Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
File: ikAMEXs2e5IxswUvpRV8OaXgxJs.mft (raw, json)
Hash identifier: fY7Svt9O5Xp1szwomy9FPyFpVS716w9eLEeJBlRQ75Y=
Subject key identifier: 3F:AB:F2:56:17:37:D2:9A:85:48:E6:7B:05:46:27:DE:5E:B8:34:F4
Authority key identifier: 8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
Certificate issuer: /CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Certificate serial: 019D3789BF8B319B23E5430BD30FACF0FAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
Manifest number: 0112
Signing time: Sun 29 Mar 2026 03:01:07 +0000
Manifest this update: Sun 29 Mar 2026 03:01:07 +0000
Manifest next update: Mon 30 Mar 2026 03:01:07 +0000
Files and hashes: 1: ikAMEXs2e5IxswUvpRV8OaXgxJs.crl (hash: TJ4+aRT2nFRuqZ+A/gIdOQri4MepJTPKwytIVlP6gcI=)
2: x9WwTsf6oq2Wm1sx344wAY3kFgk.roa (hash: HTpECY59VY6PDNF6YftRP3Eef57aiba0Z1IIXlvm9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:bf:8b:31:9b:23:e5:43:0b:d3:0f:ac:f0:fa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Validity
Not Before: Mar 29 03:01:07 2026 GMT
Not After : Mar 30 03:01:07 2026 GMT
Subject: CN=3fabf2561737d29a8548e67b054627de5eb834f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:95:8f:16:17:f4:85:a9:a6:4e:11:a3:59:
ec:d1:c8:a9:bb:e0:66:b5:58:c6:75:77:ad:5e:8e:
fc:0a:3f:dd:3f:9a:08:f7:81:64:04:e0:56:68:6e:
25:2c:c2:e7:a7:03:5b:36:6d:2e:bc:4a:b8:c0:7b:
fc:01:85:f6:d4:da:38:b3:01:d2:30:ef:72:f9:b5:
6c:f4:eb:dc:c6:3c:ff:d1:66:53:50:78:f4:29:ef:
51:bb:09:e0:dc:3b:99:47:ed:32:85:4c:8a:82:76:
2d:a9:f6:ad:fe:d7:b8:a2:f6:22:46:b8:e2:01:8f:
83:a1:22:c6:5c:4a:d7:c8:61:8f:23:74:ee:67:23:
60:f7:61:2e:9b:a1:7c:76:2e:03:dd:1a:e3:70:93:
0e:a2:09:d3:40:23:29:35:45:ae:3a:74:a9:73:bd:
13:75:24:9c:73:de:09:dc:30:68:2d:f5:72:a2:a6:
de:b6:cc:96:ac:12:41:90:ae:f1:1a:90:71:5c:f0:
cb:b0:b0:0d:68:dd:25:2b:cb:07:0d:1e:dc:07:0d:
26:ca:b0:a3:44:3d:b1:7f:6f:ce:24:63:45:cd:84:
08:94:9e:b1:c8:23:91:bb:30:ee:15:e3:1b:69:51:
1c:a8:12:64:2a:bb:77:35:9c:9f:fe:2a:74:01:1e:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AB:F2:56:17:37:D2:9A:85:48:E6:7B:05:46:27:DE:5E:B8:34:F4
X509v3 Authority Key Identifier:
keyid:8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b2:c8:3c:63:3f:65:fc:73:c2:41:ac:dc:75:91:cd:94:ab:
2b:d5:14:ce:4c:a2:07:5a:81:97:6b:98:92:d2:4e:b5:41:fd:
e9:12:de:7f:81:06:0f:1e:18:28:58:d3:83:15:5f:55:3d:b5:
aa:7d:3d:cc:89:d1:36:10:86:f0:0a:c2:64:69:02:8b:bd:3d:
dc:20:dd:de:30:d0:c3:8c:5f:4f:d2:4e:93:fa:58:7a:a5:f3:
50:3c:1d:43:1f:08:a5:ae:9d:4e:33:6d:aa:11:17:11:b3:f6:
72:79:f0:cb:68:fa:31:0a:e5:60:89:d4:3d:d4:1c:33:0c:98:
10:3e:9f:3b:b2:60:71:0d:ec:39:01:37:a8:bb:a6:67:65:b7:
3e:bb:71:6b:ee:77:77:5f:22:d9:5a:7c:7b:db:b7:04:6a:3a:
5d:c8:1e:e7:a0:b7:89:6a:9a:a8:a3:8c:e7:70:6c:ca:5f:91:
5f:6e:be:7d:3d:a9:c3:10:5e:c2:12:f1:c6:32:36:7e:0c:71:
44:65:ff:18:86:af:4c:93:99:8f:8f:66:1e:4d:85:c2:41:60:
ea:1d:b9:34:95:ef:4d:92:41:2b:10:2b:ae:02:6f:9e:86:77:
68:ac:84:ba:f1:33:e7:22:38:3d:f0:15:2d:86:f6:d8:5d:38:
22:a2:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:00 2026 by rpki-client