Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: CvHASUu/+68lobnHIquQYAbzAS+F48G1/dMmwjFo/OU=
Subject key identifier: 5C:D6:B7:02:42:76:F8:B7:CB:E7:2B:73:67:D8:17:44:53:65:2C:1F
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 019D2928E42B3891F5A8B980C5191C2F2DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 0C1F
Signing time: Thu 26 Mar 2026 08:00:38 +0000
Manifest this update: Thu 26 Mar 2026 08:00:38 +0000
Manifest next update: Fri 27 Mar 2026 08:00:38 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: kgGTT5kEDnh9lRr+f+MEZ76bmOTHoxEuCki0cnivadM=)
2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:e4:2b:38:91:f5:a8:b9:80:c5:19:1c:2f:2d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Mar 26 08:00:38 2026 GMT
Not After : Mar 27 08:00:38 2026 GMT
Subject: CN=5cd6b7024276f8b7cbe72b7367d8174453652c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e1:da:35:7e:eb:53:bc:98:15:6a:44:ed:7e:
4a:22:49:85:15:4e:a7:c4:45:fb:04:29:04:94:a5:
56:64:ae:2a:d3:b0:3c:42:2b:25:72:29:99:c0:f4:
7f:64:c8:d5:e6:1b:0c:5c:4e:91:4f:c4:35:a1:49:
15:28:84:f6:d2:9f:97:10:b0:72:f9:60:b3:7c:11:
ce:71:29:48:15:d3:37:f2:dc:bf:e8:30:e2:35:2b:
30:60:ae:74:a6:0e:9b:17:0d:24:74:0b:ac:a2:04:
75:38:b1:cb:53:86:00:1d:bd:29:fe:6d:2a:09:44:
08:17:90:8c:ef:67:31:10:a3:7b:82:a2:9a:5f:40:
b5:ab:a4:ec:02:0e:0a:d6:0d:0f:9e:9e:93:55:d3:
e4:37:eb:b3:26:89:c2:98:12:d0:37:d6:c4:35:0d:
55:f4:d7:fc:bf:e2:62:8a:20:51:e6:4e:f7:e1:72:
85:3d:dd:2a:a3:fc:8e:1d:42:41:9a:6e:d6:58:67:
df:2d:c0:0a:a2:f1:5d:c7:01:c7:c4:36:3b:09:d4:
36:ff:61:9a:e8:b5:85:a1:ba:f7:d2:37:30:a8:2e:
8c:c3:23:3b:77:de:01:ae:dd:e3:0a:40:a0:0a:8f:
f3:60:05:a5:67:a7:11:4f:0c:74:98:e2:7b:cd:0b:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D6:B7:02:42:76:F8:B7:CB:E7:2B:73:67:D8:17:44:53:65:2C:1F
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a4:33:91:e9:8b:a9:18:a5:e8:1b:c9:6d:cc:b7:9f:31:7d:
41:22:aa:e3:6c:01:39:4e:00:dd:39:f5:12:f9:6e:2e:0e:c3:
67:4a:8d:4f:44:64:7c:50:fd:43:6a:cf:c0:fa:ca:8f:4b:0a:
e0:ca:e0:3e:a4:cc:9c:31:4c:da:df:07:3d:8c:14:06:84:e9:
82:af:24:57:e5:20:c5:8a:8b:61:1f:f9:dd:5d:14:81:e8:a6:
a0:a4:e9:17:6e:47:58:30:0c:82:e0:65:2d:d1:7e:86:7d:67:
cc:a5:48:8b:98:46:8f:22:af:c8:d3:75:11:6b:bf:a6:60:8a:
a4:d8:d6:67:95:3e:45:0a:42:9c:63:15:9b:ba:c1:0f:6d:36:
11:87:0e:75:2b:b0:cd:57:f2:d4:07:33:68:fd:c0:a9:b0:f7:
77:aa:59:e1:34:09:60:66:6b:3f:86:5c:fc:07:65:26:d7:12:
1c:c7:b1:8c:51:35:57:3b:7e:75:86:85:23:1c:a3:76:7e:89:
09:75:90:92:df:9b:3a:61:61:a1:8e:1c:9f:15:11:16:53:13:
16:38:29:90:07:80:d6:7b:18:25:a0:b5:e7:40:0c:06:22:b8:
ba:93:4d:92:74:0c:36:d5:8e:cd:f3:f4:39:0b:e3:b7:f1:5c:
b8:0e:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:19 2026 by rpki-client