Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
File: Igmk3BOlMEp6okvhwXi6QuF5L4U.mft (raw, json)
Hash identifier: AxCplMZqRBnwsB5ITXsqfY4aD++7CVEsTemcUMq2GAU=
Subject key identifier: 18:E2:85:8B:AF:F2:36:DA:FE:BC:25:1F:85:AE:29:A9:6D:69:BD:9D
Authority key identifier: 22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
Certificate issuer: /CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Certificate serial: 01A0CFA451AE083923328F721466ED25A84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
Manifest number: 0651
Signing time: Wed 23 Sep 2026 19:00:47 +0000
Manifest this update: Wed 23 Sep 2026 19:00:47 +0000
Manifest next update: Thu 24 Sep 2026 19:00:47 +0000
Files and hashes: 1: D_BEXKJxx02XQORfBK7due4WKmg.asa (hash: NvwJFKQMeKjwgVozzqK6BRCu+sDhYcEghwySo/RibEc=)
2: Igmk3BOlMEp6okvhwXi6QuF5L4U.crl (hash: wbM/+t4NzUiq19rAk02IWY6achB3jA8d6HavSmoMxtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:51:ae:08:39:23:32:8f:72:14:66:ed:25:a8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Validity
Not Before: Sep 23 19:00:47 2026 GMT
Not After : Sep 24 19:00:47 2026 GMT
Subject: CN=18e2858baff236dafebc251f85ae29a96d69bd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:90:6a:38:f4:4e:9c:7c:d1:fd:c5:e0:02:
b9:1a:26:8b:43:5f:dc:de:cc:64:f5:4e:dd:5b:61:
ee:57:6c:1e:3e:8c:00:8d:f0:5a:ac:33:6d:80:29:
3a:b8:4c:71:20:b5:57:ff:d5:c0:40:af:23:c0:79:
bc:61:c2:dc:21:9f:81:48:4f:16:c9:5f:ef:bb:e8:
fb:5d:5e:45:da:27:d7:e2:17:bf:f5:84:46:e5:89:
13:94:f8:8a:c6:51:28:80:a7:be:e5:e5:88:da:75:
5c:6f:98:b7:28:b6:fd:96:ab:83:3b:53:3b:31:8e:
99:fe:90:ae:d9:84:2d:1a:0a:74:13:c2:c3:fb:c3:
7c:a7:aa:75:45:c8:f9:2a:ce:d4:2e:1c:0d:dd:c9:
e5:1a:f5:b5:31:4f:30:62:92:ce:26:01:4c:b9:47:
5b:b9:5c:93:c9:ca:8b:22:0c:ae:c8:cd:5f:2e:88:
ae:53:91:59:48:3c:af:07:be:7c:e8:ab:70:f1:17:
f7:5c:a1:0c:27:29:6e:aa:c4:97:a6:1e:28:71:12:
fc:8f:cc:79:2e:27:bb:57:5e:72:05:e1:99:19:4f:
be:24:fd:75:c9:6a:92:69:0c:a0:32:8b:d4:b5:a6:
4d:2e:c2:6c:55:6c:d5:83:89:8f:64:5f:d1:2e:3a:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E2:85:8B:AF:F2:36:DA:FE:BC:25:1F:85:AE:29:A9:6D:69:BD:9D
X509v3 Authority Key Identifier:
keyid:22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:bb:91:e8:e1:97:55:35:20:2c:9b:01:1f:d2:53:6a:42:48:
53:8f:10:cb:41:e3:30:0a:af:11:15:69:0a:7f:52:2f:62:5c:
b8:25:10:cd:a0:34:91:bf:7e:47:1a:29:69:10:5a:b5:df:55:
8d:bd:48:6b:f1:0f:f7:1b:59:d4:49:b8:2b:f5:ad:e3:0f:20:
f5:77:fe:37:d8:52:18:77:65:7d:5a:36:06:e6:4f:70:79:88:
c7:5f:03:8e:21:db:b6:e8:94:19:d9:eb:24:ab:46:11:e1:4b:
98:b7:4d:0b:c3:13:66:02:3a:ab:0c:56:8a:39:bb:dd:da:10:
08:64:2e:b5:78:92:b0:54:fe:cc:13:be:03:16:85:c9:24:67:
17:fe:ba:80:2c:2d:53:7e:d0:0e:55:06:1d:91:f6:5f:25:6d:
d7:56:66:fd:56:36:4b:b0:6a:e8:53:b0:a1:08:d0:d5:f8:97:
4b:e9:54:39:d3:ac:ef:a3:9b:00:86:b8:0d:ed:31:a8:67:39:
85:56:da:a2:bb:9e:e7:f0:c8:d0:0a:15:f5:26:d0:37:c6:4f:
4d:da:55:7c:c5:89:96:a2:17:e3:dc:8b:32:cf:2f:27:ab:a5:
ba:07:f4:cd:57:d2:79:2a:1d:8a:75:ec:d3:ee:b5:d9:56:c9:
0e:3e:74:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:29:28 2026 by rpki-client