Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: jd2i1seqPkhOWPO+nSkkhyr3NMIwWrKFq2jEXkdHjTk=
Subject key identifier: E0:3C:0D:6D:76:B9:AD:D1:31:66:05:7F:F4:15:5A:91:5A:C4:E9:0F
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019DA3786F167F5528726CF41F6A670C020C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:01:12 +0000
Manifest this update: Sun 19 Apr 2026 02:01:12 +0000
Manifest next update: Mon 20 Apr 2026 02:01:12 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: jjHnnw8W0ovkCKwOZOjfAbhJCtENkOd9APTXUwq4z0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:6f:16:7f:55:28:72:6c:f4:1f:6a:67:0c:02:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Apr 19 02:01:12 2026 GMT
Not After : Apr 20 02:01:12 2026 GMT
Subject: CN=e03c0d6d76b9add13166057ff4155a915ac4e90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:6e:67:d2:12:fe:86:7f:fd:07:81:b7:2b:
44:f3:db:b1:05:60:ff:38:80:ab:7e:42:74:22:73:
fa:f3:2c:41:13:20:8c:8c:41:7a:2e:92:13:7a:4d:
55:ed:53:59:71:55:2d:cd:92:59:06:c5:00:18:02:
1e:c9:81:7e:b4:80:8b:99:f9:98:c3:f1:9d:a5:e1:
63:fd:75:3b:8e:2e:f0:1f:b0:78:ab:82:ec:26:aa:
13:6f:dd:e2:f5:04:db:74:c9:94:ee:54:a0:b3:36:
09:a6:6d:ce:e7:6a:17:dc:b6:52:69:79:62:5c:38:
ac:66:f3:63:99:04:9f:81:6e:34:dc:84:67:f5:78:
3c:72:aa:bb:c2:b2:6d:6a:03:cf:74:99:ba:00:8c:
95:50:40:df:21:b0:7f:f8:9e:6f:4f:eb:a5:39:45:
63:04:29:98:ef:ec:25:c0:ad:de:20:9b:7d:68:1e:
b4:55:82:17:bd:a9:6d:ea:59:80:d0:1f:dc:9a:1c:
9e:8e:3d:c4:34:a5:86:8a:a0:2a:22:7c:0d:29:95:
68:b0:b9:5e:74:2c:9c:ed:4c:cd:4b:8d:f7:de:12:
e2:be:d2:57:d9:16:eb:b8:80:b1:f3:d8:2d:6d:66:
f0:17:7a:4c:87:a8:ed:f2:b8:62:16:5a:84:db:cd:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3C:0D:6D:76:B9:AD:D1:31:66:05:7F:F4:15:5A:91:5A:C4:E9:0F
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:cd:b6:8e:af:95:ad:01:66:fd:30:75:16:46:39:ee:1d:
b0:39:49:94:f9:73:e5:db:cf:a3:b1:fd:f2:e0:64:87:c2:3d:
22:3e:1f:8d:73:55:c1:86:c3:66:80:53:8e:89:e2:82:1f:7e:
5b:a6:56:74:50:65:4d:63:25:1d:eb:92:58:57:14:48:7a:56:
56:1a:06:4a:3b:2d:0f:54:50:80:f0:18:7c:84:9c:0e:b6:2d:
43:fd:30:5e:c8:64:23:b8:5e:f8:d1:50:94:3d:10:97:77:8d:
33:d3:39:d3:78:bd:0e:39:90:32:7e:f9:fd:01:a6:11:6d:b1:
0c:8c:7f:98:04:ec:79:9e:a3:4c:3d:20:e1:42:d6:84:0c:97:
f8:1e:ca:b1:d8:b7:59:2d:75:6c:e0:dc:0c:26:70:4a:b9:69:
02:92:71:5f:cd:ce:37:dc:a5:aa:5b:83:8a:5f:16:da:04:40:
ee:cb:07:bb:a7:b4:9e:01:97:f1:0a:49:6b:78:83:d4:3d:de:
77:56:f9:ea:ca:c9:79:17:60:5e:91:89:50:f9:81:8f:dd:3b:
f0:5d:84:ca:55:c5:58:12:d5:58:f6:01:7a:0d:64:38:83:86:
15:c6:b3:9d:23:e0:f2:41:96:e9:b5:19:0b:a3:26:09:64:f7:
6e:ef:d7:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeG8Wf1Uocmz0H2pnDAIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh
NjVhYzUwHhcNMjYwNDE5MDIwMTEyWhcNMjYwNDIwMDIwMTEyWjAzMTEwLwYDVQQD
EyhlMDNjMGQ2ZDc2YjlhZGQxMzE2NjA1N2ZmNDE1NWE5MTVhYzRlOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZduZ9IS/oZ//QeBtytE89uxBWD/
OICrfkJ0InP68yxBEyCMjEF6LpITek1V7VNZcVUtzZJZBsUAGAIeyYF+tICLmfmY
w/GdpeFj/XU7ji7wH7B4q4LsJqoTb93i9QTbdMmU7lSgszYJpm3O52oX3LZSaXli
XDisZvNjmQSfgW403IRn9Xg8cqq7wrJtagPPdJm6AIyVUEDfIbB/+J5vT+ulOUVj
BCmY7+wlwK3eIJt9aB60VYIXvalt6lmA0B/cmhyejj3ENKWGiqAqInwNKZVosLle
dCyc7UzNS4333hLivtJX2RbruICx89gtbWbwF3pMh6jt8rhiFlqE2814EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOA8DW12ua3RMWYFf/QVWpFaxOkPMB8GA1UdIwQY
MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt
MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh
LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANenNto6v
la0BZv0wdRZGOe4dsDlJlPlz5dvPo7H98uBkh8I9Ij4fjXNVwYbDZoBTjonigh9+
W6ZWdFBlTWMlHeuSWFcUSHpWVhoGSjstD1RQgPAYfIScDrYtQ/0wXshkI7he+NFQ
lD0Ql3eNM9M503i9DjmQMn75/QGmEW2xDIx/mATseZ6jTD0g4ULWhAyX+B7Ksdi3
WS11bODcDCZwSrlpApJxX83ON9ylqluDil8W2gRA7ssHu6e0ngGX8QpJa3iD1D3e
d1b56srJeRdgXpGJUPmBj9078F2EylXFWBLVWPYBeg1kOIOGFcaznSPg8kGW6bUZ
C6MmCWT3bu/XsQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:36 2026 by rpki-client