Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: KJUBgVGFMSB3BIMXb+GjfGTuKyu5yBCxzMQY6YHJo5M=
Subject key identifier: 4F:CA:75:A8:F2:A4:E2:E9:12:76:54:5D:9E:AD:56:57:A3:E8:07:A2
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 019CAAFD88D4135BBB6B307E7B5EC15A01CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: lBBFjSYiqYELXHqT34Un0hlYl0HO5YjbuCg0yFCDcwA=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:88:d4:13:5b:bb:6b:30:7e:7b:5e:c1:5a:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=4fca75a8f2a4e2e91276545d9ead5657a3e807a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:68:c9:c3:c8:c5:89:34:f4:97:15:df:f3:
31:73:53:a8:71:a9:7b:9f:6f:e3:da:f6:8c:c1:cb:
ab:b7:d4:cd:34:93:e0:71:76:04:50:0d:3c:36:93:
12:46:a7:0e:94:db:e9:ba:38:93:a8:34:48:41:f6:
62:96:36:da:5a:26:96:95:fd:93:da:aa:6e:13:a9:
c3:01:9d:a6:3a:f2:c8:64:08:b7:83:e0:f3:54:0b:
58:74:22:7e:43:df:0c:8f:83:21:8f:77:d3:ca:cd:
66:d2:eb:2e:2c:3b:b7:15:de:59:89:3d:7b:96:0a:
fd:5a:46:6a:fb:ee:e3:b6:ea:fe:bf:e6:5a:b9:6d:
e5:ba:c6:87:b2:7a:cf:5a:e1:71:eb:67:94:a9:99:
c9:ae:09:95:82:00:4b:41:b6:ad:95:41:e8:74:2b:
82:75:5a:94:84:62:70:31:3a:6e:87:50:6f:70:32:
76:ce:07:07:ba:d8:8e:83:4a:71:09:37:13:1b:25:
68:de:51:83:ad:1b:f6:f7:6e:15:cd:4c:56:8f:5c:
1f:02:f5:3e:2d:2d:68:b0:ef:c4:81:b7:17:0c:0e:
47:6e:6e:4c:af:b4:65:01:30:f7:7c:40:7e:d7:73:
7e:01:e2:c4:22:3c:8d:77:d7:72:22:78:97:74:d4:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CA:75:A8:F2:A4:E2:E9:12:76:54:5D:9E:AD:56:57:A3:E8:07:A2
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:67:8f:bd:5f:2c:7c:4b:86:f9:ab:e9:de:f5:3d:f2:f0:5e:
c2:be:ed:36:1a:f5:5a:ec:96:5b:24:e1:e2:3b:b2:b5:e6:13:
e7:77:a5:b5:3f:c0:1c:ff:29:0d:c6:cd:c0:f6:27:6e:0d:34:
34:df:c6:c8:84:7f:3e:c5:0e:ac:c9:57:44:f5:f8:5f:56:1e:
70:9e:b9:af:25:06:22:a4:84:89:a2:93:d0:c8:b9:74:c2:9c:
e9:f9:6f:d0:92:4f:5d:af:14:fc:be:33:52:65:23:b5:0f:fd:
ef:b3:10:10:53:20:57:8f:b2:fa:83:03:17:3b:b0:37:ce:6d:
6e:bc:86:ef:19:6b:f9:64:c5:73:62:ad:56:da:e4:f1:2a:91:
7a:5a:cc:4a:ef:b3:5b:6f:67:1c:c4:58:44:86:dc:2a:87:6c:
03:88:2d:1d:14:d0:07:7f:d3:54:ed:78:7d:5f:ff:b0:c8:67:
37:84:a3:8a:fc:ac:cf:f1:b3:ca:ae:a1:e3:79:cc:7c:c2:de:
46:d6:61:e7:ac:ab:9f:37:e9:96:3a:55:23:00:11:09:6c:f2:
81:ab:9d:54:b9:5f:3a:33:34:3a:8f:63:ce:0f:ab:d1:9e:4a:
25:0a:9d:aa:7f:da:b2:f0:c0:6f:dd:fb:00:7d:38:2e:56:1d:
ce:86:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:16 2026 by rpki-client