Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
File: ikAMEXs2e5IxswUvpRV8OaXgxJs.mft (raw, json)
Hash identifier: nFJH2eeaOBCZ9Am8mUqtwOdoIZ+AB13Z0qPbV2BzNBI=
Subject key identifier: E4:26:67:07:FE:A9:10:95:99:9D:9B:F8:FC:69:EB:19:B6:E4:1D:A6
Authority key identifier: 8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
Certificate issuer: /CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Certificate serial: 01A0BFC38686A48E0261AB782626877D79CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
Manifest number: 02E7
Signing time: Sun 20 Sep 2026 17:00:57 +0000
Manifest this update: Sun 20 Sep 2026 17:00:57 +0000
Manifest next update: Mon 21 Sep 2026 17:00:57 +0000
Files and hashes: 1: 7l8rYrP6IdaEJaaqwY0VbkiMENU.asa (hash: 9FhE+V62Snn3q2qvvthgQiUIfihNch/hed3BR1KfHyA=)
2: ikAMEXs2e5IxswUvpRV8OaXgxJs.crl (hash: wrTgAH3+li8WsseugH5VBnvg0ccjB51UQpXrZpvomyE=)
3: x9WwTsf6oq2Wm1sx344wAY3kFgk.roa (hash: HTpECY59VY6PDNF6YftRP3Eef57aiba0Z1IIXlvm9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:86:86:a4:8e:02:61:ab:78:26:26:87:7d:79:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Validity
Not Before: Sep 20 17:00:57 2026 GMT
Not After : Sep 21 17:00:57 2026 GMT
Subject: CN=e4266707fea91095999d9bf8fc69eb19b6e41da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:47:b4:fa:6a:aa:47:f0:6c:a1:39:a6:4a:
dc:fd:3b:e8:17:7b:54:42:d1:c8:33:d9:83:0c:b7:
0b:26:44:dd:34:a1:fa:19:32:fc:2d:1e:e6:79:55:
f8:de:5f:0a:ba:41:f8:f9:cb:68:75:4c:b0:4c:5d:
da:23:a7:95:bb:0f:cd:8e:7e:2f:11:64:c8:62:33:
42:23:7d:65:47:83:be:b7:17:08:35:3d:4e:e3:ee:
0f:b2:66:6e:3a:7a:2e:ca:0d:a9:b2:7a:9f:36:80:
47:f4:8f:44:eb:6d:94:93:f4:50:66:28:ab:40:39:
4f:22:3a:53:b7:71:7b:b8:3e:20:40:69:d6:30:a1:
22:63:41:d3:7c:cf:5e:d3:3c:2c:a6:1c:67:d3:ca:
b0:b3:03:32:4a:38:0a:3f:19:dc:c3:98:12:49:1d:
0f:5c:e5:53:3d:22:d6:2e:a4:a3:77:de:16:89:2a:
ea:2c:83:32:f4:3b:b1:51:be:48:1a:11:a7:9c:14:
cd:d6:2f:8f:e6:fd:38:54:1d:fc:ca:f1:5e:be:4d:
4f:36:34:51:63:c1:44:9d:0f:f1:cd:ed:8e:e8:40:
9c:26:c6:5a:d8:87:8d:4d:ba:02:e0:73:d9:21:70:
1a:34:df:f6:2a:69:a1:76:95:64:35:f1:38:a2:b6:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:26:67:07:FE:A9:10:95:99:9D:9B:F8:FC:69:EB:19:B6:E4:1D:A6
X509v3 Authority Key Identifier:
keyid:8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b7:45:33:c8:59:98:b8:04:79:67:0d:c3:4b:55:65:60:ec:
12:5a:7e:50:d4:f3:8b:28:d8:cb:f6:1a:57:23:57:66:f1:8a:
33:37:a3:83:7e:8e:c6:09:c3:67:31:f2:5c:d4:28:91:39:b7:
9a:48:20:21:76:90:d5:cf:fe:82:6b:55:5d:4b:fa:6a:4f:57:
70:8e:da:71:92:86:74:94:fa:e4:76:84:79:4e:ff:cf:71:07:
00:79:52:ad:2c:dd:d0:83:0e:63:ad:d9:1a:9d:c8:df:c4:8c:
8e:9f:be:30:18:90:f0:e6:a8:f5:2a:fd:cb:a5:a9:2b:70:31:
26:7d:e3:d9:ce:82:7d:88:d7:c1:7e:38:32:1d:b1:60:74:5c:
e9:32:fa:4f:36:b4:1a:6f:07:ac:94:a6:46:20:27:ae:cd:b9:
37:98:4d:4d:c1:e4:13:36:8a:09:cf:de:ef:88:65:20:aa:3a:
c5:9d:f1:f3:1b:6c:a7:be:69:3d:5f:8f:d8:73:a4:6a:2e:f8:
dd:35:de:e3:04:d6:d9:09:df:8d:b9:cf:a6:5d:13:0f:7a:37:
30:56:49:a2:12:65:b7:b7:73:fd:86:6f:11:da:4c:15:b7:73:
ba:2f:17:24:5c:e2:73:bb:63:d9:84:fa:d4:3a:a8:2d:96:36:
71:18:8f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:30 2026 by rpki-client