Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: Wc8DvHxsLt41Fsw39Aks52ws8qGMlMDze7SLk03RCdA=
Subject key identifier: EB:F6:45:67:E1:FD:78:D3:5D:69:96:F8:1D:31:F0:E8:9E:B2:1C:C4
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019CAA8FC032928727E082F7A06E27420688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0EB3
Signing time: Sun 01 Mar 2026 18:01:13 +0000
Manifest this update: Sun 01 Mar 2026 18:01:13 +0000
Manifest next update: Mon 02 Mar 2026 18:01:13 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: 14Szt2WdKqzCi51DP2n/+PaVd1vAfy8GCwsDkj2bjhU=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c0:32:92:87:27:e0:82:f7:a0:6e:27:42:06:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Mar 1 18:01:13 2026 GMT
Not After : Mar 2 18:01:13 2026 GMT
Subject: CN=ebf64567e1fd78d35d6996f81d31f0e89eb21cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:62:a5:16:12:e5:d7:7b:f3:e0:a1:51:db:
47:46:b6:d0:08:af:20:16:6e:ff:bf:36:6d:46:ec:
0f:66:56:1a:14:29:36:be:b1:78:70:eb:58:44:c9:
41:02:24:fa:00:f0:3c:15:fc:d8:11:68:8c:01:85:
42:d6:5e:02:14:08:ce:0f:56:cd:af:f7:4d:47:77:
fb:78:e1:1f:c8:aa:24:5b:71:42:09:27:d5:02:c7:
ad:f4:ad:5b:04:01:81:4f:8d:21:07:76:ba:ea:f1:
c4:94:2f:ea:8a:ca:88:75:92:27:5a:ee:ec:69:5e:
61:b9:a2:c4:1d:7a:07:e8:a5:e0:0f:9c:9c:fa:05:
7c:5b:54:46:bd:64:37:de:95:62:45:b0:af:04:55:
3d:42:98:d0:6d:52:22:bb:5b:62:06:29:32:5a:49:
8f:87:49:4b:06:11:f4:c4:83:fd:8c:f2:e8:ac:99:
b6:cc:1c:3c:96:72:6c:29:6d:9d:78:23:b4:32:0d:
ee:88:29:68:75:c0:5f:ef:2a:71:7e:a4:93:11:af:
aa:ac:f3:df:c6:0d:fa:a0:75:27:d6:53:b5:c1:0c:
cf:bd:bc:8a:13:cb:b4:f3:3d:ba:87:8e:de:a1:29:
d2:0f:e1:11:f4:59:46:ad:77:60:03:b8:4a:95:38:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:45:67:E1:FD:78:D3:5D:69:96:F8:1D:31:F0:E8:9E:B2:1C:C4
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d5:56:e3:01:36:0a:67:5e:d8:b5:77:e6:a4:0e:74:98:99:
51:b3:7e:11:26:e7:24:6d:a3:d5:ab:ac:66:42:8d:3e:e1:7e:
34:b5:a0:4b:e6:34:58:0b:ff:5c:25:cd:e2:ed:a5:b1:73:31:
51:c7:42:50:84:76:c4:ef:5a:47:8b:ed:bf:45:a8:1d:e5:3f:
e5:22:d6:63:81:df:34:15:39:d3:40:f2:ff:7b:6d:47:88:17:
0c:5b:43:e4:df:e6:7f:a2:dd:33:06:96:3a:68:d2:dc:57:39:
7f:f6:85:6c:71:d0:f5:c6:19:2b:73:f2:c2:98:13:db:7e:da:
d1:96:08:f5:b7:fa:eb:1f:fa:fa:9f:93:58:4b:ca:a5:23:9c:
c7:e0:22:7a:d3:c9:0d:92:6b:1b:de:59:36:a2:bf:e6:ae:3f:
5c:2e:c2:e5:dc:55:bd:e5:f5:39:e5:60:8b:5b:3b:2d:07:d8:
23:14:80:89:da:5f:d0:5e:29:99:07:89:5c:49:91:a4:ac:39:
16:6f:af:ad:4b:80:cd:de:98:f5:46:c4:95:41:ec:5f:33:20:
91:0a:27:92:62:78:37:13:ea:d1:e8:db:17:01:ba:06:65:8e:
11:e6:06:d1:92:5e:46:a2:43:b7:35:4e:e2:8d:eb:42:39:cb:
54:4a:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:42 2026 by rpki-client