Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: R4lqvp6CLHm95fFhX85xBJ36hrH5/t0ISXsAKgSBlF0=
Subject key identifier: 6D:DC:3A:24:FC:74:DC:F3:D1:7B:86:6F:5C:2B:AA:7C:9B:1B:32:76
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019CE447B3BF93861FE2BA153615D2AA9114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 23:00:30 +0000
Manifest this update: Thu 12 Mar 2026 23:00:30 +0000
Manifest next update: Fri 13 Mar 2026 23:00:30 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: DDJ2PXyAb6sD1MFFZOGZ0qk6YIVNMMNS+UVX0srcYec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:b3:bf:93:86:1f:e2:ba:15:36:15:d2:aa:91:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Mar 12 23:00:30 2026 GMT
Not After : Mar 13 23:00:30 2026 GMT
Subject: CN=6ddc3a24fc74dcf3d17b866f5c2baa7c9b1b3276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:e9:44:59:97:9a:ca:c5:b9:5b:12:f3:2e:
29:50:dc:8e:ca:f9:01:5d:e5:11:fd:1f:cd:f4:7d:
b9:98:f7:e6:c8:6e:47:f8:40:50:19:72:26:73:b7:
f4:ca:66:a9:18:a6:2d:84:1a:78:8c:cb:92:cf:f7:
e9:6f:f2:62:58:e9:36:ca:9f:96:ac:8f:0b:42:95:
5c:59:56:cd:27:86:e5:08:21:0e:7a:04:36:18:85:
b2:9c:8e:6b:34:86:90:22:a6:45:57:12:ac:aa:50:
9b:d5:25:eb:60:66:e5:e8:3d:26:26:a9:8c:ef:ca:
bc:15:fd:56:9d:19:88:54:7c:f6:fa:fd:06:d9:56:
75:1e:fd:e8:a3:6e:3a:f9:de:1e:e5:2e:e2:cd:4e:
51:66:c1:a9:3a:10:5d:e0:52:68:fb:ae:a7:ce:40:
c7:ac:96:c7:55:9a:d6:34:50:10:27:f5:41:a4:a2:
d2:d1:08:39:8c:85:3b:1f:72:e9:8c:e4:38:03:32:
9a:f9:e0:4e:4c:6f:70:1b:1a:e1:3a:62:9d:3a:13:
24:29:59:e6:65:c9:38:c1:2e:d4:16:46:10:ab:e5:
23:b9:6f:d6:a3:32:85:ff:fd:4c:9c:91:ad:66:63:
39:9c:d3:74:e0:26:31:2d:4b:99:6e:ec:3c:41:b0:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DC:3A:24:FC:74:DC:F3:D1:7B:86:6F:5C:2B:AA:7C:9B:1B:32:76
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c8:90:42:20:7e:2c:eb:ef:a1:93:b2:3c:b3:34:7e:b0:90:
09:f8:03:1b:91:2d:d9:40:39:3d:1d:47:38:8b:1f:94:58:a9:
c8:85:f6:f0:7e:60:d6:fb:3e:a4:a3:46:1c:e1:5d:3c:21:f9:
93:d0:e7:14:bf:bf:4b:d2:f1:96:23:38:a3:7a:ad:28:5f:8c:
33:0f:e4:a7:c7:57:61:5e:9c:eb:3d:b6:f7:ad:1b:49:01:eb:
6c:ca:fe:0d:5b:ff:1e:b4:e7:77:a3:86:5d:36:6b:1d:e5:a4:
d9:cd:8d:d0:12:9f:08:85:15:39:a5:6f:71:24:71:b3:9a:7c:
af:34:62:b8:6f:18:b5:0e:e7:68:39:5c:32:eb:98:f0:cb:8b:
8f:dc:de:2f:34:64:95:59:ed:81:3f:2b:dc:26:c2:f6:a8:e0:
8d:73:94:69:7e:95:98:52:15:3b:06:12:1c:41:2e:10:10:08:
d8:9c:dc:ce:5d:27:0e:b5:58:b9:9c:6d:7a:b5:19:cc:bc:24:
2d:b1:57:e6:df:ca:2a:1d:8f:c6:6a:af:f6:d2:bf:68:c6:46:
be:95:6f:6e:2e:d7:9d:a6:f9:f6:78:38:7d:30:58:54:03:a3:
56:ab:34:83:b6:04:60:f5:01:a7:fa:6d:29:c5:bb:b3:f3:0e:
7f:d0:6b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:30:32 2026 by rpki-client