Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
File: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json)
Hash identifier: oT2kUp5jMyJV/57CM4WafY16A/DpvxdkncKdc+CGT0E=
Subject key identifier: E9:F9:14:8E:1F:0F:48:FA:2B:61:F8:77:75:22:86:04:5E:EA:A4:4E
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial: 01A12F8EAC925198903CE847C7F4303E7B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
Manifest number: 0A9A
Signing time: Mon 12 Oct 2026 10:00:41 +0000
Manifest this update: Mon 12 Oct 2026 10:00:41 +0000
Manifest next update: Tue 13 Oct 2026 10:00:41 +0000
Files and hashes: 1: Ikq2mGUlslqkD1ZeqGUCsBqCrfo.roa (hash: E6NdR2fVzdULD14RMMCq1nu2I2iubEiAOLLdM23/Ci0=)
2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: 3LAfNHPm83zR54mua94405kj01LvIjXaH7wwuGLh34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8e:ac:92:51:98:90:3c:e8:47:c7:f4:30:3e:7b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Validity
Not Before: Oct 12 10:00:41 2026 GMT
Not After : Oct 13 10:00:41 2026 GMT
Subject: CN=e9f9148e1f0f48fa2b61f877752286045eeaa44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:6d:89:a9:b5:b1:2a:13:e3:dc:90:ab:cb:
5b:b7:7c:d7:d0:46:fb:aa:ab:ab:ad:33:1d:2d:22:
f2:c6:3e:25:05:05:f0:2a:fa:de:bc:df:06:1f:04:
85:e3:16:d0:e5:9a:b0:f1:f0:3a:3a:8b:f1:64:61:
de:a6:c9:dc:ff:c1:40:71:86:b8:83:71:e4:46:29:
ef:a1:9d:d9:be:be:11:ad:3f:f7:fe:a5:fd:9d:38:
8d:17:84:be:e9:29:94:ce:ec:de:f4:98:f7:d0:25:
a9:0b:52:84:f2:8c:57:4d:ba:33:a3:ba:1a:73:fa:
89:0e:c6:6e:2b:5b:c3:e2:f9:d9:cc:51:79:b7:d8:
11:c7:12:78:07:29:18:2b:1f:f4:28:9b:4b:b3:1e:
7c:32:94:72:f1:ff:c9:4e:9b:bb:05:5b:44:cf:cb:
7e:eb:fd:b0:57:1d:b3:36:1e:da:22:bb:46:e4:e6:
0e:3e:87:20:54:25:a1:87:3b:48:ae:44:75:86:fd:
10:b8:c0:70:4d:85:18:50:39:db:ed:3c:10:e0:37:
27:73:7a:c6:f7:bc:1a:54:ae:e3:6c:59:c5:e5:b0:
f0:f8:26:08:13:b9:1d:ca:38:9c:ad:02:6e:73:fa:
37:f4:d2:67:8d:ef:a6:3b:ff:0b:ce:24:45:08:91:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F9:14:8E:1F:0F:48:FA:2B:61:F8:77:75:22:86:04:5E:EA:A4:4E
X509v3 Authority Key Identifier:
keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:55:41:e6:be:82:a4:6f:72:bc:91:1c:6e:9f:d0:c1:b4:e3:
8e:67:bb:76:82:e2:23:7a:a9:1a:8e:63:57:b6:41:48:84:f6:
37:fa:5a:4b:4e:79:fe:40:27:cf:d5:4c:38:26:04:7b:4a:8d:
7c:53:c0:9d:90:e2:af:38:91:46:0d:bf:db:4b:8d:01:40:c2:
c2:4d:62:b8:e8:2e:75:27:79:b3:20:e7:f9:15:76:0d:06:a8:
8a:cd:b0:ae:b2:5d:2a:d8:f6:9e:ea:77:00:3d:e3:e5:7d:1e:
13:f8:ff:ed:be:71:a6:c8:6a:cd:19:50:b5:e6:65:11:79:3e:
31:15:13:db:fb:2f:01:48:4a:3c:e6:26:5d:cc:57:36:de:40:
88:a2:20:4d:a9:fe:82:a6:1f:c1:05:f2:26:0f:b0:72:12:ab:
42:47:c3:f2:9a:ad:3d:fd:56:a5:2b:ef:eb:4a:5b:e3:d0:c6:
a7:d4:ba:ba:cb:fa:55:c5:b9:f6:b1:b0:5b:ac:19:bf:a4:12:
5a:26:8c:14:7f:c6:5f:fc:b0:97:54:1b:cf:e8:ae:3b:ef:a4:
e6:b6:fd:cb:1d:ad:b3:09:f7:c1:71:43:ae:07:97:bd:c1:ac:
0f:d9:15:65:03:08:84:06:bb:91:e6:69:1f:da:04:19:4d:f9:
c1:83:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:16:54 2026 by rpki-client