Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: vLjSM9W61I9vLmu5ytKmXGiGMaxqNaz2/SEMirpofyA=
Subject key identifier: 34:4F:E6:4E:E9:33:1A:57:35:F9:07:1F:ED:7D:E4:C8:EB:7F:77:A8
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 01A08B313DDF72E297C8960A0A948DA7EC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 10B5
Signing time: Thu 10 Sep 2026 12:00:55 +0000
Manifest this update: Thu 10 Sep 2026 12:00:55 +0000
Manifest next update: Fri 11 Sep 2026 12:00:55 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: BJW8l8IpxkTAR417lNiYDwbqm1OQGbkoDQncXBnKICw=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:3d:df:72:e2:97:c8:96:0a:0a:94:8d:a7:ec:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Sep 10 12:00:55 2026 GMT
Not After : Sep 11 12:00:55 2026 GMT
Subject: CN=344fe64ee9331a5735f9071fed7de4c8eb7f77a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:85:81:d6:29:1e:b7:40:09:7a:03:67:af:
73:4a:00:a9:d1:44:63:d8:fc:be:e3:be:c1:6f:87:
2a:54:30:2a:f2:5b:ab:c7:ab:7a:9f:ad:bb:4c:42:
cb:ca:6e:fe:d2:28:93:1f:47:28:78:3c:c2:97:02:
cf:0a:77:68:1d:47:71:43:b1:85:02:b2:1d:42:bf:
0c:0d:c5:ba:cf:a7:b3:74:6f:20:72:33:aa:23:4b:
0e:7e:62:e7:4a:2b:a1:71:d4:db:6e:30:82:c7:c1:
d5:fb:d1:98:9c:9f:63:6c:ce:81:fe:0e:b6:59:29:
19:f3:87:ea:2e:af:2b:49:75:0c:db:f8:b1:7f:b8:
ba:a5:bb:20:fa:9f:b6:e0:bd:00:09:7d:04:5d:c4:
1c:34:22:fc:47:5d:81:12:31:bf:6e:2d:22:31:70:
2d:c1:23:9a:03:10:e4:69:e4:68:22:79:67:55:af:
97:eb:b0:23:5d:86:e6:c3:0f:25:81:c7:8d:61:09:
96:f7:41:83:8b:1c:5c:ae:e6:20:27:45:1e:e3:e2:
f1:50:9c:e4:01:9c:aa:5a:b5:86:2c:01:d5:96:0f:
c1:98:90:3a:5b:05:35:d6:de:f1:a7:99:84:98:4e:
60:e9:ae:c7:8b:51:43:d6:3a:f3:d5:7f:a2:80:23:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:E6:4E:E9:33:1A:57:35:F9:07:1F:ED:7D:E4:C8:EB:7F:77:A8
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:28:8a:13:96:db:94:5f:37:cf:f2:94:33:03:0a:06:78:3c:
4a:f5:a6:42:43:8a:f2:61:7f:bf:bf:7a:ac:bc:a8:81:c5:19:
01:07:fa:2d:51:e6:ab:45:7e:55:1f:ea:c7:4b:ad:df:e1:f9:
db:f1:29:48:b5:ac:e9:a8:65:65:5a:68:18:45:74:68:1a:0a:
a7:3b:bb:9b:61:4f:23:0a:f0:1d:4f:c7:4e:2b:f5:0f:fe:ff:
ec:5a:11:d7:f5:c4:d5:93:5d:92:4f:b9:90:c5:8d:08:d4:7a:
c8:25:91:f8:2c:0b:5b:4c:72:9b:92:b9:63:d8:ca:71:78:ff:
4d:c1:bd:31:56:44:84:c6:66:2e:c7:1c:03:ca:f6:99:04:65:
b7:3d:5d:d2:10:b7:5c:cb:06:e8:af:87:0e:61:96:b1:84:bc:
10:10:ea:89:1f:76:60:5e:8e:8d:90:52:db:71:64:da:d8:98:
fd:24:49:6b:6c:52:86:08:4b:ee:20:d0:e6:36:e1:2e:f1:2d:
cc:33:03:48:50:09:65:8e:31:45:f3:4a:b5:04:a3:58:47:91:
12:90:91:28:bd:4d:af:01:a5:32:38:d7:af:26:1a:83:5a:0f:
86:d3:7a:3a:2b:78:f2:53:c0:62:14:be:db:97:a9:09:8d:b0:
ac:de:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:47 2026 by rpki-client