Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: c/SBoUsG5ucdXOymxAtZACIxuYiFRshf2DX54nqk4NQ=
Subject key identifier: 06:85:F9:B3:DD:CA:98:F3:77:F5:C0:C1:33:FE:93:66:E2:47:54:04
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 01A1DE399907B444F26F9757ABB1BFEF5331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 0E8F
Signing time: Sun 15 Nov 2026 08:01:19 +0000
Manifest this update: Sun 15 Nov 2026 08:01:19 +0000
Manifest next update: Mon 16 Nov 2026 08:01:19 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: jBds9+uiTkq/wAYFRIlfMuhZUO2YMPcYo7+d5adyUhY=)
2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:99:07:b4:44:f2:6f:97:57:ab:b1:bf:ef:53:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Nov 15 08:01:19 2026 GMT
Not After : Nov 16 08:01:19 2026 GMT
Subject: CN=0685f9b3ddca98f377f5c0c133fe9366e2475404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:84:b9:73:4f:bd:40:82:d6:74:dd:c1:66:
fa:68:e3:12:f5:09:23:f1:44:e4:e0:a3:78:d3:a7:
e6:22:0a:f8:8d:2f:bf:1c:7c:6e:93:d2:14:2e:d2:
68:c4:79:62:e6:fc:7d:a6:5d:30:73:7d:ad:e6:de:
e7:1d:8d:e2:96:40:33:e3:d9:fd:4f:a8:05:b3:23:
1d:32:8a:b5:4f:fc:4e:fa:de:e1:b4:88:90:9b:4c:
24:b2:04:94:c8:d3:dd:86:ae:36:52:45:ce:85:52:
c8:62:09:1e:fb:9e:1e:88:5e:50:46:7f:d0:0a:85:
b1:49:e0:9d:e6:60:3c:55:8b:21:79:26:91:99:c0:
12:98:09:01:15:f2:c8:8c:c3:fe:cd:4d:7d:de:69:
f9:70:cd:ca:92:48:94:64:28:d3:1a:e5:6c:7f:5e:
42:9a:7b:c8:2d:a5:4c:b1:6f:57:71:a0:dc:40:62:
e3:fd:dd:ae:71:3f:5f:9a:20:65:97:4c:81:ef:65:
75:62:49:b1:3a:2c:95:6b:5b:d5:58:c5:78:67:5c:
6e:4b:43:83:a6:09:2e:f6:c2:7a:d2:5e:ae:22:94:
28:4d:a4:ac:29:b5:27:35:37:92:76:cd:e7:68:5d:
3b:ef:55:dd:89:ad:e0:a7:6b:22:fa:97:10:7c:82:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:F9:B3:DD:CA:98:F3:77:F5:C0:C1:33:FE:93:66:E2:47:54:04
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:8a:8d:e8:ab:86:e7:35:fe:df:28:77:a3:37:77:99:50:
f9:a4:b9:7b:9e:17:29:28:0f:1f:4c:9a:d1:97:88:19:25:bc:
2c:d1:f4:63:58:8f:e6:5e:44:e2:0d:d1:02:d9:a5:58:ab:7c:
70:6f:ff:51:33:15:40:02:41:16:e0:58:15:5a:0f:a6:8a:eb:
94:ae:81:05:43:c6:db:f0:0c:30:ce:1a:41:45:71:19:57:2d:
79:d3:fa:9c:ae:eb:5d:64:5a:da:50:ee:f3:bf:56:2e:6b:bc:
1e:a8:72:3e:5d:74:ee:f9:b2:f9:a1:3f:34:17:b6:d2:65:f7:
c3:4b:6a:3e:3d:66:9d:15:ed:ab:af:21:89:26:68:77:30:8a:
9d:0e:01:b2:fa:37:e3:17:7f:4a:fb:9b:5b:18:d5:70:03:41:
21:dc:66:18:47:4e:59:b7:9d:58:e2:87:8c:1c:84:62:b5:c4:
8a:09:b7:66:63:c7:6c:8b:f4:e6:83:24:c9:6b:d5:99:34:97:
82:3f:56:32:c9:10:26:6e:af:96:fb:1e:ee:77:9b:64:28:c1:
f8:a7:bd:74:df:3b:e6:4d:93:eb:d0:05:82:ba:10:9f:31:36:
a9:79:f1:27:58:d7:ab:0e:30:76:29:b5:e1:ac:30:b6:b9:03:
a6:66:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:56:40 2026 by rpki-client