Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: Urbv4WoP/btEsPsjSdn42JC5wEzT6HsaGKI36mydqGA=
Subject key identifier: 96:55:DF:C4:19:4B:3C:E8:35:30:BD:C5:6A:C4:48:A2:42:61:65:5E
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019EB5B2E50EB144EAF232C20804754CD64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 08:01:00 +0000
Manifest this update: Thu 11 Jun 2026 08:01:00 +0000
Manifest next update: Fri 12 Jun 2026 08:01:00 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: 2mYhB2E8izCCsly27wfUJG+fAaF89kQY3BhgGWVz3dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:e5:0e:b1:44:ea:f2:32:c2:08:04:75:4c:d6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jun 11 08:01:00 2026 GMT
Not After : Jun 12 08:01:00 2026 GMT
Subject: CN=9655dfc4194b3ce83530bdc56ac448a24261655e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:33:b3:81:4c:54:eb:15:e9:d8:02:06:98:
d0:5d:cc:f4:a4:f5:60:d1:94:a6:0e:c7:82:81:fd:
a6:6b:aa:3d:b9:12:e5:f6:94:1f:67:d9:e1:58:e6:
7b:bc:8d:54:02:46:fa:52:82:58:20:ff:4e:ca:24:
e1:35:56:c9:1a:88:39:b5:3a:04:4b:a2:b1:eb:85:
03:0e:fb:89:b6:f4:52:4a:45:d0:10:80:82:05:bd:
de:43:e9:cf:4b:44:cf:6b:53:08:4c:64:3d:9c:53:
8f:57:ee:90:b6:32:2a:f0:20:c4:3d:21:f0:45:9f:
cd:e0:d1:3d:59:a8:a9:cb:78:be:96:a6:59:5c:03:
28:fc:13:3a:02:1c:87:6a:6e:49:65:6b:62:6b:a9:
87:4b:24:2d:b2:06:e5:d6:5b:8a:eb:d6:76:2b:d6:
56:57:33:bd:30:bb:72:a4:7d:fa:53:11:53:0e:24:
30:d6:7d:7b:f3:de:22:f3:1c:1d:88:f1:ec:9e:77:
bc:89:2c:c2:f3:a2:3e:04:9f:5b:13:ee:db:86:d6:
d1:68:de:2b:8d:82:6a:2c:ae:86:aa:27:99:2a:f7:
f2:5c:52:08:42:21:49:fb:68:f3:63:e8:30:db:9e:
6a:5f:a2:37:3a:0d:78:0e:13:68:d0:bc:38:b7:eb:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:55:DF:C4:19:4B:3C:E8:35:30:BD:C5:6A:C4:48:A2:42:61:65:5E
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:22:62:62:7f:d6:94:ca:5f:f2:1f:84:23:b2:7d:58:53:4c:
57:41:f4:37:e5:85:e6:77:1b:8b:3a:2e:ab:74:90:3f:4d:d9:
55:87:cd:9c:3e:5e:5d:4c:fb:4b:ce:3c:d8:6c:da:33:ee:09:
67:dd:58:c8:6c:43:24:be:4a:44:00:f3:21:f5:dd:63:45:ea:
01:57:c8:09:b4:19:5c:e1:0e:3e:0e:0e:06:5d:bf:ba:f4:aa:
7c:0c:a1:af:19:6e:b4:4a:3f:f2:d0:65:14:26:6c:94:ff:25:
b9:7e:85:ef:80:f1:b2:61:ac:15:f8:6f:77:13:46:ba:c5:6b:
d8:dd:fe:45:a2:56:cd:36:55:19:53:b7:12:18:ba:49:49:26:
00:d1:6f:1f:f3:77:87:7e:d2:8b:3c:01:d9:33:00:3b:1e:93:
b8:44:1f:53:96:8d:b0:86:f1:06:bb:3e:56:ca:98:c7:a9:d4:
20:4d:b9:e1:a5:75:ed:40:be:f1:6f:be:24:37:e9:44:77:21:
dd:02:5f:ee:a7:c1:67:6f:9d:4a:3c:6c:c6:c2:09:cb:5d:a7:
21:8f:69:4b:0c:70:86:97:18:b1:d2:73:45:66:12:91:4b:ec:
1d:7b:1a:4b:83:fe:d0:9c:60:e9:a4:5f:4e:a1:a5:98:dc:a2:
3e:36:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:21 2026 by rpki-client