Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
File: Igmk3BOlMEp6okvhwXi6QuF5L4U.mft (raw, json)
Hash identifier: kDJZfM87hQU3PhstXkD28rrWLnoOTctuDmTM/5qZLpg=
Subject key identifier: A7:6C:E5:05:39:B8:AA:F9:2B:E1:7E:F0:50:71:F8:00:B0:BE:47:B9
Authority key identifier: 22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
Certificate issuer: /CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Certificate serial: 01A175B914C517CBBB8571B9166C94A1886C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
Manifest number: 06A7
Signing time: Mon 26 Oct 2026 01:00:26 +0000
Manifest this update: Mon 26 Oct 2026 01:00:26 +0000
Manifest next update: Tue 27 Oct 2026 01:00:26 +0000
Files and hashes: 1: D_BEXKJxx02XQORfBK7due4WKmg.asa (hash: NvwJFKQMeKjwgVozzqK6BRCu+sDhYcEghwySo/RibEc=)
2: Igmk3BOlMEp6okvhwXi6QuF5L4U.crl (hash: Hoc0hj3i1zsVzte5Zql5cLqDNcFIYYlJWVUY/BZqBl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:14:c5:17:cb:bb:85:71:b9:16:6c:94:a1:88:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Validity
Not Before: Oct 26 01:00:26 2026 GMT
Not After : Oct 27 01:00:26 2026 GMT
Subject: CN=a76ce50539b8aaf92be17ef05071f800b0be47b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:57:58:2b:26:46:4d:ec:f4:47:a7:15:5b:
57:db:ee:f7:6c:c3:7d:87:56:a3:e0:f4:3a:2c:e4:
83:9f:46:e4:10:3c:d3:bf:15:bc:03:03:a6:d1:3c:
81:29:e3:91:19:c9:10:e3:be:e6:4a:f0:1d:ea:98:
ac:00:fa:d9:c5:b2:78:04:20:8d:6e:6c:4d:cc:f2:
95:3d:dd:05:e8:e3:5e:ec:3d:7f:a1:8d:46:f9:88:
2c:5a:0f:a1:b4:21:62:03:fe:9d:e8:2e:8c:1c:4f:
4b:91:88:af:3d:1f:28:3e:06:35:9d:7c:9a:ac:2b:
bd:78:bc:da:ae:0c:48:e2:30:2e:4a:48:23:2d:7b:
f2:a4:60:17:48:7e:bc:be:b0:ac:7c:7a:10:07:cd:
40:7a:2c:9d:43:0d:53:de:f1:c4:46:18:fd:7b:50:
85:14:07:f6:a1:9d:77:cd:cc:5a:76:95:fe:b5:cd:
27:7c:3b:09:b9:61:70:2c:99:3c:11:d7:ab:33:4c:
6b:e5:18:8d:8a:83:be:2e:a5:4f:3a:9c:c0:39:01:
c0:9f:2c:91:71:43:7a:a9:b3:a0:0d:be:2b:1e:fe:
8c:4a:d5:d5:15:69:1e:05:df:f3:d0:b1:06:e7:4e:
fb:90:0b:62:54:8d:40:bb:b0:86:19:27:49:f9:1a:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:E5:05:39:B8:AA:F9:2B:E1:7E:F0:50:71:F8:00:B0:BE:47:B9
X509v3 Authority Key Identifier:
keyid:22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:18:50:c2:33:e9:84:d0:d5:03:eb:25:e0:4f:44:8b:e4:55:
eb:c1:ce:b6:1c:90:69:93:9e:19:2c:a5:ba:4a:7b:07:06:cd:
a5:fd:23:95:81:06:5d:c5:23:bf:06:a9:e6:eb:bb:07:d2:92:
5a:f9:60:24:a8:ad:80:3a:1a:86:52:64:86:75:8c:a9:1f:bf:
e0:3f:7a:e1:e4:ab:eb:d2:ae:a6:ea:5e:e9:d3:4f:d1:38:a7:
1d:0b:21:24:78:d4:aa:0f:aa:4b:2a:3e:27:51:82:02:30:82:
4e:a0:60:91:c1:10:49:fc:f4:49:73:c7:2f:2d:16:c7:3b:43:
32:d8:50:8e:e3:80:9d:6e:2c:f0:f4:d9:ec:80:4e:2e:6d:d4:
9b:0c:2f:71:98:02:e6:a7:74:01:27:4f:d9:f8:4d:fa:50:87:
00:c4:38:07:f5:ba:82:61:f4:8a:23:7c:13:43:b1:f9:43:cb:
6c:32:03:49:34:58:33:64:81:06:a7:ed:b7:10:9a:c7:6f:93:
65:a3:c5:93:85:cc:86:b8:bf:3c:c5:84:81:9f:fe:72:8a:04:
f6:fa:17:1d:3d:d4:ca:b7:5c:00:43:13:12:44:f8:40:ec:c7:
01:45:19:b0:cb:83:4b:e1:22:1c:19:da:90:b6:d4:fb:8d:66:
51:67:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:35:05 2026 by rpki-client