Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
File: IkRK1QtOfbbWPJiQF9DlknSV52s.mft (raw, json)
Hash identifier: CfSqJ+0JANvD5AFLce8XoYH9sFkd45qhw4MLdigEy70=
Subject key identifier: B2:B9:B5:53:61:82:CC:63:B2:A5:31:B5:E2:6B:68:CA:F2:00:C9:AB
Authority key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
Certificate issuer: /CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Certificate serial: 019D3866921E75626E0537037B784992D8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
Manifest number: E9
Signing time: Sun 29 Mar 2026 07:02:19 +0000
Manifest this update: Sun 29 Mar 2026 07:02:19 +0000
Manifest next update: Mon 30 Mar 2026 07:02:19 +0000
Files and hashes: 1: 0UJ55DUEjeibc7wTso1_f6VUnhc.asa (hash: FH/6k5/NmJrDnuK/OxObcfgW++VOBxemcPQj9UKf598=)
2: IkRK1QtOfbbWPJiQF9DlknSV52s.crl (hash: opEAt05JkMdMlYcSDyLk7L1h7QwR6e7FOcn1xXiM/dk=)
3: psWf16-euXoZZyipKgg4GGHcKWo.roa (hash: 9Dq5TbddVkCgvKuTdX4uUTRcMjOGR2syGrgqitoMwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:92:1e:75:62:6e:05:37:03:7b:78:49:92:d8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Validity
Not Before: Mar 29 07:02:19 2026 GMT
Not After : Mar 30 07:02:19 2026 GMT
Subject: CN=b2b9b5536182cc63b2a531b5e26b68caf200c9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0e:e0:59:4b:0e:00:ca:ba:04:d1:ca:e9:5a:
fc:64:43:74:bd:31:8d:32:79:69:e8:11:70:d6:39:
e6:89:90:31:3b:45:2b:8b:1a:a1:49:d7:ee:a5:ed:
9d:5b:9e:a0:23:d9:95:25:20:72:1c:3a:53:b0:80:
d5:88:22:04:29:aa:bc:54:0c:5e:1b:8c:af:97:d6:
ab:53:32:0e:8a:63:0b:a9:e2:ec:33:69:c7:d2:7b:
3b:42:28:68:7a:6f:43:68:58:e8:d2:f4:45:8a:e1:
a2:6c:90:84:69:fc:b5:32:cd:d4:ee:ba:b9:58:37:
02:d6:28:29:9d:b1:67:0e:a3:9c:86:d6:d7:5a:63:
a5:e5:52:b8:86:f6:0f:85:e0:80:0b:3e:e3:5f:66:
c4:d8:59:41:d2:19:23:f7:cc:ba:9c:d8:b7:51:2e:
d6:e9:c0:ff:70:cb:8c:b9:88:9e:e9:6d:59:1d:91:
9d:66:ba:5e:14:2f:e5:b2:c3:de:59:68:8e:91:17:
ff:e3:bc:f7:ed:52:5b:53:4b:8a:3b:f0:1e:88:01:
07:67:0f:e2:98:19:4e:63:fb:91:a7:31:b8:b0:f8:
1e:6e:75:5a:f9:94:38:51:f3:f3:a7:5f:24:30:85:
5a:93:9b:74:c5:63:c9:de:c4:33:7d:aa:c7:38:9a:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B9:B5:53:61:82:CC:63:B2:A5:31:B5:E2:6B:68:CA:F2:00:C9:AB
X509v3 Authority Key Identifier:
keyid:22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:61:61:ba:42:80:b0:e8:e1:01:59:78:9f:4b:ce:48:ec:
07:e3:0e:b2:f4:8d:ab:4a:92:51:25:b3:7d:23:83:33:1f:4d:
01:37:54:b3:45:b0:ac:67:3d:9d:91:e7:89:a0:8f:8f:a7:c4:
71:82:f9:10:29:3b:0c:9d:4a:ca:83:d5:13:49:cc:54:4a:ed:
91:f4:37:a7:5b:36:ae:26:f4:cd:5b:f7:31:37:30:41:49:7c:
78:28:77:2d:a6:09:1c:3e:72:0b:df:3e:71:44:ab:9b:6c:f6:
54:64:a7:f0:97:03:97:09:b5:e1:ed:7a:40:9e:67:d7:98:3f:
50:b0:61:c4:6c:23:76:f2:c3:e3:95:e8:cb:c6:24:03:1d:a3:
1d:73:bf:f0:d7:0d:c5:bd:af:9a:4d:e0:53:38:bc:65:ef:86:
df:88:6d:3f:b1:05:8f:d9:51:ca:71:34:5c:1d:70:cf:81:48:
f7:76:6d:54:0d:5c:c5:0c:e2:65:c9:ad:0b:a9:23:e4:0b:4f:
9a:f2:37:2c:a2:96:d8:8b:7f:71:ae:f2:c4:5e:43:7d:5f:c2:
7f:e7:47:d1:00:d8:47:9b:f3:4d:19:f9:9a:f1:93:c9:69:45:
10:32:c7:5e:36:04:b2:38:80:22:a2:3c:42:34:4c:1a:73:b6:
07:6b:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:28 2026 by rpki-client