Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: NGjapCBI78VM6+RvUmvyCyf7KgLIFmvlSZ9f4sLWgLs=
Subject key identifier: 53:69:35:43:58:AD:0E:74:48:0E:DE:DB:5F:41:8D:A6:A4:95:CF:3A
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019D397797569735A818BBD4FC2CE96D0B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0EFD
Signing time: Sun 29 Mar 2026 12:00:31 +0000
Manifest this update: Sun 29 Mar 2026 12:00:31 +0000
Manifest next update: Mon 30 Mar 2026 12:00:31 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: 632Wt1MISWrfUm5Yr23U7Ar4pm9gs5sJDmKFCjhHwaI=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:97:56:97:35:a8:18:bb:d4:fc:2c:e9:6d:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Mar 29 12:00:31 2026 GMT
Not After : Mar 30 12:00:31 2026 GMT
Subject: CN=5369354358ad0e74480ededb5f418da6a495cf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:b7:17:f9:b0:b2:67:43:89:91:fa:b0:9a:
65:59:dc:d6:55:e7:62:e3:b9:90:65:f6:07:1a:e7:
e2:93:1e:cd:cb:83:b6:fb:8a:d6:5f:4f:74:67:8c:
ee:78:47:a8:30:d3:93:7a:a5:64:ce:3a:02:e1:f6:
e8:46:2e:67:11:02:32:58:25:19:d5:70:c2:84:54:
4d:d9:f2:bc:b8:22:1f:ee:6a:01:32:da:4e:96:ba:
95:6f:c7:66:3b:8a:c1:22:ec:15:4c:74:52:cb:d9:
0f:b9:82:8a:4b:4c:11:cd:05:61:32:b9:ef:76:71:
aa:4b:7d:96:d6:d4:76:54:78:82:cb:7c:a8:ea:c9:
d9:84:fb:3c:95:c8:bf:d7:d6:c2:8d:b0:c9:c5:33:
9c:53:95:05:dc:ea:03:17:dc:c9:34:44:e1:aa:b0:
de:d8:44:42:b9:da:c9:06:71:94:cc:cf:3d:07:22:
f6:e5:71:40:cc:17:32:89:88:82:c3:2f:de:e1:08:
d1:31:a7:e3:dd:e5:e0:32:97:d1:0c:43:b5:54:40:
4c:89:63:45:5f:21:5d:47:db:66:c4:dd:03:bf:d7:
31:4e:fe:29:82:0f:94:b8:00:1d:7d:0c:e8:02:ee:
40:9b:8c:dd:43:e9:2c:ea:70:d3:66:6b:8a:be:ea:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:69:35:43:58:AD:0E:74:48:0E:DE:DB:5F:41:8D:A6:A4:95:CF:3A
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b2:96:47:33:8a:a6:4e:89:bb:dc:1f:9e:0b:fb:87:78:65:
0a:ca:52:65:7a:dd:6f:60:44:07:02:bd:09:65:fa:82:aa:67:
7c:57:55:e3:11:ed:10:53:05:b4:ba:d1:90:52:41:e2:cc:f5:
e9:3e:fc:2f:af:49:c7:63:55:cf:95:15:d1:5a:67:06:ff:93:
15:43:21:e8:41:59:a1:96:b1:a6:70:89:c8:fc:e5:29:61:f3:
c2:05:79:8b:e7:29:16:5f:1b:e4:9a:53:55:da:58:7d:8d:3e:
ec:e3:df:fb:a2:c7:a4:67:86:7d:ff:da:5e:8f:6a:bf:62:45:
c3:d8:98:d4:6a:74:59:1f:f0:8c:8c:27:39:cc:52:53:2f:01:
30:73:88:5b:2d:e7:49:30:7d:f7:bb:f2:ac:c3:9f:4b:4c:22:
9c:c6:a8:16:13:2c:27:f7:26:f9:c9:84:23:ce:8f:3e:8b:95:
32:76:03:8e:84:82:9d:6b:da:78:6f:86:bf:09:92:ce:42:d8:
e4:02:0d:39:b6:cb:93:2e:12:d9:d1:f6:ba:b8:e7:fa:a8:65:
80:65:b0:0b:e9:d9:0f:6d:b5:84:19:2c:1c:1c:3b:51:95:69:
a4:c5:52:15:38:7e:a6:55:94:5d:2f:1a:2f:47:1e:75:b0:cf:
2c:82:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:06:02 2026 by rpki-client