Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: KZAcKh0uoT+gNuQw1CnHrz84hSUz6YX6Ei5+i1ll72A=
Subject key identifier: 7D:AC:F0:41:9A:B5:DF:DC:FA:B5:B9:CC:1D:76:C5:41:DC:53:57:77
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 01A17ADFB998D0FBD72BFC32B1F9A2BB95B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 1A57
Signing time: Tue 27 Oct 2026 01:00:44 +0000
Manifest this update: Tue 27 Oct 2026 01:00:44 +0000
Manifest next update: Wed 28 Oct 2026 01:00:44 +0000
Files and hashes: 1: LeacyVsv1RcXFogC-zGtNs0rOAM.roa (hash: j3qojoQtMWggtkDzJQQqZamlkQYEGNHbKlwdO2tUD/I=)
2: c3WNo_4_81YtKAlp0VRoL7cFPtg.roa (hash: TP+B2IitpNpDU5H0sLBuUI5Oz9mFfqDfIHOQCcHsUyc=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: eoFPomNKl9EDOnNn6tat3z9f8hsINvmnp1EUDdP6++M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:b9:98:d0:fb:d7:2b:fc:32:b1:f9:a2:bb:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Oct 27 01:00:44 2026 GMT
Not After : Oct 28 01:00:44 2026 GMT
Subject: CN=7dacf0419ab5dfdcfab5b9cc1d76c541dc535777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:32:a1:32:e2:80:c1:24:96:9e:3a:a3:a3:
96:c2:c3:52:21:8c:5b:ae:09:8f:51:09:de:10:60:
64:a2:96:5e:96:4d:5f:11:8f:ae:a3:14:62:fb:4e:
25:1e:47:2e:70:1f:0b:dc:3f:e4:f4:7f:15:b6:22:
44:9f:f4:4a:5b:3d:65:57:16:ad:7c:2c:be:91:81:
e8:13:40:29:81:db:b1:ad:64:90:c1:5d:6b:67:1b:
ba:5d:1a:b0:1d:20:17:a5:44:49:29:2b:11:01:ec:
a4:ec:73:6f:b7:0c:06:ea:62:a3:d2:69:e2:0a:e0:
4a:be:52:23:e1:3b:4a:02:d3:f9:0e:a9:48:6f:8c:
98:94:a5:38:c8:e8:d3:35:9d:03:fa:eb:3c:a3:87:
ca:cd:5a:39:a9:29:3c:2b:8e:db:67:33:4b:d6:d0:
6c:36:9f:07:aa:19:bc:12:90:c7:09:68:cd:28:8b:
73:34:c4:7a:63:fe:95:92:7e:71:46:c8:ee:5c:fb:
86:27:fa:37:5a:2a:a7:f7:50:72:46:d4:f4:f1:fb:
f3:54:e5:58:d4:71:c8:88:ba:5e:c8:50:d4:c3:a4:
78:cb:53:6a:e2:16:3a:bd:ce:a5:24:13:36:9a:2a:
b6:30:70:45:2e:9d:5a:b9:86:7c:fc:d7:d4:07:89:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:F0:41:9A:B5:DF:DC:FA:B5:B9:CC:1D:76:C5:41:DC:53:57:77
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:1e:94:3f:95:9f:bd:3d:8b:0c:72:6f:58:de:1b:42:4c:97:
0f:55:93:0f:06:68:27:de:0b:9b:c4:22:65:e0:6a:3c:70:6a:
16:02:fe:9f:d6:62:00:71:b0:02:b8:ee:f3:cd:a7:01:5e:be:
0b:29:4d:eb:de:0d:87:7a:25:b1:c8:17:f2:d5:52:f2:eb:7c:
89:eb:f4:ce:8f:cb:d3:35:7d:ca:46:17:08:bc:b2:96:5b:01:
64:60:95:51:8a:96:b8:c5:f7:3d:b8:f1:8c:95:95:62:fa:b5:
c8:40:e4:78:78:70:66:03:0a:40:03:05:48:71:83:88:3c:45:
7a:ee:d4:49:37:ff:52:d6:49:3c:04:b8:b1:a6:7d:e1:6f:9b:
d6:57:01:15:d8:fb:4b:72:e7:95:5c:a1:9d:bf:f0:7b:fa:c0:
db:7f:78:eb:3f:1b:fb:17:e0:b7:ae:ab:e7:08:0a:fa:91:35:
a2:03:b5:45:83:8a:93:60:a7:84:c4:1d:72:df:90:6e:39:40:
3d:22:f5:d2:fd:d8:14:41:47:82:88:d9:0e:cc:08:38:35:5c:
d9:e6:07:72:b6:d1:07:23:38:ad:4b:5e:90:7a:18:18:5b:04:
3b:dd:fd:16:1f:1c:4e:aa:36:51:81:9c:c2:a6:a8:e5:aa:bb:
8c:10:1a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:00:41 2026 by rpki-client