06:90:C8:53:5B:ED:BF:84:21:70:C0:29:32:E3
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 019E2100032AF7C992D7FF9BBB72E40A3246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 0621
Signing time: Wed 13 May 2026 11:01:49 +0000
Manifest this update: Wed 13 May 2026 11:01:49 +0000
Manifest next update: Thu 14 May 2026 11:01:49 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: +nTE+38PwI3n4Q+SU3msRX4REH0WBckZwXmM0DYLoNI=)
2: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (hash: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:00:03:2a:f7:c9:92:d7:ff:9b:bb:72:e4:0a:32:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: May 13 11:01:49 2026 GMT
Not After : May 14 11:01:49 2026 GMT
Subject: CN=d98fbb0723ca0690c8535bedbf842170c02932e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:a6:24:17:b2:ad:e1:26:28:88:6b:f9:f2:
aa:8d:e0:54:bb:70:23:dc:0a:2c:f2:9d:a7:1f:30:
c1:64:8a:f9:c3:94:96:ab:9b:13:63:8d:c6:22:c1:
cb:26:3c:ac:8a:a6:d4:44:d5:20:40:71:df:20:49:
95:68:f0:8c:9c:24:b7:e2:1d:b6:8f:53:af:1e:6e:
63:87:3a:51:f7:f6:59:c5:b0:3b:bc:5b:b1:65:e7:
e8:41:7e:82:bf:c2:6f:60:da:75:bf:16:f5:29:84:
25:62:a4:d2:8a:e6:82:79:a6:b5:28:73:a4:b7:52:
98:39:f0:dc:b1:d0:2a:d0:b2:c8:7c:1a:ec:85:c5:
a9:44:90:d6:77:f0:91:8a:fb:75:cc:b1:e1:91:ed:
34:e7:ac:28:f8:82:13:1c:55:59:16:9b:69:3d:8c:
63:9a:6d:85:21:88:4a:ac:42:6a:d2:16:d4:12:1e:
fd:d6:99:f4:98:5b:cb:b4:5d:24:39:32:c3:36:c3:
29:30:19:f9:a4:a9:30:56:89:43:7f:5c:2a:07:1d:
2e:12:5a:5d:41:1f:e1:cd:aa:af:5d:57:41:07:65:
ab:f4:bc:7b:5f:5a:b3:ce:e2:9c:0b:48:08:be:39:
4e:d1:69:0c:fd:68:c2:a3:a9:58:b2:01:68:de:1f:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8F:BB:07:23:CA:06:90:C8:53:5B:ED:BF:84:21:70:C0:29:32:E3
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:55:1c:d3:0e:98:42:74:43:29:83:9f:8c:76:99:1b:2b:6c:
0f:be:93:4e:ee:a8:00:7f:dd:41:83:80:cd:b4:02:86:52:c2:
7f:9c:ea:70:16:1e:9d:dd:48:6d:dd:92:95:6d:8a:b3:b3:f1:
6c:0b:6e:e3:68:8d:c5:74:71:50:85:a6:6e:c0:4c:c4:1d:c2:
8d:7c:2c:b9:d3:8a:6d:7d:7a:2b:2e:41:41:74:e0:3b:a4:d8:
34:6f:5f:c8:fb:7b:66:dd:bf:4d:8e:5b:bc:81:e0:f4:80:c7:
28:c8:3d:8a:72:fd:05:6c:17:21:8f:e7:9c:8a:3f:5a:7d:fb:
a8:32:d8:16:8f:8f:16:f2:3a:6c:87:1a:ea:59:89:bd:19:52:
c0:a2:d3:30:b3:ca:ee:90:18:96:90:d0:30:0b:67:78:81:ad:
03:9e:99:e8:43:e6:d0:88:8b:97:ca:1f:ed:6d:97:ce:d5:9e:
1c:0f:cf:bd:a9:ef:31:65:d8:c1:92:20:e4:90:5f:d0:55:db:
89:08:90:58:00:8e:5d:9b:80:64:a3:22:1a:aa:18:4b:d2:49:
dc:6a:c8:cc:34:cf:00:8c:d3:51:c9:32:7d:16:b1:6a:c1:77:
67:3f:7b:70:fe:63:2b:a2:e3:c7:32:24:18:a9:ff:66:4d:69:
63:05:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:22:03 2026 by rpki-client