Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
File: ikAMEXs2e5IxswUvpRV8OaXgxJs.mft (raw, json)
Hash identifier: ucUuO2QI7uXNnyTTeGBNMHm53C+2rRrADg+fHIYcB/E=
Subject key identifier: A1:EE:8A:31:9D:10:D6:E9:97:AD:34:6B:1D:8B:7F:5A:9E:7F:68:85
Authority key identifier: 8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
Certificate issuer: /CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Certificate serial: 01A0F00BD7B66074499A245CAEAE8D0A9414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
Manifest number: 0300
Signing time: Wed 30 Sep 2026 02:01:42 +0000
Manifest this update: Wed 30 Sep 2026 02:01:42 +0000
Manifest next update: Thu 01 Oct 2026 02:01:42 +0000
Files and hashes: 1: 7l8rYrP6IdaEJaaqwY0VbkiMENU.asa (hash: 9FhE+V62Snn3q2qvvthgQiUIfihNch/hed3BR1KfHyA=)
2: ikAMEXs2e5IxswUvpRV8OaXgxJs.crl (hash: SYv2pv2fx7myErIJFk8IAxa6UZkqkhKyQjnMomSErkY=)
3: x9WwTsf6oq2Wm1sx344wAY3kFgk.roa (hash: HTpECY59VY6PDNF6YftRP3Eef57aiba0Z1IIXlvm9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0b:d7:b6:60:74:49:9a:24:5c:ae:ae:8d:0a:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Validity
Not Before: Sep 30 02:01:42 2026 GMT
Not After : Oct 1 02:01:42 2026 GMT
Subject: CN=a1ee8a319d10d6e997ad346b1d8b7f5a9e7f6885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:5a:da:45:6d:83:a3:25:d3:e7:a2:50:4d:
c9:9d:53:2d:cd:22:4e:bb:77:76:2c:d8:2c:b7:a5:
86:8f:f9:74:a6:28:7b:ac:ec:dd:af:57:57:09:06:
5a:de:45:58:bf:e3:db:0b:ea:f9:4e:11:6c:28:3f:
79:37:52:f4:16:eb:8f:ec:da:ed:32:51:84:80:df:
23:54:9d:af:a9:34:85:21:75:db:6f:4a:b0:31:34:
2a:2c:d3:c1:d7:2c:42:00:55:fc:3c:5b:ac:6f:67:
bb:2d:ca:30:a0:aa:e0:8c:b8:43:94:ab:2b:d4:dc:
09:22:2f:24:b2:03:d4:e7:3f:70:d2:67:47:2e:90:
96:92:ae:f1:2d:4d:30:ab:a9:49:ef:55:0c:98:df:
0e:0e:19:51:de:40:e8:77:fa:2b:db:b3:f5:cf:47:
c0:94:ec:38:a4:cb:a7:90:12:a9:40:45:d6:35:b3:
60:35:4c:e3:f4:29:14:12:8f:11:fc:58:d1:e9:bf:
95:d5:19:9d:9d:bb:e4:78:4f:0b:02:af:94:00:f7:
0a:8a:3a:ba:8b:68:2f:55:05:1f:b4:d0:70:0c:12:
1f:28:37:0d:5d:0e:1d:75:26:c0:75:50:f3:6b:42:
f8:1a:25:10:5d:45:3a:b2:1c:a3:ee:e7:61:f4:51:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EE:8A:31:9D:10:D6:E9:97:AD:34:6B:1D:8B:7F:5A:9E:7F:68:85
X509v3 Authority Key Identifier:
keyid:8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:dc:b6:6c:7b:09:15:91:1b:66:a5:31:59:9b:bd:fe:23:
ee:3e:38:4a:72:99:36:27:e5:1e:ca:b9:1a:af:cd:a6:b8:2b:
