Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
File: Igmk3BOlMEp6okvhwXi6QuF5L4U.mft (raw, json)
Hash identifier: FM2fG/hPJjjqvxnH1cHNJetHM8bsvZrmgZYtgSjAUuk=
Subject key identifier: A5:40:E2:AE:58:8D:91:ED:A1:D3:E1:79:4C:F3:E6:C9:3F:26:2E:D1
Authority key identifier: 22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
Certificate issuer: /CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Certificate serial: 019F9023173BDFD5BE7C6426944D7533DC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
Manifest number: 05AB
Signing time: Thu 23 Jul 2026 18:00:46 +0000
Manifest this update: Thu 23 Jul 2026 18:00:46 +0000
Manifest next update: Fri 24 Jul 2026 18:00:46 +0000
Files and hashes: 1: 25oZjtsXGt-n2WY2ltVfz0hHWzE.asa (hash: cAJ1A4GbTa/DjrR5J7Hx50xOdea/6PB89hhjqA5MTnI=)
2: Igmk3BOlMEp6okvhwXi6QuF5L4U.crl (hash: +pHDDt6WWUQWi7GWSBJPkVpojnDB+YipL3/+hjLAPu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:17:3b:df:d5:be:7c:64:26:94:4d:75:33:dc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Validity
Not Before: Jul 23 18:00:46 2026 GMT
Not After : Jul 24 18:00:46 2026 GMT
Subject: CN=a540e2ae588d91eda1d3e1794cf3e6c93f262ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:b5:d3:bf:1b:0d:81:a2:59:ae:74:2a:5c:
75:77:89:a8:b1:61:81:c5:92:4a:fe:3b:54:ee:85:
ee:6f:b7:f3:05:36:af:4c:1e:e7:93:a2:21:d1:f8:
88:fd:8b:6c:c5:d0:d2:7f:d7:89:a2:ab:ce:32:79:
f7:23:c7:3b:98:80:7e:5f:39:6b:ca:c8:4b:29:d3:
f4:f5:1b:3f:c2:41:9e:db:a0:5d:91:e8:16:36:e2:
59:84:14:3d:47:61:77:58:51:59:06:85:05:1b:f5:
c9:1f:f5:65:94:0c:16:d7:b6:14:56:60:f5:f2:41:
c2:70:79:e7:76:80:29:65:45:1d:4f:a0:56:ef:71:
a6:3d:16:84:bc:e3:48:27:e8:28:93:6f:a3:cf:6d:
c1:d8:c9:6a:c1:39:be:f4:bf:20:a2:28:02:e7:94:
e5:18:23:d4:8a:48:ab:be:70:0a:28:06:0c:fc:50:
ee:ca:7e:1b:91:7d:5f:54:c9:1f:85:8c:dd:fc:9a:
8c:1d:7d:45:7f:bb:68:4f:77:86:9f:ee:c5:10:92:
58:5b:93:51:9e:e3:3b:83:49:37:2d:cf:f9:f8:1e:
c1:53:1e:9c:95:ce:e9:73:9d:f3:99:63:13:60:5f:
12:d5:09:29:1f:07:0a:98:a6:9f:1b:ba:bc:27:21:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:40:E2:AE:58:8D:91:ED:A1:D3:E1:79:4C:F3:E6:C9:3F:26:2E:D1
X509v3 Authority Key Identifier:
keyid:22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:51:38:59:8a:28:90:42:9f:c4:8a:7c:e8:fe:0a:5b:39:8c:
44:8e:da:a4:82:d2:14:37:0c:e2:a4:da:14:39:eb:55:ea:b5:
47:37:99:f9:c2:32:c5:ae:7e:ba:b5:a9:5e:52:e5:08:2a:5e:
fa:1e:08:30:19:13:15:ea:ba:8b:aa:20:63:d7:d0:b5:58:07:
f8:af:04:9a:31:bb:55:e6:84:1c:da:e3:10:65:98:45:69:4e:
a0:14:38:28:87:9a:93:eb:65:a1:c5:c1:a4:4c:10:ad:b3:47:
8c:16:f9:0a:61:e4:f1:5d:56:e1:1d:66:39:56:72:35:9b:c7:
cf:e5:fb:85:57:19:10:48:35:4e:c7:e8:76:cf:e8:92:86:e4:
4f:f2:27:d1:05:11:c4:47:4f:ba:b0:3c:78:15:8e:64:5d:26:
60:24:a1:a4:e0:f3:a4:07:3b:a4:e6:a6:d4:d0:1e:89:b9:fb:
8c:ed:3e:81:e5:c7:9d:62:d6:d6:45:a8:fa:ba:b4:4c:c6:9e:
09:7d:81:fe:e5:b8:f0:c1:45:3a:99:5d:28:8d:7a:f8:07:84:
82:53:7f:21:c4:bc:03:e0:6f:cc:82:bd:b8:76:5d:85:28:2d:
1d:92:82:be:b5:2e:ef:89:34:1e:50:a4:a5:90:bf:d9:44:f2:
84:e7:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:41 2026 by rpki-client