Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
File: IkRK1QtOfbbWPJiQF9DlknSV52s.mft (raw, json)
Hash identifier: HHi0HpXEOaZlMJtvLbeCDkMFVDJsK25TjOA5fHi2Z70=
Subject key identifier: 31:59:A6:EA:F9:43:3F:1F:83:92:51:98:86:E9:CD:0F:77:07:E6:7C
Authority key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
Certificate issuer: /CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Certificate serial: 019DA48B1AA7905D9EEFB7CB79DF69AB808E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
Manifest number: 0121
Signing time: Sun 19 Apr 2026 07:01:12 +0000
Manifest this update: Sun 19 Apr 2026 07:01:12 +0000
Manifest next update: Mon 20 Apr 2026 07:01:12 +0000
Files and hashes: 1: 0UJ55DUEjeibc7wTso1_f6VUnhc.asa (hash: FH/6k5/NmJrDnuK/OxObcfgW++VOBxemcPQj9UKf598=)
2: IkRK1QtOfbbWPJiQF9DlknSV52s.crl (hash: F7W9MIzOEUJIBKX5TmdOWgtAHhElM9WTJRCHctVYC9g=)
3: psWf16-euXoZZyipKgg4GGHcKWo.roa (hash: 9Dq5TbddVkCgvKuTdX4uUTRcMjOGR2syGrgqitoMwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:1a:a7:90:5d:9e:ef:b7:cb:79:df:69:ab:80:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Validity
Not Before: Apr 19 07:01:12 2026 GMT
Not After : Apr 20 07:01:12 2026 GMT
Subject: CN=3159a6eaf9433f1f8392519886e9cd0f7707e67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:b1:d4:e7:3d:54:ed:76:e7:45:57:4e:36:
45:66:7c:de:25:bf:6a:22:a2:df:86:f3:ca:aa:0f:
68:24:20:e1:c9:78:51:35:b1:41:38:86:5f:fd:65:
be:27:54:06:90:cb:c0:0a:9d:70:2e:b7:b9:c2:2a:
d0:29:9c:8d:bb:97:d7:1d:27:01:f4:c8:9c:64:2d:
a5:75:a0:1e:58:2a:1c:f4:07:c3:7b:de:cc:fa:db:
28:15:a6:29:c0:ed:05:59:09:69:46:af:7e:d4:0d:
34:84:ab:a0:c6:df:c9:ed:05:a0:ca:69:3f:09:2d:
e1:04:c6:db:89:42:94:e4:55:84:32:d2:0d:55:eb:
e0:fd:11:9a:c8:1d:6b:cf:89:d3:9c:1a:35:28:8a:
b2:c4:17:fe:30:b6:4a:dc:e0:6f:41:2b:65:7c:7a:
91:f2:a6:1c:94:8d:b6:49:1a:39:5a:bb:42:91:a1:
7f:12:24:8e:cd:76:f9:42:7d:84:72:54:53:be:11:
a0:f3:6a:b9:ca:5b:a7:23:d2:a4:92:89:44:ad:dd:
2c:16:a2:7a:e9:72:7f:f7:0c:9a:43:d2:09:72:5e:
cb:ea:31:53:69:90:12:4c:98:f2:be:25:94:58:e2:
1a:62:0a:27:d2:32:7f:f3:42:15:88:33:33:41:91:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:59:A6:EA:F9:43:3F:1F:83:92:51:98:86:E9:CD:0F:77:07:E6:7C
X509v3 Authority Key Identifier:
keyid:22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d1:ba:7d:b0:d1:66:6a:54:e4:e1:9f:d6:f3:4f:7c:36:7f:
8c:9c:41:c7:2e:ed:3f:01:1f:af:da:47:88:60:bb:7b:38:e3:
8e:5d:e3:8c:7b:45:df:43:45:bf:7b:0d:76:17:65:05:77:b8:
2f:de:ef:47:9f:51:dd:93:69:3c:06:e9:2d:a8:b5:7f:c7:15:
e7:21:1c:31:27:25:b1:f3:60:80:ee:d1:2f:39:57:b0:9f:65:
f2:03:f1:0b:f4:e8:89:24:6f:12:f1:bc:61:9e:0d:7b:5e:42:
14:ec:39:15:a4:dd:14:4c:7c:c2:e9:a4:d0:83:f1:a1:fa:2e:
d8:b6:4a:8d:f1:f2:f2:25:88:96:4f:49:91:fe:0b:cb:fa:0d:
60:c7:36:47:cb:f5:1b:a6:35:b7:fe:27:49:54:7c:7a:f3:44:
13:3f:56:70:7f:a7:3b:11:cb:7c:62:4a:08:7d:1f:aa:d6:d1:
ab:29:ab:9c:1d:76:f1:ef:49:e7:a7:bf:97:50:0a:e3:85:85:
17:5e:e5:ed:b2:e6:5d:07:fe:c2:e1:64:a0:33:f8:5f:a6:f8:
d3:df:2c:39:2b:1f:ce:23:3e:e9:34:a2:e8:f8:e8:ec:70:62:
97:3d:d6:58:82:f4:25:a9:87:f7:b3:2f:7a:42:88:fa:7a:c9:
25:62:f4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:31 2026 by rpki-client