
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: Cf+wxlu/Jh83JsC3V4WxMxL9IfdXSpfijjBkueFmsic=
Subject key identifier: 7C:2C:CA:F1:3B:FF:EE:33:EA:30:5A:4A:C3:97:D9:24:59:7C:31:6E
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 019D28BB740E8569769E1D59D50F62D286BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: QimRIoifdg2JyU0GSq8a5Aty8zs.roa (hash: sDzqs2/VfMiYAG8w6JukF5QplVvfocGRr/BUGWqcR/A=)
2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: xFf00SiRM93zGBg+WtqldZSqiclkIxi3BuEWdLAjkW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:74:0e:85:69:76:9e:1d:59:d5:0f:62:d2:86:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=7c2ccaf13bffee33ea305a4ac397d924597c316e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:93:ce:5c:fd:e0:e4:ad:6e:43:f0:75:25:
4c:b0:ba:38:46:70:33:19:28:ea:af:62:71:33:9d:
b0:88:c1:90:81:75:d5:3c:f9:49:e9:44:55:c2:d5:
f0:9b:5f:6c:14:b3:59:8d:b7:15:ac:2f:88:ad:3d:
a5:d9:cc:3a:75:b3:27:81:6b:ef:18:9a:a7:14:67:
53:03:5a:43:56:6a:e1:03:95:97:bf:5f:5d:06:77:
ef:e2:16:34:9d:22:27:ad:ac:36:d3:3b:b4:08:78:
f7:39:71:47:c5:d3:b1:4d:73:de:e6:a0:cf:2c:1f:
ca:d2:96:4e:1b:61:35:dd:26:16:7e:e2:2d:23:16:
95:6c:e8:fd:3d:0c:47:07:46:0d:b8:77:be:14:1e:
03:aa:81:69:29:35:dd:29:a5:fa:a9:2f:32:1f:96:
86:a2:08:c5:8c:e1:e6:93:4b:93:f6:e8:1d:59:55:
74:4c:9c:0e:53:1d:a0:56:0b:05:2a:8a:d0:1d:ff:
a4:27:71:0d:84:11:26:b5:9b:87:31:6c:9f:63:c8:
10:0f:8d:f6:8a:54:f5:e7:86:c4:6f:f6:fb:25:02:
18:aa:48:2c:56:12:05:92:b1:b3:eb:5d:b7:2d:9c:
74:d2:08:fa:c3:b4:ba:e2:d8:0f:26:53:6a:8a:55:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2C:CA:F1:3B:FF:EE:33:EA:30:5A:4A:C3:97:D9:24:59:7C:31:6E
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1f:75:77:85:0e:5c:5a:42:65:fd:03:ac:8b:ff:ae:30:26:
68:72:ed:9c:05:36:9c:a9:59:55:8e:9f:e0:b9:0f:22:7f:a0:
6f:dd:23:f2:23:e4:87:1f:1a:d1:bf:3f:49:58:d1:bb:f4:51:
a9:b2:0b:b7:2f:e4:3d:73:5f:f6:db:d7:c3:7a:15:dc:e6:5a:
b3:6a:a4:e0:4d:23:17:bf:22:11:b9:b7:a7:64:11:ea:08:16:
01:88:e4:ed:ae:80:58:a0:0d:35:52:a1:ce:47:05:8f:b0:dc:
52:e5:8a:2d:10:f4:c5:52:fd:e1:89:0a:a6:4a:a3:b1:e3:31:
c6:37:8e:10:c6:72:9d:25:77:53:92:7b:3e:4c:3e:e8:89:f0:
46:2f:e3:64:d9:b3:c3:38:b3:8f:e8:b0:55:81:32:54:5b:4c:
76:bc:4d:07:ad:01:72:45:3d:7f:60:09:f8:32:40:95:00:72:
b6:ea:7c:bd:9b:12:b5:7d:ea:53:04:74:3b:3b:31:ee:d1:dd:
77:f2:ad:a1:2f:d0:d9:a8:6a:8b:6e:f0:e8:4c:15:ed:83:09:
3d:da:71:ad:cd:bc:c8:d6:de:ca:69:ab:dc:36:38:c3:a0:71:
f3:9d:f6:08:8f:05:02:1f:a9:1a:70:4e:b9:3e:16:ef:04:ff:
41:02:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:14 2026 by rpki-client