Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
File: IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json)
Hash identifier: ar2qafbE0nS9sHxXLCNd/tf4AFJq53a8cA3G4OYrIE8=
Subject key identifier: 86:62:09:B0:3F:87:BA:B6:FF:63:2D:EB:5B:09:F5:8E:1B:39:42:27
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 01A117BD2D62C2E2E1A32123929DA1EE077E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
Manifest number: 1AC5
Signing time: Wed 07 Oct 2026 19:00:36 +0000
Manifest this update: Wed 07 Oct 2026 19:00:36 +0000
Manifest next update: Thu 08 Oct 2026 19:00:36 +0000
Files and hashes: 1: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: vyifvPflNbbQjiumY2ZiTPqe4GtmZ6Mf6fcZ5gEG3/Y=)
2: QiXcXG4EDIRSf-VSNpu4RHBWAV4.roa (hash: 0qXAcwhMmlvzkuMEiWShTeGZUNL6+ryDi7ehHbJ1xl8=)
3: Tar1g33LvZCdpcq_JVPYhAJSdEk.roa (hash: QMkYB+0q1+Lk5nvo2OLotb9QUYic5rNjwNkq1hEO+78=)
4: ixwpJztfYUlUnPQNZhnkMR7K_yU.roa (hash: McdR8UEnDJLQe/Y5De9k6/QzPqtdNiKRIqwLfpPLq6I=)
5: rPnkzMR46g2upeGLwnbyd0fXnb4.roa (hash: flmLV+/lWpi4M1ZIkwy5iom73MDu5dXcw9z52gR1sjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:2d:62:c2:e2:e1:a3:21:23:92:9d:a1:ee:07:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Oct 7 19:00:36 2026 GMT
Not After : Oct 8 19:00:36 2026 GMT
Subject: CN=866209b03f87bab6ff632deb5b09f58e1b394227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:b6:4b:41:4c:79:e9:4d:3d:df:f3:49:f9:
d4:1c:e4:48:35:26:84:4a:a2:43:c7:fa:d9:e4:55:
25:61:81:c8:b0:ee:c2:24:35:b3:32:90:58:ae:91:
f3:ac:19:1f:b9:a7:9c:4b:a2:c5:34:0f:47:80:9c:
33:a2:c0:12:56:0d:3b:43:b1:e4:53:a0:49:5f:ac:
1c:2c:8e:6f:4d:1d:6f:ea:76:07:d5:52:af:4f:1c:
ee:9f:f9:e3:65:8d:3a:c3:30:d1:55:60:00:81:32:
b1:c1:78:4a:40:bd:82:d8:7d:b5:92:df:dc:35:b0:
b6:86:c6:f8:16:49:ff:01:bf:b1:5b:4d:1d:b8:62:
ef:f2:48:cd:b1:df:88:ed:5b:ef:03:3a:d1:f1:35:
22:9b:6d:6e:c1:03:ff:aa:57:4a:cb:1b:e3:99:03:
96:5d:b1:03:60:0a:43:32:9e:51:3f:06:ff:ab:39:
b9:a0:fa:fe:02:aa:e2:dd:cb:fc:43:a5:ba:30:f8:
5f:4d:4a:be:e1:d9:2f:0f:73:3f:6a:11:ad:b0:b0:
41:f7:ff:91:bc:08:58:8a:55:55:19:da:bf:52:07:
41:ac:c2:ea:f2:30:5a:7d:76:52:ce:20:c9:8e:28:
e1:d0:7d:0e:fc:b8:52:b6:6b:59:b0:ae:4e:32:ef:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:62:09:B0:3F:87:BA:B6:FF:63:2D:EB:5B:09:F5:8E:1B:39:42:27
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:53:d4:dd:4f:fc:44:23:c4:fd:2f:96:e8:79:ea:c7:62:3a:
d4:be:27:0f:14:60:2b:b9:03:0c:76:54:7e:02:2c:67:13:8b:
a9:29:e6:77:a0:55:06:ce:c9:93:cb:47:cc:ab:4f:59:64:28:
94:f6:b1:7f:1b:39:fd:d0:23:7f:48:e6:94:62:fc:a2:50:f4:
f1:9b:32:7d:24:fa:85:0d:db:72:de:59:4a:16:9b:e4:a7:23:
3c:9f:a2:90:09:2a:2e:7c:03:e1:2b:95:f8:b1:13:09:2e:d2:
53:f2:b8:96:fa:4c:8c:bc:61:29:0a:b2:6f:24:fc:2b:15:73:
a8:e9:43:09:f9:ac:a0:09:26:25:ba:90:87:6d:d4:55:82:e1:
8e:c4:34:d8:6c:96:84:72:80:bb:8c:7a:b3:f1:1f:91:82:9a:
3b:92:35:93:e8:9e:ba:04:88:03:b4:df:01:3e:97:80:23:a3:
43:36:65:0d:0c:65:24:99:41:d0:2c:9e:a3:66:d2:9a:57:49:
a3:62:c3:2d:1d:60:96:17:ed:1f:88:17:2e:0b:34:cc:3c:91:
7f:5c:f4:b7:2c:a7:04:6d:6e:01:d2:a1:c2:cb:c2:15:8b:25:
22:4f:01:7a:32:98:1e:0e:58:8f:5f:47:3e:69:b4:ea:58:76:
71:d5:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:03:03 2026 by rpki-client