Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: ndDqE4USth/gX50HO+aSlxJ4KXYdxTxnTG4FKP9e/XM=
Subject key identifier: A8:60:C3:7B:8A:CA:DC:D1:AB:06:36:DC:AD:C2:48:85:8B:BC:91:EC
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019CAA5840421A340567158E30D0467C0668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:00:35 +0000
Manifest this update: Sun 01 Mar 2026 17:00:35 +0000
Manifest next update: Mon 02 Mar 2026 17:00:35 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: G94wLu3nm+t4EvnwNgzlpmThLHSep0p9ebAec06tqx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:40:42:1a:34:05:67:15:8e:30:d0:46:7c:06:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Mar 1 17:00:35 2026 GMT
Not After : Mar 2 17:00:35 2026 GMT
Subject: CN=a860c37b8acadcd1ab0636dcadc248858bbc91ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:a6:8a:86:7b:d4:c3:e0:f4:db:3c:2e:fa:
03:67:94:5b:07:97:29:a2:f9:68:a5:0b:16:f7:f0:
21:50:29:9f:9f:8c:10:7b:cc:8f:f5:c9:4d:b0:5d:
77:70:f6:ae:f8:eb:47:68:32:01:a7:67:3f:a4:be:
c9:66:bb:5a:d5:00:ad:cb:d1:01:0e:e2:b0:fa:6c:
e8:96:41:cd:c5:b9:25:f8:8a:42:98:34:4b:fa:7b:
5e:19:57:53:62:63:88:f7:08:9b:41:58:fd:21:ca:
c5:92:52:b2:d9:02:09:80:33:41:c9:36:0c:7d:34:
c7:60:24:51:f2:79:4a:e7:5c:23:e2:25:65:2b:4f:
e5:d3:ee:6e:2a:50:09:1e:ac:32:2e:54:c7:59:91:
7c:fb:7b:a3:cc:c4:1e:13:06:ac:28:69:a0:a2:85:
79:95:0a:c4:72:9b:6e:88:8c:76:86:d2:cc:a8:c8:
8c:52:9c:26:3c:be:a5:0e:8b:0e:a2:a9:63:d3:5a:
17:c5:07:a5:37:73:ab:88:d3:f1:92:c4:27:d8:eb:
f1:18:c9:de:33:c9:92:7b:1f:75:f0:ae:30:c5:fa:
0b:bd:93:6d:56:95:ef:ea:54:80:c2:cd:87:06:a9:
8a:f2:a2:75:00:3b:b1:62:c0:8b:6e:06:0e:63:c0:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:60:C3:7B:8A:CA:DC:D1:AB:06:36:DC:AD:C2:48:85:8B:BC:91:EC
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:58:41:01:69:01:aa:07:0f:32:12:7e:fd:da:f1:f3:be:3e:
c7:75:fe:63:56:19:37:aa:fa:c0:66:2e:7e:5b:69:9e:bf:14:
d0:2a:72:1b:06:87:ab:48:6a:d7:94:66:d0:0f:86:79:7f:5b:
97:67:1f:3e:89:63:5d:4a:1f:af:09:8a:b2:3c:72:ec:46:55:
ef:ba:fb:0b:ea:30:17:ae:d3:49:e0:3d:b4:d3:68:bb:cd:f6:
25:c7:28:7a:a2:99:22:7f:7e:39:88:fa:4d:aa:c4:2b:56:54:
19:ae:7d:07:17:21:91:df:ef:c7:13:7c:45:1b:bd:48:ef:86:
90:b4:26:42:f4:1d:fb:4f:1f:df:16:32:b7:38:95:71:cb:e6:
6e:3b:69:a7:c4:b4:ad:2d:85:69:87:5e:bf:e5:8a:25:9c:5d:
d3:ef:a4:60:25:20:57:26:86:13:78:dd:b4:32:5f:b3:27:62:
7a:80:02:2d:bf:02:20:87:5b:5b:9b:8d:b2:b3:40:68:b9:ae:
f4:02:40:50:9a:d0:78:7a:a8:42:95:c0:fe:a4:8c:4b:70:6a:
1a:74:c7:3d:05:94:8d:61:80:b2:6b:9f:69:11:46:95:b5:24:
89:93:5a:82:85:04:ec:e9:f6:7e:15:69:41:60:5e:ab:a0:7e:
b5:b1:ff:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWEBCGjQFZxWOMNBGfAZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh
NjVhYzUwHhcNMjYwMzAxMTcwMDM1WhcNMjYwMzAyMTcwMDM1WjAzMTEwLwYDVQQD
EyhhODYwYzM3YjhhY2FkY2QxYWIwNjM2ZGNhZGMyNDg4NThiYmM5MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QmmioZ71MPg9Ns8LvoDZ5RbB5cp
ovlopQsW9/AhUCmfn4wQe8yP9clNsF13cPau+OtHaDIBp2c/pL7JZrta1QCty9EB
DuKw+mzolkHNxbkl+IpCmDRL+nteGVdTYmOI9wibQVj9IcrFklKy2QIJgDNByTYM
fTTHYCRR8nlK51wj4iVlK0/l0+5uKlAJHqwyLlTHWZF8+3ujzMQeEwasKGmgooV5
lQrEcptuiIx2htLMqMiMUpwmPL6lDosOoqlj01oXxQelN3OriNPxksQn2OvxGMne
M8mSex918K4wxfoLvZNtVpXv6lSAws2HBqmK8qJ1ADuxYsCLbgYOY8AwrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhgw3uKytzRqwY23K3CSIWLvJHsMB8GA1UdIwQY
MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt
MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh
LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClhBAWkB
qgcPMhJ+/drx874+x3X+Y1YZN6r6wGYufltpnr8U0CpyGwaHq0hq15Rm0A+GeX9b
l2cfPoljXUofrwmKsjxy7EZV77r7C+owF67TSeA9tNNou832JccoeqKZIn9+OYj6
TarEK1ZUGa59Bxchkd/vxxN8RRu9SO+GkLQmQvQd+08f3xYytziVccvmbjtpp8S0
rS2FaYdev+WKJZxd0++kYCUgVyaGE3jdtDJfsydieoACLb8CIIdbW5uNsrNAaLmu
9AJAUJrQeHqoQpXA/qSMS3BqGnTHPQWUjWGAsmufaRFGlbUkiZNagoUE7On2fhVp
QWBeq6B+tbH/fg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:54 2026 by rpki-client