Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: LCP3etD6lKbQxQ+h4RCwRDJC1AVjmk3wfxEd5t+wGaQ=
Subject key identifier: 73:DA:68:2F:93:E4:08:08:D4:C8:6E:24:C8:C5:FF:AE:44:23:03:61
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 01A1882D4A1622D2AE87E51C038FB6A4562C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 1138
Signing time: Thu 29 Oct 2026 15:00:31 +0000
Manifest this update: Thu 29 Oct 2026 15:00:31 +0000
Manifest next update: Fri 30 Oct 2026 15:00:31 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: 1KrPUBAbOYhrG2etbMf0S3Z5PUw5C6ijVGknsJliruA=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:2d:4a:16:22:d2:ae:87:e5:1c:03:8f:b6:a4:56:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Oct 29 15:00:31 2026 GMT
Not After : Oct 30 15:00:31 2026 GMT
Subject: CN=73da682f93e40808d4c86e24c8c5ffae44230361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:34:84:3f:7d:10:b8:2e:0a:60:ca:41:be:
66:97:5c:df:e2:1d:0f:39:a8:0b:99:35:aa:39:b8:
4a:ae:ee:b2:3c:3c:fb:1d:3c:ef:6a:5c:f4:d6:68:
d7:f6:bd:34:21:f3:e0:60:9e:bf:9b:1d:ca:d0:b9:
b8:0d:94:26:6f:62:8e:41:79:22:00:59:b9:3a:16:
96:5c:83:29:e6:ef:78:0f:6d:12:79:54:5d:7d:5b:
96:c1:72:b3:8f:ed:30:6e:5c:fd:ff:9f:41:f6:9a:
4f:96:b5:8b:b4:bf:0d:29:54:68:75:09:27:17:ab:
84:ff:5f:94:f9:3a:74:08:63:a4:1d:c6:c5:42:77:
56:ab:71:7a:95:8e:12:9f:f7:aa:e9:b4:88:3c:43:
2b:9f:42:f3:28:ad:2c:b2:07:b0:d3:f4:57:3d:5f:
ca:32:3c:fb:da:ce:e3:25:12:a3:b9:48:8e:1a:2c:
6b:4f:ec:4c:79:53:59:57:07:19:3a:09:7f:f7:93:
f6:d2:7b:95:7c:86:22:be:8e:2a:87:13:51:41:1c:
73:68:bb:fc:44:3c:65:db:ae:fd:99:96:7a:a0:a9:
21:d4:df:ce:5f:39:b7:53:c4:4f:a4:4c:8c:88:53:
8c:2b:e8:75:e2:fe:52:9f:08:09:fa:78:2d:58:44:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:68:2F:93:E4:08:08:D4:C8:6E:24:C8:C5:FF:AE:44:23:03:61
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:78:ee:30:6d:58:ba:85:3a:c3:23:76:a7:09:94:c3:55:25:
1e:2c:31:96:bf:18:3c:25:7b:d5:fe:e4:dd:20:9b:90:2b:66:
d5:2f:94:37:91:f5:19:4d:bb:b9:bc:fb:53:44:fe:63:14:a6:
93:5d:f0:7a:da:eb:67:e1:31:1b:fb:fe:4f:f8:82:90:fa:11:
74:53:26:8e:aa:56:63:b8:60:d8:a5:67:da:1c:8c:10:86:71:
7d:07:c8:90:f8:31:d4:30:60:c3:cf:19:9a:44:02:dd:ff:c5:
1c:47:87:75:ad:76:4c:05:36:d8:09:ff:de:0a:8c:ac:c8:ae:
6c:83:ee:5c:d2:3f:82:21:15:7c:75:38:27:5a:99:f0:42:aa:
f7:00:6f:64:15:28:c8:c5:60:7f:0e:c9:2e:0a:8d:9b:f5:dc:
3e:1b:a9:b9:38:ab:e1:e9:31:ff:6f:89:8f:10:57:9f:63:3f:
72:f9:ac:28:8a:47:ca:70:8a:e9:88:dd:89:2d:ec:4e:79:21:
3f:01:b1:f8:db:5f:95:dc:60:56:45:50:51:08:b0:81:ee:ac:
39:bf:7e:32:6a:84:30:5b:2c:6b:1f:4c:00:d4:46:4a:f4:30:
9f:ca:11:82:1c:d2:cc:d7:ed:ab:8f:c1:53:09:05:7c:a5:fe:
ac:f7:77:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGILUoWItKuh+UcA4+2pFYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy
NGVkY2YwHhcNMjYxMDI5MTUwMDMxWhcNMjYxMDMwMTUwMDMxWjAzMTEwLwYDVQQD
Eyg3M2RhNjgyZjkzZTQwODA4ZDRjODZlMjRjOGM1ZmZhZTQ0MjMwMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvg0hD99ELguCmDKQb5ml1zf4h0P
OagLmTWqObhKru6yPDz7HTzvalz01mjX9r00IfPgYJ6/mx3K0Lm4DZQmb2KOQXki
AFm5OhaWXIMp5u94D20SeVRdfVuWwXKzj+0wblz9/59B9ppPlrWLtL8NKVRodQkn
F6uE/1+U+Tp0CGOkHcbFQndWq3F6lY4Sn/eq6bSIPEMrn0LzKK0ssgew0/RXPV/K
Mjz72s7jJRKjuUiOGixrT+xMeVNZVwcZOgl/95P20nuVfIYivo4qhxNRQRxzaLv8
RDxl2679mZZ6oKkh1N/OXzm3U8RPpEyMiFOMK+h14v5SnwgJ+ngtWES2bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPaaC+T5AgI1MhuJMjF/65EIwNhMB8GA1UdIwQY
MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt
MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5
LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnjuMG1Y
uoU6wyN2pwmUw1UlHiwxlr8YPCV71f7k3SCbkCtm1S+UN5H1GU27ubz7U0T+YxSm
k13wetrrZ+ExG/v+T/iCkPoRdFMmjqpWY7hg2KVn2hyMEIZxfQfIkPgx1DBgw88Z
mkQC3f/FHEeHda12TAU22An/3gqMrMiubIPuXNI/giEVfHU4J1qZ8EKq9wBvZBUo
yMVgfw7JLgqNm/XcPhupuTir4ekx/2+JjxBXn2M/cvmsKIpHynCK6YjdiS3sTnkh
PwGx+NtfldxgVkVQUQiwge6sOb9+MmqEMFssax9MANRGSvQwn8oRghzSzNftq4/B
UwkFfKX+rPd30w==
-----END CERTIFICATE-----
Generated at Thu Oct 29 20:14:59 2026 by rpki-client