Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: 4vjRl1BPOYROVn9pIeI3UlDQL0pIM0lRtdtFUXvWKMI=
Subject key identifier: BD:A6:F1:8C:EA:40:B8:A2:E4:D8:BC:14:FD:7A:AF:83:97:F8:58:C2
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 01A0CCD9F2DAD04665DE0AD44B750561F58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 10D7
Signing time: Wed 23 Sep 2026 06:00:30 +0000
Manifest this update: Wed 23 Sep 2026 06:00:30 +0000
Manifest next update: Thu 24 Sep 2026 06:00:30 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: dDKmQnBM+1CkImLv10r4nkbJvPgBq0yIH7fjCpnsovQ=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:f2:da:d0:46:65:de:0a:d4:4b:75:05:61:f5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Sep 23 06:00:30 2026 GMT
Not After : Sep 24 06:00:30 2026 GMT
Subject: CN=bda6f18cea40b8a2e4d8bc14fd7aaf8397f858c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f6:33:37:70:db:e9:56:79:96:07:fe:50:04:
81:02:71:04:a7:dc:46:e6:7e:4c:ef:ed:b3:82:c7:
68:e6:a7:fa:0f:9b:e6:f6:34:c1:de:b2:ae:16:d7:
1d:e8:a9:ce:b1:fb:04:45:f0:f0:5c:63:5b:12:4f:
83:f6:d4:e7:1e:3f:2a:28:b1:3a:0e:bd:4a:46:e9:
c1:d7:56:bb:a4:43:f4:83:fd:84:ea:73:3c:93:52:
ed:bc:bf:bc:13:3e:62:d1:cc:7a:bd:ea:1f:63:64:
f1:02:85:cc:8b:16:fd:8a:59:dc:27:a0:d5:e9:92:
c4:49:68:e1:ec:35:c6:87:76:1f:a4:ec:20:30:2d:
c0:74:3b:b7:04:4c:c1:59:ac:6b:35:37:1a:22:55:
e0:39:3f:47:4b:3c:4f:ec:0d:a5:a5:06:34:da:97:
76:0a:5c:e7:a7:42:98:72:46:1b:88:ef:fe:57:93:
39:6d:fd:9d:72:23:8c:17:b5:81:d2:26:7e:c3:ba:
33:87:f2:73:a5:fc:62:96:2d:e9:8c:16:aa:94:ce:
8f:e5:44:dd:8b:50:8a:3f:50:79:13:93:fd:25:13:
ce:4f:82:f4:52:06:d7:43:b4:c5:d0:09:b7:97:a1:
9e:50:13:9f:60:02:24:88:47:4d:6a:6d:61:6c:e8:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A6:F1:8C:EA:40:B8:A2:E4:D8:BC:14:FD:7A:AF:83:97:F8:58:C2
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:1a:d2:ba:6d:f1:ae:53:85:a1:ea:37:9e:d0:bd:77:a0:
50:57:c0:6a:0a:35:2a:30:2e:32:d1:66:ba:95:47:0b:27:8b:
b8:c2:c0:af:96:d1:cc:26:ff:cd:55:39:15:c0:6b:bf:8a:38:
20:e3:9a:0c:b1:07:6a:a5:86:26:d7:e3:33:64:67:c4:d3:06:
9c:d3:2f:fc:0a:5e:10:96:cb:0a:44:71:90:9d:8d:6b:a2:6f:
41:12:78:b9:c1:70:97:fc:12:ab:5e:93:45:4f:75:f2:61:f3:
8f:90:30:71:97:10:8b:20:51:3b:b7:fb:f3:6f:ea:d7:87:81:
71:29:2f:56:48:28:93:97:dd:a5:84:3d:62:8e:4d:01:3d:d8:
7a:f8:0b:ba:ad:6d:89:f8:79:4b:0c:0b:4b:37:3d:af:7a:ac:
ae:15:a3:65:18:aa:d1:b9:ba:0b:4e:49:e4:71:be:13:e3:aa:
db:cd:cf:b2:6c:ae:25:b2:8e:a4:06:0a:f1:c7:39:78:a7:76:
70:c3:fe:02:2c:30:7a:74:a8:ca:2c:57:19:f1:b7:15:f8:64:
18:51:08:78:79:37:2a:a4:80:6b:6b:ea:77:4c:0a:74:22:24:
e4:e9:4d:c3:48:f8:37:12:ac:7a:ae:f2:ae:70:ac:26:1b:45:
60:89:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:25:37 2026 by rpki-client