Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: QBdB08I8tOUNdEzFZXGbPIS14MR0ZUP/VEOnH88FJlE=
Subject key identifier: 5A:67:24:69:1D:80:9A:C5:E7:C2:BE:89:50:51:B0:B1:51:6E:44:F2
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 01A192E82B1C6A5E8432C16CD352D389F727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 0E68
Signing time: Sat 31 Oct 2026 17:00:51 +0000
Manifest this update: Sat 31 Oct 2026 17:00:51 +0000
Manifest next update: Sun 01 Nov 2026 17:00:51 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: 4QJIxBKuopm1DAPmBuS6KhKueApUe4Qx/OKpue5zcJs=)
2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:e8:2b:1c:6a:5e:84:32:c1:6c:d3:52:d3:89:f7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Oct 31 17:00:51 2026 GMT
Not After : Nov 1 17:00:51 2026 GMT
Subject: CN=5a6724691d809ac5e7c2be895051b0b1516e44f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:80:8d:5f:bb:1c:87:3b:10:90:bb:9f:8b:
18:de:bb:15:b1:32:7c:b7:af:4a:ba:63:27:d8:79:
1e:a6:79:92:48:7c:dc:e7:c8:25:1a:e5:d5:3a:1e:
b5:97:b6:1c:14:be:9a:5d:af:9f:2b:f3:ce:a0:75:
0d:80:bf:b8:c2:83:8c:e5:a8:e4:f1:14:c7:dd:81:
94:17:d4:15:85:e0:09:f2:01:08:08:42:d4:56:1e:
85:e0:1c:cd:11:4e:dc:c7:6f:f6:3d:20:1d:ba:4b:
1a:c6:d3:60:6d:78:50:3c:6f:56:77:32:6b:33:db:
f1:0b:78:01:49:ad:c0:0f:b2:3f:e5:5b:67:71:cb:
cb:c2:2d:b1:86:31:ef:61:11:a4:7c:89:d6:34:5c:
a7:bd:b5:62:59:ed:9a:d1:8b:df:c4:71:e3:b1:86:
c9:50:96:6e:fd:ba:aa:e6:64:82:5e:59:b8:2f:09:
4e:06:15:3f:96:ee:f8:3f:f1:7f:49:6b:ca:1e:da:
03:e4:84:f0:b6:39:75:71:4e:b4:d5:ca:76:b4:b6:
b5:68:73:d3:41:8b:9d:9c:c2:5f:a7:a6:ff:99:d5:
41:00:cf:d5:2f:0a:7d:41:cf:be:fb:fe:d1:0f:ba:
f3:81:c4:a6:5f:6c:29:68:4d:bf:7d:d3:58:8f:a3:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:67:24:69:1D:80:9A:C5:E7:C2:BE:89:50:51:B0:B1:51:6E:44:F2
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c9:6b:31:3a:04:ce:26:03:47:b5:73:4a:06:95:d7:4c:87:
1a:6b:8e:bd:5e:65:1d:61:30:53:d5:92:94:f4:d3:16:18:8b:
72:4c:a2:e5:e7:71:af:01:fd:07:cd:d2:8c:3b:5e:ae:ab:62:
37:38:7d:16:8c:7d:bb:45:7f:88:d4:c0:33:cb:df:69:83:63:
1d:7f:e1:b0:23:ba:75:13:57:27:0d:f6:83:62:d2:9d:c3:7f:
c5:e7:a3:d6:c5:05:55:9b:30:c3:3a:d3:7b:e8:8a:29:d0:6b:
f0:a7:06:3c:77:ef:97:47:b1:f1:dc:ae:3a:77:ad:50:26:aa:
ac:48:ed:da:0b:2b:e3:12:44:00:64:b4:13:2e:3a:87:2d:7d:
4c:11:90:4a:fc:63:3d:73:3a:fa:58:c7:c5:45:04:3e:8a:16:
0f:8d:b3:64:58:86:ff:3a:94:6a:64:68:83:2d:8a:c9:8e:e1:
ae:e8:72:3d:e0:e1:a9:6d:bc:48:c0:dd:a6:1d:32:26:28:9b:
56:86:30:85:ef:51:be:e2:50:9d:79:c6:a8:d9:55:f5:02:9f:
01:cf:ee:d7:0d:20:db:bf:06:32:7a:d6:55:65:f1:f4:93:7e:
81:40:84:fb:e0:a1:06:34:c0:25:af:51:55:da:39:ff:14:a2:
89:39:b3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 19:43:50 2026 by rpki-client