Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: wcf80/I3nzFjyoatkIRWLF9p80fOak7BrCdkfzZERLc=
Subject key identifier: E3:67:A4:C4:4D:59:18:08:BB:D9:F6:FD:2C:9A:BC:AE:03:92:3B:ED
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019D9A06FD9DED058BFF087C7FBF204261B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0F2F
Signing time: Fri 17 Apr 2026 06:00:42 +0000
Manifest this update: Fri 17 Apr 2026 06:00:42 +0000
Manifest next update: Sat 18 Apr 2026 06:00:42 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: 94+b+5I9PDOuydnBQJe8cuvcGLUXl4gXY/VxRord3QY=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:fd:9d:ed:05:8b:ff:08:7c:7f:bf:20:42:61:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Apr 17 06:00:42 2026 GMT
Not After : Apr 18 06:00:42 2026 GMT
Subject: CN=e367a4c44d591808bbd9f6fd2c9abcae03923bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:59:5c:d5:1d:76:86:4e:a3:e9:4b:9a:06:
d9:98:49:41:c0:ef:12:61:63:86:38:d5:78:25:05:
5d:ea:e3:6e:43:c5:1c:b0:82:e8:b6:ec:d7:af:dd:
82:28:cb:b6:94:ee:17:90:f9:61:fd:53:b0:16:4a:
4c:1e:f7:58:8d:d3:8d:e6:11:36:1c:02:07:d3:42:
a4:4b:63:41:91:57:bc:d7:21:62:ac:92:0e:4b:2c:
7f:a5:5b:a8:a7:04:45:4f:33:bf:0e:5b:f3:27:fc:
2a:8a:12:3f:06:e4:55:c2:af:46:41:7e:26:62:88:
f5:06:d4:55:e9:8f:ac:c1:26:15:de:69:03:f1:7d:
86:83:0a:ba:7e:7d:3c:6c:b2:2e:f7:c1:35:dd:52:
9a:d6:eb:e2:f0:ac:25:0a:09:53:61:44:f4:68:cd:
b4:73:d8:ad:a4:4d:fe:66:b8:75:86:a1:99:64:13:
90:fb:e5:b1:43:ec:99:89:76:ae:89:e1:29:54:30:
dc:2e:b1:67:ec:87:06:c5:2e:0b:da:f1:aa:97:f6:
2a:35:1f:a3:51:9d:e0:2c:a9:57:3d:ef:e6:b6:0f:
59:d3:66:c0:32:36:9f:b7:89:0d:9f:3d:b0:01:ba:
e2:53:0c:2b:86:91:a7:38:5b:ee:f7:02:ab:c7:80:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:A4:C4:4D:59:18:08:BB:D9:F6:FD:2C:9A:BC:AE:03:92:3B:ED
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:78:ca:db:8c:5f:7c:b7:b7:f1:12:e7:9f:95:4d:07:93:e3:
e8:ef:b8:02:41:ee:35:a0:51:d0:50:ee:1b:53:43:5c:26:84:
e9:9c:f5:88:1d:31:73:f8:bb:43:f4:f3:46:bb:a1:5d:42:22:
a1:e9:5d:ad:30:21:5c:4d:c8:3d:8e:58:7c:0d:4d:16:49:a3:
ab:90:94:70:4c:82:9d:99:37:d2:be:80:05:7d:41:31:5f:16:
79:fb:a7:5e:61:88:62:b0:10:d4:21:30:94:d7:33:ae:d3:14:
22:d5:49:b6:28:1e:04:71:c2:16:58:03:b1:91:74:cc:04:4d:
c6:88:e5:d4:39:0b:30:1e:4d:83:72:9b:96:4d:9d:49:80:1a:
61:87:38:1e:d2:19:50:af:9c:c0:34:fa:6f:89:cb:54:14:40:
bb:3e:c6:a7:a5:5d:ab:ee:be:9d:57:89:3b:69:ca:7d:ca:89:
f3:58:7b:53:85:50:0e:12:7a:10:6c:82:8f:62:ee:75:53:b2:
50:5a:f4:c5:b6:7d:1c:f6:73:b3:a4:46:56:cf:aa:df:20:33:
d4:c1:72:7c:4b:46:d9:b4:4f:3d:5a:96:fc:4d:52:28:bb:e3:
58:be:98:c0:cd:bc:71:42:16:e6:0a:5f:63:15:20:8a:24:22:
0e:4d:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:29 2026 by rpki-client