Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: 0+fj6ak5Xyb8kiz6Uz0kzxuBSz954+R6BN2Yd6wDQNY=
Subject key identifier: BD:07:FD:9D:AC:12:A8:A4:F4:65:D8:5E:3F:9F:D3:5B:2A:0B:3E:79
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 01A11304FB30FAAF7995008343784F6406B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 21:00:55 +0000
Manifest this update: Tue 06 Oct 2026 21:00:55 +0000
Manifest next update: Wed 07 Oct 2026 21:00:55 +0000
Files and hashes: 1: QimRIoifdg2JyU0GSq8a5Aty8zs.roa (hash: sDzqs2/VfMiYAG8w6JukF5QplVvfocGRr/BUGWqcR/A=)
2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: pjh624S6aIM3rWFBIuAw3WvOXixwQza3/75l6zVX5bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:04:fb:30:fa:af:79:95:00:83:43:78:4f:64:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Oct 6 21:00:55 2026 GMT
Not After : Oct 7 21:00:55 2026 GMT
Subject: CN=bd07fd9dac12a8a4f465d85e3f9fd35b2a0b3e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1b:63:e7:52:bc:9e:0c:8f:ea:03:a8:24:11:
30:32:69:5d:3b:21:8d:f8:f3:8d:21:be:ca:5a:33:
9e:87:7d:9b:d9:b8:57:39:80:7e:ef:88:90:20:60:
3e:35:80:17:88:40:fb:e0:fe:b7:86:a1:f5:c2:f9:
35:7c:b0:ae:dc:2e:9b:8f:08:22:25:7d:bb:1d:fc:
c4:05:fe:34:9f:44:49:b7:39:3c:6d:9e:02:d5:85:
de:f4:26:86:1d:11:1d:32:f9:df:ac:01:4c:a7:bf:
1f:7b:e9:2f:20:bc:85:f4:aa:48:78:30:fa:74:80:
fa:ab:18:80:43:50:f4:7a:5d:6b:bd:37:f0:f2:83:
34:94:d4:c7:38:ee:02:a0:fb:1a:40:5f:15:b8:34:
5e:c1:89:ed:dc:f9:c4:c7:37:72:2d:f2:0a:33:af:
a1:9e:8f:be:e7:cb:cc:4f:82:b9:80:89:97:9d:c6:
30:55:2b:17:ca:77:14:98:b4:3f:40:ef:10:f3:4a:
7c:c2:d4:20:8c:73:50:4f:fe:0f:d8:3d:3e:8c:98:
5d:30:17:b7:62:92:5b:84:de:4c:4a:ff:72:e8:32:
01:d4:d3:60:c0:24:ed:70:3f:6e:e7:43:11:63:2b:
7c:c6:3f:8d:7c:16:d8:9d:4f:8a:84:4c:0f:a2:3a:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:FD:9D:AC:12:A8:A4:F4:65:D8:5E:3F:9F:D3:5B:2A:0B:3E:79
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1e:0e:a5:f0:72:0e:5f:93:f5:c1:4d:a5:c1:0e:53:d6:79:
75:9a:1b:ff:80:b6:eb:76:13:ba:6d:d5:c8:93:58:10:cd:2e:
a8:1f:f3:9c:3d:28:40:73:ba:3c:16:a0:fb:33:92:fd:b1:df:
94:46:fc:7b:94:19:33:74:8a:11:fa:d2:d8:97:7c:41:74:06:
69:34:7a:a7:8e:3d:2a:b5:86:08:9e:7b:87:97:d7:28:f4:1c:
ec:0c:c9:7e:3d:ca:3b:0a:d7:ca:69:4f:c2:a9:c1:5f:51:71:
bd:46:3c:5b:4e:54:ae:75:5b:e2:9b:24:7b:e7:85:ff:c9:e1:
16:0c:d8:ae:6c:f2:98:18:8f:ca:84:fc:08:40:6f:bb:3f:0e:
46:de:88:3c:1d:16:b2:40:26:04:4a:6c:5b:1f:db:f0:75:cc:
e1:64:46:a0:8b:dd:b2:c7:a3:ab:e2:96:cf:12:f4:c1:f1:0b:
34:80:35:d3:31:49:35:14:e0:8a:f1:ec:25:e6:5f:eb:d5:fc:
20:24:c4:d1:93:76:99:2d:4a:d8:72:c6:2c:b7:aa:f6:06:77:
07:db:f2:f3:94:4f:68:89:2d:dd:c8:6c:f5:9b:72:c5:98:0c:
8c:8b:a4:4b:5c:e4:0a:bb:3b:27:a0:d1:3d:fd:a6:35:42:06:
7b:63:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:20:44 2026 by rpki-client