Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
File: IkRK1QtOfbbWPJiQF9DlknSV52s.mft (raw, json)
Hash identifier: aOv3CwPQFUg1UQ4rPAmo+/M0UrznjsoRoYPlllVsJ+E=
Subject key identifier: 59:18:9E:83:E9:8D:8A:DC:5C:1D:14:F0:BE:43:25:FA:51:04:6E:86
Authority key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
Certificate issuer: /CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Certificate serial: 01A03AF07C0A5663AB63932FB9F0E4A2C276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
Manifest number: 0278
Signing time: Tue 25 Aug 2026 22:00:33 +0000
Manifest this update: Tue 25 Aug 2026 22:00:33 +0000
Manifest next update: Wed 26 Aug 2026 22:00:33 +0000
Files and hashes: 1: 0UJ55DUEjeibc7wTso1_f6VUnhc.asa (hash: FH/6k5/NmJrDnuK/OxObcfgW++VOBxemcPQj9UKf598=)
2: IkRK1QtOfbbWPJiQF9DlknSV52s.crl (hash: sa1IR0jKHHSvEK29WxGo2KAEWiPFTrkAn3y14MePWSc=)
3: psWf16-euXoZZyipKgg4GGHcKWo.roa (hash: 9Dq5TbddVkCgvKuTdX4uUTRcMjOGR2syGrgqitoMwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:f0:7c:0a:56:63:ab:63:93:2f:b9:f0:e4:a2:c2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Validity
Not Before: Aug 25 22:00:33 2026 GMT
Not After : Aug 26 22:00:33 2026 GMT
Subject: CN=59189e83e98d8adc5c1d14f0be4325fa51046e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:09:16:b7:ab:8a:d2:a6:d4:b4:f1:eb:cc:
42:af:8e:7f:03:60:a8:b1:c3:91:4d:5e:5a:de:c2:
a5:3f:4a:8b:f0:96:c0:59:6d:ef:64:74:6a:9b:aa:
f6:8b:5c:4f:a4:cc:c4:62:78:90:1a:51:fd:ce:3c:
30:4f:a6:15:05:7b:0c:f4:66:66:84:b6:9b:a3:71:
e5:95:2d:8c:fd:b8:98:5b:6c:d9:fd:0e:66:d4:dd:
e6:f1:cd:83:66:26:b2:92:af:a4:35:69:78:d1:c0:
53:e3:ea:d5:dd:04:ed:d6:52:b9:d9:d3:8f:fb:2f:
03:c9:62:61:1b:c9:69:c8:c6:15:81:b5:41:73:93:
0f:bb:e4:a4:39:3d:38:4b:40:88:bd:68:6c:ac:4d:
58:d3:19:33:a0:8a:e9:dd:da:25:5e:bf:35:ea:8a:
e3:90:18:7a:51:d4:fe:09:bb:f0:f9:0b:77:c9:5f:
bf:16:e0:f8:41:5d:7b:b1:e9:cb:af:64:bc:1d:91:
62:c6:bd:51:d6:a0:43:9b:66:8b:09:23:29:06:dd:
23:cc:5e:e5:6b:f8:e1:24:03:f1:56:82:d0:cd:7f:
9e:48:22:6a:54:f1:f1:ed:9f:cd:e1:e6:41:69:12:
fe:d6:91:fb:0f:f9:61:fa:5d:bb:56:96:4e:81:4c:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:9E:83:E9:8D:8A:DC:5C:1D:14:F0:BE:43:25:FA:51:04:6E:86
X509v3 Authority Key Identifier:
keyid:22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f3:33:ec:e5:27:60:d7:90:6f:8f:85:f5:40:66:42:be:15:
75:30:8a:f5:12:ec:bb:68:e1:ab:db:61:d2:f5:db:73:9a:f8:
12:b4:7b:2f:8a:c6:b1:3d:b8:1d:17:d4:28:e9:b3:63:c3:cb:
36:e6:ab:45:fc:78:f1:0c:c9:7a:2b:09:fe:84:85:5b:cf:16:
6e:ba:3e:f0:d7:b1:76:c0:f3:e9:e4:eb:53:49:bb:41:8f:43:
bc:2a:f4:be:91:04:cf:cf:ab:29:19:ca:06:fe:5a:a6:26:cd:
8e:71:6c:9f:46:3e:b9:f6:75:13:9f:2b:bf:9b:97:45:ba:b8:
5d:cb:89:82:8b:1c:8e:42:03:b4:ab:a6:a1:d0:8d:d6:c0:2a:
14:aa:42:f4:c2:cd:e4:47:b7:37:39:c9:6a:c7:37:f4:48:75:
5a:53:5f:1a:80:04:53:1e:03:7c:73:e9:48:83:fe:c7:2a:b4:
41:a3:d7:73:c3:3f:77:15:f7:d8:c9:5c:d6:f9:ef:c0:52:2e:
35:ed:88:8f:de:4d:70:e1:f4:ff:a9:51:4c:17:6b:24:f2:54:
5e:bc:12:dd:2a:4a:ed:98:36:a9:e4:b7:3b:f5:c4:37:55:7d:
74:d1:de:b8:8f:86:97:0d:45:d2:2a:04:82:e6:22:25:6c:8d:
a7:78:25:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:39:50 2026 by rpki-client