Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: CAWEmVXAiSq6A8wmm1zlRZHc6UQuQpHplbuweKJXw88=
Subject key identifier: DC:6E:BC:4D:BA:E2:BA:38:3C:B4:84:95:B1:12:68:25:A0:FF:EF:64
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 019FA3E128874E0C98AF3CDF2ECC4E24ED31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 14:01:09 +0000
Manifest this update: Mon 27 Jul 2026 14:01:09 +0000
Manifest next update: Tue 28 Jul 2026 14:01:09 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: ouL9khD+cult2MZJ+lZRpHoFyXqn9TM/Xo/BsdbCsHg=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e1:28:87:4e:0c:98:af:3c:df:2e:cc:4e:24:ed:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Jul 27 14:01:09 2026 GMT
Not After : Jul 28 14:01:09 2026 GMT
Subject: CN=dc6ebc4dbae2ba383cb48495b1126825a0ffef64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:5e:36:72:a7:e8:ce:bc:e6:bd:74:d2:bf:
a4:90:f5:3b:9c:29:2f:2d:6c:24:35:9d:6b:e9:69:
a7:c3:5a:70:20:c8:50:f7:39:0c:b0:b5:06:5b:64:
ee:5f:55:5e:43:d5:1c:b4:78:60:e1:95:89:09:36:
f0:10:c8:36:e9:9f:30:63:b8:ec:ab:ff:a3:b3:05:
b5:c2:b0:ae:9e:2b:f2:ee:ec:b0:7a:86:87:f6:66:
81:5e:ae:54:a1:5d:43:c6:c0:67:8c:22:0f:16:0e:
0e:7a:7d:66:aa:a6:e0:4d:69:07:1c:0e:c5:98:07:
86:f4:53:7f:c9:0a:0c:10:60:3b:1d:45:10:02:f6:
7c:a2:54:68:c5:3e:da:cc:15:32:5d:29:b4:f5:d1:
bd:a2:01:d5:78:1a:26:0c:84:fa:61:98:00:08:0c:
bf:b5:fa:2f:ab:67:98:fc:7a:f2:48:cb:66:35:f7:
50:b7:94:4c:b7:2c:a7:26:f7:7d:2a:0c:fd:d6:25:
a6:3f:3c:3d:94:9d:df:69:54:2f:df:1c:ae:fd:6d:
e6:9e:c4:2a:03:e3:34:cf:59:64:b6:56:1c:51:2f:
8d:28:ee:85:68:c8:91:2f:d5:60:bd:93:4e:81:0c:
99:fa:ae:4e:5d:16:39:70:c4:f8:16:1a:3b:68:ac:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:BC:4D:BA:E2:BA:38:3C:B4:84:95:B1:12:68:25:A0:FF:EF:64
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b8:56:b7:8d:42:04:0b:2a:18:ac:c6:27:8e:c7:e9:ea:36:
0e:e8:83:34:0f:9a:03:c8:21:a6:ed:e0:28:6a:ce:89:05:b8:
34:6b:c9:d3:52:1f:4c:ad:b0:33:52:2d:67:50:7d:ff:ae:48:
22:51:2d:5b:8d:53:73:51:53:00:0f:5d:da:b2:1e:83:9d:ef:
c2:c1:07:a0:29:db:75:59:06:4b:24:17:f9:f3:cd:58:f5:e7:
6e:e3:cc:49:53:83:ce:00:6e:22:e8:0e:ed:e4:94:ba:5b:21:
2b:ef:fd:48:30:4f:69:93:6b:f7:29:94:48:f7:36:80:5c:43:
bf:3e:e7:d8:b2:b8:99:4c:93:78:db:61:1c:75:97:9d:32:3b:
e4:e1:7c:27:12:2c:ac:65:0c:23:4b:38:30:7f:d8:e1:f6:be:
2f:45:f5:e3:1b:b8:9a:8d:9f:c1:33:58:1d:d5:23:d8:80:56:
78:b8:a4:06:7b:ce:24:7b:09:22:ec:a7:5f:c9:5a:ca:69:17:
cd:63:de:fc:b1:bc:1d:de:7e:65:bc:bd:19:5b:cb:89:64:ab:
d7:a7:b2:e5:10:2e:7f:d0:84:14:1d:ec:f1:5f:20:aa:86:af:
af:78:80:ae:71:e5:02:88:f0:bd:1f:da:f3:91:30:91:c2:13:
9d:1d:d6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:08:54 2026 by rpki-client