Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: /lQX1U5x+hVhpGzZK6dMPkRcuz3yrkM5S2BIZ2XixD4=
Subject key identifier: 97:8B:CA:4D:AE:76:39:CE:A0:BF:89:3D:32:4A:2D:ED:3D:11:6D:B7
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 01A0D64C27B007FC5CB39B7A261888C87ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 02:01:50 +0000
Manifest this update: Fri 25 Sep 2026 02:01:50 +0000
Manifest next update: Sat 26 Sep 2026 02:01:50 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: pO4gRpgqjfdOza0vqZXAdMqctp2qj9Z/yEsQFb0qsp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:27:b0:07:fc:5c:b3:9b:7a:26:18:88:c8:7a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Sep 25 02:01:50 2026 GMT
Not After : Sep 26 02:01:50 2026 GMT
Subject: CN=978bca4dae7639cea0bf893d324a2ded3d116db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:d8:4f:f5:af:ed:3d:6a:8d:d2:11:17:50:
16:1d:f1:32:7a:cf:1f:fa:60:4e:98:70:b8:0e:fd:
f5:0c:56:b3:1f:e3:22:06:27:58:5c:c1:2f:de:f1:
df:61:ab:b0:40:2a:f9:f5:1d:9b:d7:e1:6b:b2:11:
af:5b:25:c6:cb:4c:7a:44:c7:e7:e4:81:5c:f9:b7:
28:35:a5:11:59:f5:50:0a:5e:b5:b7:5d:61:eb:1f:
0b:ed:14:40:2f:07:3f:68:bb:a2:95:6d:f5:1b:33:
7d:a7:76:bc:8c:40:cc:4b:bc:46:f4:f5:62:83:72:
ef:47:c6:c9:98:db:06:7a:42:a3:38:d5:04:0a:6a:
4e:be:21:86:51:c4:18:11:74:61:e3:dd:c8:3e:26:
a3:ba:ee:0e:db:f9:01:0a:6d:b1:2d:fd:24:6c:f3:
b4:71:b8:b5:3c:06:d8:c9:64:af:9b:0b:2c:48:f8:
b8:e5:05:8c:e7:0f:74:bb:ad:21:ad:47:4b:40:cc:
b5:eb:fd:2c:be:96:14:fb:31:e1:0a:b6:7d:57:9e:
25:66:34:d2:8d:19:c1:b2:6b:e1:b9:0b:10:44:d3:
cf:db:88:0c:92:a9:29:e0:66:fe:cb:c7:db:4c:ba:
1d:9b:a7:88:b3:9b:27:85:4d:ae:96:be:10:a1:bb:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8B:CA:4D:AE:76:39:CE:A0:BF:89:3D:32:4A:2D:ED:3D:11:6D:B7
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:62:2d:55:df:aa:82:f7:f3:d4:ce:43:af:d8:7b:c0:64:
3a:2c:68:2e:8f:40:a7:02:93:48:0d:13:82:22:04:c6:3e:5a:
4f:07:eb:ef:3c:77:c4:5c:c7:74:55:ce:71:e8:1c:a9:5f:44:
e7:3a:07:d6:72:19:65:a3:fd:d3:3a:13:81:ae:81:58:26:94:
75:2b:b8:6d:1c:d3:88:1f:cc:b0:2f:9a:af:34:2a:92:78:72:
23:87:9c:85:db:97:ae:74:e3:12:34:2b:d4:df:8a:ab:85:6b:
ce:16:5d:04:00:aa:f9:2f:d4:a0:4a:2f:4d:09:0b:94:9e:c5:
37:c1:00:33:46:a5:0c:dd:f2:c3:7f:9d:24:7e:e6:78:6b:c5:
44:8e:f4:0e:80:bd:22:a5:57:8b:89:65:03:4e:cf:d7:4d:d0:
eb:b0:2c:67:f7:23:02:34:07:2d:23:6e:b0:d1:9c:9c:1c:b1:
b7:f2:0f:d6:79:c3:01:e6:4a:4f:d0:60:83:09:cf:2c:76:e4:
cc:a2:d4:95:48:00:28:ae:d3:e9:3b:9a:69:04:68:ec:63:d3:
d9:f8:18:5d:80:59:27:cc:e8:eb:5f:6f:ac:15:e7:0a:46:ad:
76:57:23:bb:ab:92:02:7a:bb:ec:ca:f4:7a:36:b5:6f:83:e3:
d1:0d:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:41 2026 by rpki-client