Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
File: iKlKQUDhmzIGP8bnefWTFKdKDFE.mft (raw, json)
Hash identifier: ef4xBfcmG4U4qj3Js4HuzNPsOX74YgqoR6f7HkHk4ZU=
Subject key identifier: 92:AF:DC:31:9F:B0:12:6A:82:9A:74:B8:CC:1E:F8:59:82:8B:7E:08
Authority key identifier: 88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
Certificate issuer: /CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Certificate serial: 01A17627FB1EF3683E9D1AEB9649CFB0AC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 03:01:33 +0000
Manifest this update: Mon 26 Oct 2026 03:01:33 +0000
Manifest next update: Tue 27 Oct 2026 03:01:33 +0000
Files and hashes: 1: JwfUROw3lqJXIl3DNT5lBc7LOxw.roa (hash: RwUUyhKUGl1YtmMqC40VRjNNfmuqLqm03MhoJovC+/I=)
2: iKlKQUDhmzIGP8bnefWTFKdKDFE.crl (hash: KoeXXvrXbdSlG9xeb6V/TcuoXz3UwUwmh7YdCiPlD2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:fb:1e:f3:68:3e:9d:1a:eb:96:49:cf:b0:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Validity
Not Before: Oct 26 03:01:33 2026 GMT
Not After : Oct 27 03:01:33 2026 GMT
Subject: CN=92afdc319fb0126a829a74b8cc1ef859828b7e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:34:ca:00:ee:85:d1:11:fb:1b:82:d7:7a:
ae:82:95:83:28:7d:6e:4f:3b:57:d5:7a:29:cf:40:
bf:28:69:6a:e2:2f:12:d6:19:cc:34:e2:06:a0:84:
e3:f8:8b:76:2d:88:9d:2d:55:27:14:55:89:4d:4b:
3b:97:c6:4a:1c:45:a4:37:7e:8d:5b:1b:94:ee:45:
f0:20:24:ac:87:a8:d1:78:0e:09:9c:e3:47:6e:83:
12:f1:65:af:2a:98:07:26:23:a1:e5:09:c6:33:7d:
e1:53:8d:a1:58:15:71:23:90:31:ff:1a:88:87:c9:
e1:1d:ec:91:01:c0:86:be:b1:4a:fd:85:c9:f1:97:
30:0c:db:36:dd:72:a2:09:65:be:41:7c:4e:34:77:
a2:83:3f:e1:93:a7:d3:25:db:01:73:d0:cf:6f:eb:
54:c9:1c:e5:b8:af:6a:bd:7c:46:3c:c1:b1:10:16:
02:eb:ec:df:cf:49:fe:2e:a1:7d:9a:f5:a6:dd:3b:
dc:5c:78:91:7d:23:90:7f:16:41:e3:fd:8b:60:8a:
20:1c:2e:7f:04:f4:22:7f:96:21:12:7d:cc:d1:c2:
fc:91:4c:c7:30:ef:3a:f4:b9:02:3b:b8:05:76:6a:
9a:10:81:e4:4f:30:40:69:85:22:dd:f2:ac:a3:66:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AF:DC:31:9F:B0:12:6A:82:9A:74:B8:CC:1E:F8:59:82:8B:7E:08
X509v3 Authority Key Identifier:
keyid:88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:19:9a:b7:c6:90:12:a1:8e:81:9b:03:61:0f:e8:cb:9c:63:
a7:43:f4:17:07:6f:99:b5:1b:71:5d:0e:c1:14:f4:9b:e0:89:
ae:16:04:c8:7b:d9:e4:1e:ec:db:1f:d1:4a:75:90:02:16:73:
cd:42:54:eb:c0:09:b1:a5:cc:55:17:dc:dc:9f:e6:cb:01:1e:
66:85:dd:75:64:f0:37:87:6c:11:b7:85:fc:55:9a:2b:56:26:
9f:73:e3:92:89:6a:25:b9:d5:71:96:67:62:8c:c1:b2:30:87:
91:04:c1:5b:de:9b:0b:66:76:d4:96:85:70:57:e4:14:b4:f4:
a2:0c:01:99:6f:89:25:c3:6a:07:67:86:80:c0:43:81:eb:b4:
dc:44:f2:e8:97:11:6e:90:c7:26:62:1f:35:e7:ac:74:0d:da:
ae:14:1b:ab:75:dc:a0:88:1b:5f:87:2e:bc:3f:cb:84:96:0e:
65:02:29:ea:a8:b3:ae:2e:a5:2d:9d:4e:ed:50:bc:a9:bd:52:
11:1e:60:e2:d7:0b:20:df:36:93:44:98:78:f4:fe:22:ac:ee:
72:43:6a:76:98:c5:f6:b2:a2:37:62:81:8e:a6:93:19:63:c6:
10:ca:b2:b7:fd:4e:17:6f:c2:70:07:1a:57:63:9a:61:b5:47:
28:39:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:40:00 2026 by rpki-client