96:b0:33:e5:c0:a0:80:58:f0:0f:0f:ba:8c:04:5e:f2:d9:bc:
22:15:c4:b9:fd:12:cc:7c:0f:b8:f1:0e:62:b5:a2:c0:2a:29:
1d:59:61:f4:05:14:9b:03:e0:08:94:04:05:0c:2a:a8:be:1a:
47:5f:a4:9b:1a:e8:a9:54:32:d5:7e:6c:5a:7a:23:65:3f:6d:
e1:32:e8:e3:e9:87:f2:9b:b1:09:76:f7:30:87:2f:91:e9:43:
39:ad:50:8d:1d:ae:1d:b5:f4:77:04:04:3c:0f:89:c7:8c:d8:
7e:71:98:29:bd:60:cd:df:a0:ea:88:b3:af:2b:be:b9:96:f0:
91:a7:88:ac:c9:de:11:88:ea:4c:7a:8b:1f:3b:37:c4:7c:ea:
06:13:e4:fc:6a:5b:5c:69:42:4e:69:88:92:71:42:73:23:a7:
30:e6:a1:1c:44:41:ee:1a:bf:d2:02:c6:66:46:81:29:06:b6:
b3:82:89:3b:e5:95:5f:9c:aa:f0:6f:7c:fe:4c:64:f9:63:22:
08:86:53:a2:5f:3d:8d:d8:33:24:f6:cc:2f:79:4b:02:9c:a4:
b1:11:e4:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDwC9e2YHRJmiRcrq6NCpQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDAwYzExN2IzNjdiOTIzMWIzMDUyZmE1MTU3YzM5YTVl
MGM0OWIwHhcNMjYwOTMwMDIwMTQyWhcNMjYxMDAxMDIwMTQyWjAzMTEwLwYDVQQD
EyhhMWVlOGEzMTlkMTBkNmU5OTdhZDM0NmIxZDhiN2Y1YTllN2Y2ODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovda2kVtg6Ml0+eiUE3JnVMtzSJO
u3d2LNgst6WGj/l0pih7rOzdr1dXCQZa3kVYv+PbC+r5ThFsKD95N1L0FuuP7Nrt
MlGEgN8jVJ2vqTSFIXXbb0qwMTQqLNPB1yxCAFX8PFusb2e7LcowoKrgjLhDlKsr
1NwJIi8ksgPU5z9w0mdHLpCWkq7xLU0wq6lJ71UMmN8ODhlR3kDod/or27P1z0fA
lOw4pMunkBKpQEXWNbNgNUzj9CkUEo8R/FjR6b+V1RmdnbvkeE8LAq+UAPcKijq6
i2gvVQUftNBwDBIfKDcNXQ4ddSbAdVDza0L4GiUQXUU6shyj7udh9FHQCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHuijGdENbpl600ax2Lf1qef2iFMB8GA1UdIwQY
MBaAFIpADBF7NnuSMbMFL6UVfDml4MSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtBTUVYczJlNUl4c3dVdnBSVjhPYVhneEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83NTg2ZGItNWQ2MS00NzhkLWE0Yjgt
NmFlMzI1NDQzMmIzLzEvaWtBTUVYczJlNUl4c3dVdnBSVjhPYVhneEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi83NTg2ZGItNWQ2MS00NzhkLWE0YjgtNmFlMzI1NDQzMmIz
LzEvaWtBTUVYczJlNUl4c3dVdnBSVjhPYVhneEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlPctmx7
CRWRG2alMVmbvf4j7j44SnKZNiflHsq5Gq/NprgrlrAz5cCggFjwDw+6jARe8tm8
IhXEuf0SzHwPuPEOYrWiwCopHVlh9AUUmwPgCJQEBQwqqL4aR1+kmxroqVQy1X5s
WnojZT9t4TLo4+mH8puxCXb3MIcvkelDOa1QjR2uHbX0dwQEPA+Jx4zYfnGYKb1g
zd+g6oizryu+uZbwkaeIrMneEYjqTHqLHzs3xHzqBhPk/GpbXGlCTmmIknFCcyOn
MOahHERB7hq/0gLGZkaBKQa2s4KJO+WVX5yq8G98/kxk+WMiCIZTol89jdgzJPbM
L3lLApyksRHkIg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 11:25:08 2026 by rpki-client