Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
File: IkRK1QtOfbbWPJiQF9DlknSV52s.mft (raw, json)
Hash identifier: sLQfv6bUf+oBaKF/FsVXhj6COL+I+Z2tU3bt9zA/Q3M=
Subject key identifier: EF:E4:5E:F1:9E:68:44:14:FA:2D:FA:7E:A9:FE:FB:EB:02:D5:97:82
Authority key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
Certificate issuer: /CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Certificate serial: 019F11896870C2E845CFEB73EE0757427789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
Manifest number: 01DE
Signing time: Mon 29 Jun 2026 04:00:45 +0000
Manifest this update: Mon 29 Jun 2026 04:00:45 +0000
Manifest next update: Tue 30 Jun 2026 04:00:45 +0000
Files and hashes: 1: 0UJ55DUEjeibc7wTso1_f6VUnhc.asa (hash: FH/6k5/NmJrDnuK/OxObcfgW++VOBxemcPQj9UKf598=)
2: IkRK1QtOfbbWPJiQF9DlknSV52s.crl (hash: nGmkEBo1Wc9ehr2VdkOPsjlq0cYiHRs5MSQ+YTH/76c=)
3: psWf16-euXoZZyipKgg4GGHcKWo.roa (hash: 9Dq5TbddVkCgvKuTdX4uUTRcMjOGR2syGrgqitoMwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:68:70:c2:e8:45:cf:eb:73:ee:07:57:42:77:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Validity
Not Before: Jun 29 04:00:45 2026 GMT
Not After : Jun 30 04:00:45 2026 GMT
Subject: CN=efe45ef19e684414fa2dfa7ea9fefbeb02d59782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:2a:70:37:84:f7:a6:9a:b4:d9:5a:36:95:
40:27:1b:02:0a:4a:71:85:96:7f:ea:c5:ef:24:17:
c2:dc:e9:b4:79:30:37:63:9b:35:15:c1:85:2f:2b:
e7:50:96:8f:57:5e:e2:33:80:d1:bc:df:1f:68:9f:
e5:02:7a:ed:e6:7f:e3:f3:ca:b8:97:0f:d1:7f:b9:
08:2a:bb:2b:aa:77:48:9a:e1:35:eb:b7:ff:8d:b0:
aa:68:35:8c:9d:98:af:78:8e:d8:14:28:4d:f2:05:
af:05:6d:bb:bb:97:1e:f9:26:9b:2f:ba:42:1e:46:
d8:e3:b6:83:10:4f:3f:5d:03:9c:cb:45:e5:e9:2a:
8b:1a:51:cb:f1:8d:ef:0a:72:a8:bf:cc:5f:cb:7a:
b6:1a:4b:c9:44:d7:02:3f:a1:8e:0c:4e:2b:5c:c5:
b8:64:dc:c8:db:55:5a:cd:9a:06:40:d9:11:c2:ff:
97:2a:5c:ea:8f:da:7e:2e:9a:d4:4b:7e:99:13:f6:
a9:22:e7:5e:4a:73:e4:dc:98:69:f4:8e:d8:36:e7:
9d:2e:4e:c1:30:da:da:73:6b:c9:1f:46:80:68:98:
87:33:2d:10:3f:6c:71:40:32:5a:02:36:65:d7:64:
85:23:88:86:be:a9:bd:6e:43:7b:64:95:85:76:0e:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E4:5E:F1:9E:68:44:14:FA:2D:FA:7E:A9:FE:FB:EB:02:D5:97:82
X509v3 Authority Key Identifier:
keyid:22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:42:4a:79:ef:82:79:85:cc:c7:ed:6d:5e:78:90:7e:40:cd:
52:52:eb:f3:19:2f:95:41:c6:8d:f6:6d:e4:72:18:23:c2:fa:
