Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: s6Vg1aJfOVh/sOFvD8nKO5rJn9i+BSZP8zokVI4xTRc=
Subject key identifier: 0A:E5:87:BE:6F:A8:35:90:5C:88:8A:11:9A:2D:9E:01:A7:73:31:5F
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 019CE5234F4245C6D8A2D5720FA41D3ECD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 03:00:22 +0000
Manifest this update: Fri 13 Mar 2026 03:00:22 +0000
Manifest next update: Sat 14 Mar 2026 03:00:22 +0000
Files and hashes: 1: QimRIoifdg2JyU0GSq8a5Aty8zs.roa (hash: sDzqs2/VfMiYAG8w6JukF5QplVvfocGRr/BUGWqcR/A=)
2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: /qJfoLvkASuKoFME3xFnJX2JuusJuIlTGCZtdyttlX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:4f:42:45:c6:d8:a2:d5:72:0f:a4:1d:3e:cd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Mar 13 03:00:22 2026 GMT
Not After : Mar 14 03:00:22 2026 GMT
Subject: CN=0ae587be6fa835905c888a119a2d9e01a773315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:4c:19:2a:38:b5:bf:c1:77:42:d6:f9:89:
5c:ad:fa:c7:55:21:dd:31:30:a6:b0:ad:34:6e:05:
6e:ad:1e:6c:9a:c0:52:65:c6:5a:fe:7a:61:9f:db:
8c:ee:72:96:2b:a4:ca:d4:36:47:9f:c6:49:f0:35:
15:89:4d:00:24:c4:5e:d4:11:80:53:c1:81:4b:93:
90:11:f9:b4:9d:e3:82:54:97:90:5e:88:47:1f:9c:
af:e9:c8:de:98:32:9d:2a:cc:91:ac:b8:71:f0:cf:
bb:b4:61:60:2c:f1:33:1a:c8:3a:52:1e:95:95:22:
d2:c5:e2:f8:10:3e:da:27:4c:f9:dc:42:e9:ca:f6:
4a:7f:63:ef:9e:f1:38:71:d9:c1:5a:8d:5e:5d:84:
e6:b5:b5:3f:a1:6d:5c:fe:02:3c:b2:a7:e6:88:83:
4c:ab:8f:3b:0c:29:6b:2a:1b:e8:4a:b8:5f:94:4b:
b8:41:21:61:30:c3:fb:fe:5f:0b:74:23:b0:86:2e:
3c:73:a1:ac:e3:5d:a6:da:e1:dc:0b:05:30:19:20:
de:2a:29:16:89:e0:a9:b9:84:80:07:be:3f:8d:7c:
47:68:9e:6e:2f:17:5e:b5:74:3e:77:30:8a:64:2b:
62:f9:1c:98:a0:a4:37:02:01:54:12:2b:e0:66:29:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E5:87:BE:6F:A8:35:90:5C:88:8A:11:9A:2D:9E:01:A7:73:31:5F
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:0c:5a:66:c2:ec:6f:b0:5d:02:6e:51:d6:72:84:1d:a5:
1b:9e:7d:b8:86:10:11:41:4a:fa:0e:16:87:80:0c:a4:bf:41:
42:c2:a1:c9:55:21:cb:ea:dd:65:5f:52:39:00:2d:53:be:40:
0d:8e:70:dd:83:8b:4e:7f:0b:eb:d8:ff:bd:0f:96:f5:6f:45:
01:17:0c:9a:95:d2:68:a1:a9:15:09:3e:e7:5f:a4:bd:7b:5f:
07:a4:96:0f:90:c2:52:3b:06:73:23:66:c4:1a:c9:b0:87:3f:
07:31:d6:3e:8c:dd:67:7e:71:59:4d:b0:28:5b:bb:d9:10:dd:
4c:05:45:d6:a5:66:fe:9c:a0:c2:c4:82:30:a1:41:2c:68:66:
e2:a5:a3:d8:64:4f:45:c6:f3:07:e0:2f:b0:90:9e:47:b7:07:
c2:e1:8c:23:96:fc:33:10:11:1d:88:fb:c3:2e:50:4f:39:a4:
7a:79:2d:8a:11:b1:ad:6b:67:40:3b:37:29:8b:0e:52:b3:cb:
d8:da:a6:78:76:a8:e0:bf:63:05:98:0f:5b:ca:c3:e6:db:f1:
12:d5:2a:23:36:c4:ea:76:bb:27:7b:f8:b9:7a:01:9a:2d:b6:
79:55:fd:75:1c:b5:79:fc:ea:95:5f:d9:bb:b8:58:77:b4:9d:
99:9a:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:45:13 2026 by rpki-client