Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
File: IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft (raw, json)
Hash identifier: NyamrXLD8pRk9swtOvWWA9qVxUUsW2SUkCLkBh//c+U=
Subject key identifier: E5:21:F7:94:8D:64:42:67:66:FE:91:28:6B:76:FD:D4:F4:AD:D7:F1
Authority key identifier: 22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
Certificate issuer: /CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Certificate serial: 01A14BAB737CB4DED434383F274E1FA4380B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
Manifest number: 0125
Signing time: Sat 17 Oct 2026 21:01:29 +0000
Manifest this update: Sat 17 Oct 2026 21:01:29 +0000
Manifest next update: Sun 18 Oct 2026 21:01:29 +0000
Files and hashes: 1: IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl (hash: ZOFuZ6nSru0quGoG+JKf812eSL71AbqenitUGUbdvVg=)
2: h2MUZzK6jX-iU91egrEXxJwrlhU.roa (hash: AQQQoSdiJ+jplNp9p3VB8GeXhyTD6RNK0y5PzB9A1Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:73:7c:b4:de:d4:34:38:3f:27:4e:1f:a4:38:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Validity
Not Before: Oct 17 21:01:29 2026 GMT
Not After : Oct 18 21:01:29 2026 GMT
Subject: CN=e521f7948d64426766fe91286b76fdd4f4add7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:bd:a3:97:c8:95:ff:32:2a:aa:c6:ea:51:
8c:3c:6c:8a:ae:3f:28:33:ea:41:47:ac:bb:ca:fb:
98:9e:d3:a0:26:6a:c6:80:82:73:6c:a6:e0:e9:2d:
7c:24:79:36:53:5a:c4:31:6b:62:fd:3d:3e:85:c0:
fc:ca:cf:a5:a9:30:2c:c2:7d:cb:8c:3f:e1:b2:8c:
8c:10:b6:57:98:a7:2a:28:62:e6:b6:0c:26:85:0e:
30:b1:f3:a4:70:34:77:c4:cb:44:99:5d:bf:41:c3:
d6:6c:5b:c5:57:e4:38:0e:64:f5:44:b5:1c:00:94:
68:b8:d6:39:50:a7:ca:4c:f9:fe:ae:c7:bb:ce:cd:
41:c8:57:93:78:1b:8a:3a:7e:11:f4:b0:43:ce:df:
60:cf:a1:c4:8f:bc:d0:b7:2f:2d:76:4e:7e:e1:56:
0f:37:56:58:8b:5d:8f:fe:3a:e4:1f:21:bc:37:5b:
6b:de:a9:1f:69:8c:39:43:ca:da:72:b9:86:e6:f9:
0e:2e:84:0f:00:d5:1b:73:82:b7:2f:52:18:5c:ad:
99:6b:5f:46:46:c7:40:a0:c6:56:6d:e2:d8:13:fe:
fa:52:3f:60:82:df:84:74:0e:08:79:6f:16:f0:b2:
fe:e5:98:43:f8:4f:3e:ed:4a:dd:a5:a1:16:f9:eb:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:21:F7:94:8D:64:42:67:66:FE:91:28:6B:76:FD:D4:F4:AD:D7:F1
X509v3 Authority Key Identifier:
keyid:22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:86:27:3c:12:4e:02:c5:91:59:f8:a7:7d:c0:e2:b3:29:13:
8b:26:b4:5e:f7:13:c4:39:42:bc:09:d2:89:b6:c4:17:10:38:
42:3e:04:06:e5:46:a0:31:a3:f2:6a:f0:6e:9a:98:65:d5:f5:
f9:f4:a2:67:a5:11:d3:77:9b:a7:bc:31:3f:74:c7:68:38:1e:
fa:50:59:0e:30:4e:66:91:cd:fb:e0:95:2f:d2:e4:4c:a7:f3:
b0:32:55:88:21:64:2a:c0:8b:2c:d3:8f:b4:74:66:ba:cb:74:
0a:fb:e7:92:ab:30:9f:73:69:3a:21:aa:77:70:05:37:33:ce:
86:40:e0:f8:1d:e5:f3:d7:49:94:16:7e:92:54:be:7a:3a:0c:
88:7c:54:0c:7f:e4:e0:02:bf:36:52:85:81:04:f3:a8:64:5a:
71:ff:10:eb:ef:51:a5:93:d7:cd:88:81:8c:8f:e0:8f:61:a7:
58:21:e0:27:ea:06:84:b6:45:42:16:4d:7a:b7:5f:d5:6f:40:
86:16:06:6e:f3:91:3d:b3:c1:e7:29:47:88:b7:7f:6f:96:b7:
9f:24:77:cc:a9:d0:41:11:cf:dd:35:fe:31:45:a1:60:56:18:
35:1f:33:42:33:73:d8:88:49:fc:9e:b9:92:e4:8e:ea:86:4c:
62:22:ae:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLq3N8tN7UNDg/J04fpDgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMjJhNDhhNDhhZTQ1ZjIwZDdiODNhNGU5ZjNmNDNmZGIw
M2E5MGUwHhcNMjYxMDE3MjEwMTI5WhcNMjYxMDE4MjEwMTI5WjAzMTEwLwYDVQQD
EyhlNTIxZjc5NDhkNjQ0MjY3NjZmZTkxMjg2Yjc2ZmRkNGY0YWRkN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA69o5fIlf8yKqrG6lGMPGyKrj8o
M+pBR6y7yvuYntOgJmrGgIJzbKbg6S18JHk2U1rEMWti/T0+hcD8ys+lqTAswn3L
jD/hsoyMELZXmKcqKGLmtgwmhQ4wsfOkcDR3xMtEmV2/QcPWbFvFV+Q4DmT1RLUc
AJRouNY5UKfKTPn+rse7zs1ByFeTeBuKOn4R9LBDzt9gz6HEj7zQty8tdk5+4VYP
N1ZYi12P/jrkHyG8N1tr3qkfaYw5Q8racrmG5vkOLoQPANUbc4K3L1IYXK2Za19G
RsdAoMZWbeLYE/76Uj9ggt+EdA4IeW8W8LL+5ZhD+E8+7UrdpaEW+evzsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUh95SNZEJnZv6RKGt2/dT0rdfxMB8GA1UdIwQY
MBaAFCIipIpIrkXyDXuDpOnz9D/bA6kOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWlLa2lraXVSZklOZTRPazZmUDBQOXNEcVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NmQwZWEtNDhhZC00YmUxLWE3OTkt
ZGYzNzk2YjM0ODU2LzEvSWlLa2lraXVSZklOZTRPazZmUDBQOXNEcVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NmQwZWEtNDhhZC00YmUxLWE3OTktZGYzNzk2YjM0ODU2
LzEvSWlLa2lraXVSZklOZTRPazZmUDBQOXNEcVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4YnPBJO
AsWRWfinfcDisykTiya0XvcTxDlCvAnSibbEFxA4Qj4EBuVGoDGj8mrwbpqYZdX1
+fSiZ6UR03ebp7wxP3THaDge+lBZDjBOZpHN++CVL9LkTKfzsDJViCFkKsCLLNOP
tHRmust0Cvvnkqswn3NpOiGqd3AFNzPOhkDg+B3l89dJlBZ+klS+ejoMiHxUDH/k
4AK/NlKFgQTzqGRacf8Q6+9RpZPXzYiBjI/gj2GnWCHgJ+oGhLZFQhZNerdf1W9A
hhYGbvORPbPB5ylHiLd/b5a3nyR3zKnQQRHP3TX+MUWhYFYYNR8zQjNz2IhJ/J65
kuSO6oZMYiKu2A==
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:17:40 2026 by rpki-client