64:fb:a1:b0:b4:11:5b:e1:4e:5a:4d:a4:5d:79:b0:ba:fa:d6:
5d:af:19:14:27:90:1a:07:00:fc:76:62:0c:e5:18:01:6c:ce:
fc:e7:cd:af:cc:b0:8f:b7:0c:55:cb:e3:42:15:06:8a:12:1a:
da:95:6a:5d:f4:8a:d0:75:86:ed:46:f7:6d:22:ff:97:6f:84:
ac:cd:5c:35:63:e7:98:65:ba:2a:02:c6:8d:e7:ad:21:e9:a5:
32:a0:c1:ba:17:56:f1:f2:0d:aa:03:31:68:98:d5:35:83:6d:
77:22:5f:f9:a8:ee:bc:21:12:e9:8d:fa:e4:ea:53:11:fd:32:
4c:3d:c6:bc:92:09:0f:8d:13:45:7a:f9:93:18:28:85:2a:58:
66:50:89:52:15:1b:d1:b6:bd:5d:61:01:a9:50:ec:ba:97:e4:
02:7b:ed:f7:0a:6c:ff:86:7d:c0:fb:46:ed:be:42:09:df:8c:
89:62:ee:80:79:85:89:98:6b:69:75:a3:80:8a:0c:da:b4:bc:
0e:ad:b1:01:3a:df:ea:c9:ae:ec:c8:9b:3a:1a:57:71:65:06:
96:ac:27:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RiWhwwuhFz+tz7gdXQneJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNDQ0YWQ1MGI0ZTdkYjZkNjNjOTg5MDE3ZDBlNTkyNzQ5
NWU3NmIwHhcNMjYwNjI5MDQwMDQ1WhcNMjYwNjMwMDQwMDQ1WjAzMTEwLwYDVQQD
EyhlZmU0NWVmMTllNjg0NDE0ZmEyZGZhN2VhOWZlZmJlYjAyZDU5NzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSAqcDeE96aatNlaNpVAJxsCCkpx
hZZ/6sXvJBfC3Om0eTA3Y5s1FcGFLyvnUJaPV17iM4DRvN8faJ/lAnrt5n/j88q4
lw/Rf7kIKrsrqndImuE167f/jbCqaDWMnZiveI7YFChN8gWvBW27u5ce+SabL7pC
HkbY47aDEE8/XQOcy0Xl6SqLGlHL8Y3vCnKov8xfy3q2GkvJRNcCP6GODE4rXMW4
ZNzI21VazZoGQNkRwv+XKlzqj9p+LprUS36ZE/apIudeSnPk3Jhp9I7YNuedLk7B
MNrac2vJH0aAaJiHMy0QP2xxQDJaAjZl12SFI4iGvqm9bkN7ZJWFdg6s2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/kXvGeaEQU+i36fqn+++sC1ZeCMB8GA1UdIwQY
MBaAFCJEStULTn221jyYkBfQ5ZJ0ledrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWtSSzFRdE9mYmJXUEppUUY5RGxrblNWNTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iNTY0NjMtNTllYS00OTRiLTg4MTYt
ZTAyMDIzZjEyMmU4LzEvSWtSSzFRdE9mYmJXUEppUUY5RGxrblNWNTJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iNTY0NjMtNTllYS00OTRiLTg4MTYtZTAyMDIzZjEyMmU4
LzEvSWtSSzFRdE9mYmJXUEppUUY5RGxrblNWNTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEJKee+C
eYXMx+1tXniQfkDNUlLr8xkvlUHGjfZt5HIYI8L6ZPuhsLQRW+FOWk2kXXmwuvrW
Xa8ZFCeQGgcA/HZiDOUYAWzO/OfNr8ywj7cMVcvjQhUGihIa2pVqXfSK0HWG7Ub3
bSL/l2+ErM1cNWPnmGW6KgLGjeetIemlMqDBuhdW8fINqgMxaJjVNYNtdyJf+aju
vCES6Y365OpTEf0yTD3GvJIJD40TRXr5kxgohSpYZlCJUhUb0ba9XWEBqVDsupfk
Anvt9wps/4Z9wPtG7b5CCd+MiWLugHmFiZhraXWjgIoM2rS8Dq2xATrf6smu7Mib
OhpXcWUGlqwn5A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:10 2026 by rpki-client