Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: /5nTQSLhJ/7BtUVsOgnCR0OskEi9ku2+733qEE7sG4Q=
Subject key identifier: FC:59:34:BC:0C:09:24:3D:78:FD:92:17:EE:CE:82:62:56:F5:28:04
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 01A0DACD1C7CD3DF86B81C1663EC2CEAB2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 23:01:10 +0000
Manifest this update: Fri 25 Sep 2026 23:01:10 +0000
Manifest next update: Sat 26 Sep 2026 23:01:10 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: HtFlICHWnJw3Cjo0JabXMVKZm4+d+BztwCALt3P9/9A=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:1c:7c:d3:df:86:b8:1c:16:63:ec:2c:ea:b2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Sep 25 23:01:10 2026 GMT
Not After : Sep 26 23:01:10 2026 GMT
Subject: CN=fc5934bc0c09243d78fd9217eece826256f52804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:94:3b:1b:02:57:ad:8e:55:08:41:a8:45:
39:91:21:41:37:63:c2:fe:e9:ce:66:b7:d3:c7:c4:
0d:94:e8:b5:6f:59:0a:ff:49:55:11:2a:1a:02:de:
4e:40:19:c9:22:84:91:d6:a7:0d:11:1f:2a:10:5f:
0c:01:bf:21:09:cf:f3:2b:82:06:17:69:6c:cd:07:
2c:17:54:ce:00:1c:a6:d4:0d:13:92:d0:29:3f:66:
11:4d:8e:9b:60:6b:1b:b4:8e:a6:7a:30:10:a6:3e:
4b:ea:a7:df:20:91:d1:af:fc:99:71:c0:e3:ee:bc:
dd:9b:fb:d3:04:ab:ac:77:df:44:cc:5a:d3:2a:18:
5f:fa:bc:39:d6:aa:e6:70:16:17:50:89:0c:7f:0c:
92:fb:5e:d9:88:3f:55:37:fa:5a:a8:76:68:eb:df:
ff:d2:e4:07:d3:4a:2d:5d:a2:e3:69:4e:34:4e:e3:
3a:ab:03:5a:4e:f3:ef:3b:bb:34:84:38:39:33:19:
1e:99:41:8f:49:0a:07:a6:25:85:84:86:90:18:4e:
89:d1:81:9e:5f:39:97:8f:4f:7b:c7:18:60:e8:1e:
26:24:ae:f3:73:97:dd:c5:e9:92:24:5b:f8:9e:da:
4c:e7:6a:50:5e:7a:ff:e1:74:bb:66:d1:b2:f6:d4:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:34:BC:0C:09:24:3D:78:FD:92:17:EE:CE:82:62:56:F5:28:04
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:99:12:17:38:50:d5:a7:69:74:09:16:d6:21:7e:50:4c:7e:
c7:fa:7d:e0:a6:08:e6:cf:c3:90:13:20:d7:75:b6:b8:fe:a1:
7e:c1:0d:e0:ec:5d:36:8a:2b:7f:ad:b2:f3:ee:cb:60:01:7f:
7d:89:ca:8e:43:4e:d6:f5:46:e0:da:3b:2f:dd:06:62:f5:a3:
89:1b:f4:4b:87:49:a2:a3:31:df:5c:39:3a:5e:5e:40:24:a5:
16:be:06:fc:2b:99:ef:d4:6e:04:da:ab:f1:e6:d4:61:e0:36:
5d:fb:7e:92:b4:d1:c6:f7:24:7a:14:79:75:46:c4:47:54:dd:
fa:33:34:30:3d:72:b7:11:ad:8e:5a:99:49:75:aa:56:be:28:
d4:fe:bf:aa:3f:53:54:80:2c:f3:e2:f8:44:a0:27:76:5e:2b:
37:a1:76:db:f5:14:46:51:59:c1:19:3f:18:b9:9f:1b:51:e8:
fc:01:26:ce:ee:42:b9:4e:08:dd:58:36:16:cb:7f:a1:e2:ba:
e2:8c:9a:6a:f3:a0:27:9f:25:1e:4b:03:1a:65:af:ba:73:71:
db:5d:e0:c0:ee:58:12:12:32:db:6e:44:18:97:01:72:40:f4:
b8:0c:6a:f3:0a:44:4e:d0:6a:7d:47:c6:5e:63:2d:86:64:9f:
8d:04:5f:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazRx809+GuBwWY+ws6rKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTc4MDczOGI4NTNhY2ZmYmFiZGIyMzkxNGM1MGUzNjQy
MWY3NzMwHhcNMjYwOTI1MjMwMTEwWhcNMjYwOTI2MjMwMTEwWjAzMTEwLwYDVQQD
EyhmYzU5MzRiYzBjMDkyNDNkNzhmZDkyMTdlZWNlODI2MjU2ZjUyODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuqUOxsCV62OVQhBqEU5kSFBN2PC
/unOZrfTx8QNlOi1b1kK/0lVESoaAt5OQBnJIoSR1qcNER8qEF8MAb8hCc/zK4IG
F2lszQcsF1TOABym1A0TktApP2YRTY6bYGsbtI6mejAQpj5L6qffIJHRr/yZccDj
7rzdm/vTBKusd99EzFrTKhhf+rw51qrmcBYXUIkMfwyS+17ZiD9VN/paqHZo69//
0uQH00otXaLjaU40TuM6qwNaTvPvO7s0hDg5MxkemUGPSQoHpiWFhIaQGE6J0YGe
XzmXj097xxhg6B4mJK7zc5fdxemSJFv4ntpM52pQXnr/4XS7ZtGy9tQyJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxZNLwMCSQ9eP2SF+7OgmJW9SgEMB8GA1UdIwQY
MBaAFIingHOLhTrP+6vbI5FMUONkIfdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzkt
NjZmNTZlZjljZTI2LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzktNjZmNTZlZjljZTI2
LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzpkSFzhQ
1adpdAkW1iF+UEx+x/p94KYI5s/DkBMg13W2uP6hfsEN4OxdNoorf62y8+7LYAF/
fYnKjkNO1vVG4No7L90GYvWjiRv0S4dJoqMx31w5Ol5eQCSlFr4G/CuZ79RuBNqr
8ebUYeA2Xft+krTRxvckehR5dUbER1Td+jM0MD1ytxGtjlqZSXWqVr4o1P6/qj9T
VIAs8+L4RKAndl4rN6F22/UURlFZwRk/GLmfG1Ho/AEmzu5CuU4I3Vg2Fst/oeK6
4oyaavOgJ58lHksDGmWvunNx213gwO5YEhIy225EGJcBckD0uAxq8wpETtBqfUfG
XmMthmSfjQRfFA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:32:06 2026 by rpki-client