Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: R3AV49LaCcEbv9Vqya29QshyRL/qy5D1H/Um/2FHSdM=
Subject key identifier: C4:55:53:71:5D:8C:A7:5D:7E:16:78:66:D5:C0:EB:5E:E1:B9:93:A4
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019E91387BD3554FF79A24530501425048B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0FAF
Signing time: Thu 04 Jun 2026 06:00:58 +0000
Manifest this update: Thu 04 Jun 2026 06:00:58 +0000
Manifest next update: Fri 05 Jun 2026 06:00:58 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: HS8VM9u8DgrABNtFDZw8F803AFXyZzpxq+R84FFlF7g=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:38:7b:d3:55:4f:f7:9a:24:53:05:01:42:50:48:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Jun 4 06:00:58 2026 GMT
Not After : Jun 5 06:00:58 2026 GMT
Subject: CN=c45553715d8ca75d7e167866d5c0eb5ee1b993a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:32:5a:94:cd:ee:65:6d:44:63:7a:b7:53:
d1:f2:32:e8:c3:e0:7f:bb:45:7a:fa:de:00:c7:0b:
50:f7:5a:1b:26:eb:39:bf:0a:8d:96:79:5c:13:21:
b9:1f:15:b2:ba:00:ed:f8:0f:d3:18:a0:9e:e7:4c:
96:23:21:e9:fa:52:58:d1:7e:c9:a6:14:a0:59:21:
f4:17:03:16:38:e2:2d:6c:3d:58:e3:da:78:aa:cc:
3f:d0:f9:09:00:09:06:f4:81:33:05:7e:34:b3:2f:
f2:c6:ec:10:aa:ae:e3:b8:6f:dd:7d:18:86:37:86:
3c:70:6c:10:14:4a:f8:f6:76:0f:18:4b:84:ef:b8:
e1:9b:78:48:1c:ae:e0:f8:ae:a0:0c:5b:55:6a:37:
1f:cb:04:98:09:0e:e8:c3:2a:10:dd:ca:e5:39:42:
0e:5d:bd:50:94:9b:af:2f:25:f9:fc:9c:05:91:b7:
86:f2:77:30:fd:93:e4:72:04:e2:70:4c:7d:d0:a0:
b9:2e:2f:a6:da:85:21:7c:2f:85:a1:6c:80:26:55:
62:10:36:74:22:28:ce:94:09:6a:74:6e:28:e4:00:
8c:25:b6:7d:75:8d:01:0b:3a:1e:ec:e7:c1:6d:ec:
4a:f6:dc:df:92:dd:ac:b7:53:4a:26:d7:05:f6:ca:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:53:71:5D:8C:A7:5D:7E:16:78:66:D5:C0:EB:5E:E1:B9:93:A4
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:17:d6:32:4c:87:57:2b:5b:85:cf:4a:5c:43:f0:f0:af:14:
27:87:93:d5:d6:83:23:92:9a:b4:e5:06:e3:c8:9b:32:b8:d2:
49:2d:68:3b:c5:96:10:b0:25:98:f2:f6:ac:9c:36:8d:73:9a:
5f:29:38:8c:66:46:53:a4:41:99:f9:62:7e:26:cc:ff:02:84:
9a:cb:2a:18:53:41:aa:30:6c:68:c1:ab:8b:86:fb:c3:20:e1:
21:de:8c:81:10:cc:38:53:56:7c:08:71:50:f4:81:89:58:1a:
0e:f6:1f:f7:b5:46:98:29:66:aa:d7:d9:4a:3e:ac:c2:03:02:
e4:ce:ca:49:48:10:de:00:88:ea:5c:c4:08:64:cd:31:7f:d0:
6f:7f:39:71:13:e8:53:88:2d:b3:c1:55:0b:27:33:17:cd:32:
b8:e8:10:cb:21:2d:db:b5:37:66:a7:79:8b:d4:b0:6a:aa:09:
78:12:bf:b8:ae:71:b8:49:b1:91:55:81:8a:88:0f:28:7c:e3:
7c:a2:ce:44:1d:5c:69:89:a2:0b:ec:0d:65:d1:67:03:b3:b5:
4d:a7:3d:27:90:a9:02:00:f7:bc:70:64:be:73:3b:49:bd:fd:
ac:3e:9b:ec:65:83:0b:be:6a:59:fe:d9:6c:ee:61:16:0a:29:
d2:b5:f3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:23 2026 by rpki-client