Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: lYOLBh9X7bLidMUY9YUCFExJfvFAycJTcJfnvrwniCY=
Subject key identifier: 46:49:03:A2:BD:AC:A0:0E:AD:2E:26:17:72:F0:6C:6D:8C:66:97:6E
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019FAB2C68FCFEB1961077E131D567A28C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 1041
Signing time: Wed 29 Jul 2026 00:00:42 +0000
Manifest this update: Wed 29 Jul 2026 00:00:42 +0000
Manifest next update: Thu 30 Jul 2026 00:00:42 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: j12TtExlwUvjr8GYRedw3nSsdhOTlVEyeFVoz9T7RzM=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:68:fc:fe:b1:96:10:77:e1:31:d5:67:a2:8c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Jul 29 00:00:42 2026 GMT
Not After : Jul 30 00:00:42 2026 GMT
Subject: CN=464903a2bdaca00ead2e261772f06c6d8c66976e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:2a:b6:fc:fc:43:6a:89:74:4d:01:b2:e3:
cb:97:fa:11:b8:d5:59:e3:92:d5:2f:6c:39:1f:2f:
d7:10:fc:04:84:c7:54:f1:ed:a3:63:ac:2c:8b:5c:
e9:4d:94:d9:a9:93:2a:bb:fa:3d:f5:0e:e9:5d:13:
40:3c:84:44:a3:67:d5:4d:fa:d7:71:5f:97:88:9b:
13:7e:b8:e6:fa:db:83:ce:5b:e5:a6:9f:77:fc:7b:
6b:f7:e7:ac:df:d0:3f:0c:e0:5a:d8:14:0a:a8:f2:
47:55:58:50:e5:00:0c:56:b2:5c:0e:09:bd:89:ae:
c1:ed:54:03:fe:03:03:04:c0:3f:0d:72:76:57:8a:
44:a3:ba:92:f5:00:27:c9:17:fc:44:cb:41:11:39:
8b:15:22:07:40:95:60:5d:08:7c:e1:f6:2f:7c:39:
e9:25:13:6a:ad:bc:13:f5:97:b0:46:8e:e8:de:5d:
45:3e:0c:26:f1:2b:f2:63:81:ee:f9:c4:34:f0:5e:
83:47:be:52:33:52:b6:82:1d:0f:b4:c6:59:2f:34:
34:68:f3:92:d7:3d:f9:f7:ef:aa:0b:65:59:60:d7:
3b:d0:b0:80:d5:d3:71:3f:5f:9c:71:15:41:1d:c2:
ee:ec:56:0a:87:2e:a6:a5:06:da:99:38:2a:de:da:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:03:A2:BD:AC:A0:0E:AD:2E:26:17:72:F0:6C:6D:8C:66:97:6E
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3a:2a:f1:27:20:0d:c5:3c:07:1e:1b:b1:94:63:5f:64:a4:
9c:b5:07:54:54:f3:72:1d:9f:0f:84:f2:0f:f8:e7:17:ef:77:
f5:77:9f:64:c3:29:c4:eb:4c:fe:42:3d:c3:9d:9b:37:e7:2c:
21:31:d4:39:ce:7a:05:5e:2f:19:02:37:4c:d9:87:cb:2e:3f:
2d:07:d5:a2:e9:ef:df:fc:af:f2:e5:39:ad:01:22:a8:97:22:
84:98:82:fb:a3:ff:f2:25:9c:93:61:cd:0d:72:32:e2:42:7f:
00:0a:08:69:4c:f7:b2:00:7d:a3:4f:0e:3f:7d:8a:3e:fc:18:
9c:9e:8f:4a:77:fc:ec:d4:08:28:b9:6c:cb:a4:95:3c:99:b2:
82:f8:f0:53:be:fb:f0:d0:25:95:71:c9:b5:33:5a:94:01:8a:
8e:a3:33:a9:6f:04:92:c8:e5:48:d4:8d:f9:b4:8e:1f:6f:7c:
b3:41:d8:65:d7:0d:56:ef:22:27:01:28:da:90:e6:7b:40:8e:
ad:70:63:0b:d6:aa:46:ad:1e:4c:90:78:04:9e:77:98:4d:69:
f7:2a:cf:31:f2:d3:6d:a0:4a:7c:af:a4:a9:86:52:76:cf:0d:
52:3d:77:ca:c6:ff:13:fb:72:77:86:d6:27:b4:26:29:a6:63:
03:4a:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:57 2026 by rpki-client