Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: FAfU8Zga9KxN0dN1M7T+teRuS7gtjYMwuqa1gSx3pwA=
Subject key identifier: FE:59:B9:0B:82:1D:77:F4:30:41:B9:DD:EB:2F:49:E8:1C:93:45:69
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 01A08D8D4CB8C5CBC8C0C5D20AF07FE5DC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 23:00:42 +0000
Manifest this update: Thu 10 Sep 2026 23:00:42 +0000
Manifest next update: Fri 11 Sep 2026 23:00:42 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: 8O9wFwj4XLq36IREzfipIT4I8T4Lq49HVUi7tIlqlJE=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:4c:b8:c5:cb:c8:c0:c5:d2:0a:f0:7f:e5:dc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Sep 10 23:00:42 2026 GMT
Not After : Sep 11 23:00:42 2026 GMT
Subject: CN=fe59b90b821d77f43041b9ddeb2f49e81c934569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ae:39:90:d9:59:3e:b4:18:e4:be:b0:2b:4f:
c2:18:93:bd:35:24:c6:55:21:7f:67:d8:da:fb:26:
97:5c:9c:46:a9:47:88:f4:a6:d1:62:c0:a4:f9:57:
f9:02:0c:b3:c6:ea:09:3a:b2:32:59:1e:dc:dc:1d:
59:33:81:15:65:08:44:4a:33:21:97:35:f5:47:ef:
b5:01:8f:0f:8f:3e:ca:00:ba:66:b9:f5:b5:cf:4d:
9b:48:2d:e6:6f:b2:64:11:c1:c4:47:c7:ec:ab:69:
52:d5:bd:0f:bf:2c:3f:71:cd:57:22:63:42:d4:b2:
ba:c6:07:3c:cd:19:e5:c4:5b:7c:70:ea:8e:b4:ad:
14:f1:aa:4b:de:d7:1c:43:f9:e4:87:d9:57:51:52:
84:7d:c4:e4:a1:8a:5c:92:9a:53:76:f3:68:16:c6:
0b:4a:c7:1b:0f:78:da:c7:bb:bf:01:aa:74:9c:3e:
06:1d:06:e3:e5:be:ec:0c:2f:15:fc:13:b1:c6:74:
8d:1e:bb:d8:d6:7f:3b:f3:bd:cb:7b:d5:16:4d:b9:
a6:b8:87:d1:3d:ad:1e:45:9a:c2:45:b4:5f:fc:95:
3c:2a:ce:13:d4:04:05:bf:8f:c3:46:17:99:51:f7:
94:1a:af:76:25:cf:48:fb:f1:d3:52:7d:1a:6a:b8:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:B9:0B:82:1D:77:F4:30:41:B9:DD:EB:2F:49:E8:1C:93:45:69
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a3:3a:92:6d:0b:db:1c:ba:63:f5:21:4b:c5:d5:25:4a:6d:
2a:52:98:c5:19:ff:d6:0d:b7:ac:49:0d:ef:20:ac:e2:8c:83:
09:cf:f7:5c:ed:5b:2e:59:a4:4d:21:92:4c:7b:4e:e7:1a:c9:
5a:99:b5:3b:99:3b:33:b6:71:89:8a:c0:08:20:e5:46:4c:ff:
81:a3:c9:b5:54:79:e7:9d:ca:4a:d6:ee:7f:22:6e:3c:5f:c7:
84:d0:ed:80:9a:bf:11:5d:48:2d:46:a7:bb:92:94:df:89:ce:
9a:ab:a3:38:95:6f:e6:76:07:58:af:58:39:ee:ee:f1:b9:db:
17:75:78:28:9f:b7:e7:cd:8c:aa:5b:f1:89:5b:78:16:33:5c:
93:c2:28:d9:f8:7b:ef:27:a3:bc:8f:93:c7:6f:11:f9:d1:6e:
bf:e5:37:60:bd:16:18:38:58:20:72:4b:da:87:3c:85:05:dc:
0a:7c:a6:d3:d4:34:31:09:67:0e:ed:90:10:1e:a8:8c:20:64:
06:05:a6:fa:90:ad:22:06:8f:47:15:32:5d:36:1b:cf:0c:79:
e8:7e:6d:7f:0a:5e:3b:24:00:16:96:95:80:c5:9a:31:bb:f1:
52:91:da:e8:fb:4c:47:95:81:f7:2c:d5:d6:b0:b9:30:b9:9b:
91:42:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:18 2026 by rpki-client