Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: Ii3mbMo6sVQE48feCMUqyX2ZcF1cTdszrCWwOpTwY24=
Subject key identifier: C5:52:25:BF:47:AA:27:9F:DA:DD:63:32:AA:B9:F9:0B:7F:E3:8E:0A
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019EC148993A4A9CCBB93F99C5B310B00F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 14:00:20 +0000
Manifest this update: Sat 13 Jun 2026 14:00:20 +0000
Manifest next update: Sun 14 Jun 2026 14:00:20 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: V+FW6lDyLRImoutTSscP6wuAX2fkOgP7Y7AH7Sxusyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:99:3a:4a:9c:cb:b9:3f:99:c5:b3:10:b0:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jun 13 14:00:20 2026 GMT
Not After : Jun 14 14:00:20 2026 GMT
Subject: CN=c55225bf47aa279fdadd6332aab9f90b7fe38e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:1a:9b:70:11:b4:6e:2a:09:83:c9:c3:42:
49:29:b2:ee:1e:c4:a3:e9:3b:8f:ec:54:6c:32:e4:
b4:c3:3d:62:63:c4:1d:1c:3f:7e:ed:36:7b:ad:f3:
7e:ee:3c:28:0b:b9:26:c7:5b:bb:6b:0b:9a:f0:8d:
32:34:5a:7e:84:db:99:67:61:d7:92:28:1d:d7:f7:
80:77:ac:3e:a1:2b:19:c9:08:f5:5f:b2:bb:c8:6b:
a7:12:4d:b8:d2:45:84:7f:f8:ff:0b:d4:d8:59:91:
6f:8b:94:0e:86:dd:5e:73:97:1c:01:ee:f3:86:dd:
ea:04:58:21:ba:e8:ca:e2:a0:c7:a5:4f:63:53:0a:
ba:95:75:41:b9:89:45:97:62:07:41:2d:2e:d0:27:
58:e7:ee:35:0c:ca:27:73:28:dd:86:c6:96:0f:49:
cc:47:47:82:7b:41:d0:3b:ff:47:bc:1e:c8:d0:e4:
19:f3:7c:08:53:05:ab:ce:59:8b:22:3d:25:d6:b3:
9f:50:ce:b5:30:ca:02:ba:ad:77:f7:b8:b9:e2:ab:
c2:f7:44:19:93:e5:f9:42:6b:4c:ca:3e:25:22:5e:
2a:a7:da:3b:3a:f6:b0:1b:f1:f6:ee:e9:02:c8:8b:
f0:b5:84:e1:34:0c:5c:f5:7c:5f:1c:82:90:85:5d:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:25:BF:47:AA:27:9F:DA:DD:63:32:AA:B9:F9:0B:7F:E3:8E:0A
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:a8:52:39:bc:d2:cf:97:4f:37:79:4b:27:5a:64:55:dc:
0d:ff:0b:6b:66:a2:3b:11:88:c9:b2:b0:b6:bb:3d:dd:03:db:
93:8f:55:c9:a9:f2:66:6a:be:df:5e:fb:97:b9:ef:82:21:ab:
84:68:f2:58:8c:33:d2:4d:2c:ea:57:aa:d3:39:a7:e9:51:1c:
20:e3:58:3d:3e:18:b1:10:6f:83:fd:ff:32:41:95:09:2c:8c:
19:c0:64:80:a1:3c:4d:27:02:7a:2d:e0:78:d2:a2:ec:c9:d4:
a1:01:b8:41:a3:18:65:8b:d8:ad:c1:09:34:54:b9:13:55:0b:
77:bb:9d:98:ec:a0:34:44:2b:df:50:76:31:ab:66:5b:06:d0:
5a:8f:87:56:e6:e5:8b:a4:df:93:53:c3:a6:e7:5b:d3:0c:77:
60:20:1b:b5:7b:47:7b:ca:37:c0:28:0f:29:42:46:76:63:4f:
11:cd:42:c4:f3:f6:f9:b6:bf:bf:f8:02:ea:c8:39:21:29:65:
e8:4e:1b:2e:b0:e4:13:85:83:b4:e7:c5:7f:40:17:1a:35:7b:
b8:04:b6:39:61:27:d0:b6:33:80:dd:99:27:5c:95:e4:4b:14:
de:f7:ea:ed:23:61:1e:92:42:46:2b:8c:2c:45:8b:fd:08:66:
3b:4f:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:13 2026 by rpki-client