Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
File: Igmk3BOlMEp6okvhwXi6QuF5L4U.mft (raw, json)
Hash identifier: Nd7VWe0ucgwXyom95kFJsNrDacsfI5OhcN+V6tN5SQM=
Subject key identifier: CB:6E:A1:B1:6D:01:0D:F1:B4:DE:6A:85:34:84:06:62:C7:D6:A2:16
Authority key identifier: 22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
Certificate issuer: /CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Certificate serial: 019F848D09B4BC8AF722D788EDB3F6BA7546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
Manifest number: 05A5
Signing time: Tue 21 Jul 2026 12:01:03 +0000
Manifest this update: Tue 21 Jul 2026 12:01:03 +0000
Manifest next update: Wed 22 Jul 2026 12:01:03 +0000
Files and hashes: 1: 25oZjtsXGt-n2WY2ltVfz0hHWzE.asa (hash: cAJ1A4GbTa/DjrR5J7Hx50xOdea/6PB89hhjqA5MTnI=)
2: Igmk3BOlMEp6okvhwXi6QuF5L4U.crl (hash: Akbjkshhp1k7PiG00tEQfS398TnHrKEiuBVHkgNvI8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8d:09:b4:bc:8a:f7:22:d7:88:ed:b3:f6:ba:75:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Validity
Not Before: Jul 21 12:01:03 2026 GMT
Not After : Jul 22 12:01:03 2026 GMT
Subject: CN=cb6ea1b16d010df1b4de6a8534840662c7d6a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:79:9a:da:4d:60:98:74:a2:41:11:e9:4f:
ad:96:0c:ec:6b:a8:04:99:9a:8d:07:cb:ef:a5:e6:
6d:88:ce:84:55:54:48:f9:ba:90:66:f3:b8:18:26:
cb:e7:7f:2b:96:90:70:56:79:01:22:ce:d1:38:f1:
7c:4e:66:73:04:b4:0b:40:ed:e5:7f:79:d4:4a:b1:
09:99:33:d0:7c:40:6a:ac:fa:d2:06:f3:0c:8e:69:
8e:23:1e:56:73:bf:6a:52:c5:0f:cd:0b:55:fe:96:
53:03:b4:54:47:df:39:50:b6:e0:3d:13:cf:f6:d3:
fb:70:79:f7:6e:ac:81:27:74:1d:aa:fe:24:f8:46:
40:b0:4d:3f:35:92:e1:e3:b4:f4:36:96:ac:b9:64:
5a:9e:0c:41:4b:9f:53:26:37:0c:79:8e:c2:e9:40:
cf:06:78:ac:90:93:38:1f:93:e3:1b:0c:ed:61:bb:
86:f3:42:ab:35:99:a8:c9:01:59:b7:c7:72:8b:56:
25:ae:52:0e:fb:18:ff:bd:cc:86:68:1c:a2:bd:a0:
bc:98:e9:49:d1:59:6d:c7:5b:96:8a:e6:da:6a:e3:
39:59:e3:75:95:ba:f4:2f:24:72:1a:67:a8:a5:c3:
17:a3:a8:02:76:20:06:f8:85:bb:8c:68:8d:a6:82:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6E:A1:B1:6D:01:0D:F1:B4:DE:6A:85:34:84:06:62:C7:D6:A2:16
X509v3 Authority Key Identifier:
keyid:22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1a:29:4a:99:f4:78:1b:57:7e:f0:5f:d9:62:8f:95:75:ce:
1d:70:44:bb:7a:4c:4e:6a:cd:d3:31:01:a9:6d:eb:ee:ca:5a:
16:80:2d:36:0d:55:07:76:8a:7e:77:57:9d:74:c2:52:ad:16:
a2:89:a0:f9:96:c3:0a:b3:1b:9e:bd:c6:74:cf:3e:b6:8d:f9:
c9:76:7a:64:16:e1:41:a7:52:77:f5:60:02:be:0d:c9:29:18:
e4:30:85:a6:81:84:d8:20:e4:91:53:c0:d6:ff:fd:4d:7d:a3:
4b:42:72:b0:38:3d:8e:cc:e1:1b:f8:cc:6b:5c:e2:f7:53:18:
28:51:94:7f:2c:94:b1:b7:4a:03:34:97:10:43:a6:95:1a:cb:
6a:fa:c4:12:a3:52:42:be:4f:a6:b6:7d:e4:7d:77:f7:47:64:
ad:db:60:01:53:0a:09:8c:dc:ea:d2:1f:e8:4d:b9:17:4e:39:
12:40:07:e2:65:08:6b:37:2d:24:3b:e0:b3:de:91:f4:09:39:
ed:29:38:78:ec:db:f4:d0:11:23:4f:b3:1b:c9:c1:9d:2b:2f:
ac:48:a3:4f:05:8e:0b:00:17:5f:5a:95:e7:20:2a:1e:3e:d3:
b4:b6:e9:39:04:a1:84:5b:be:ac:25:b4:1c:30:62:9f:9c:85:
f6:01:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:16 2026 by rpki-client