Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: E/+fIsQn8qQp6tlD0IHtdji8lw0sq7G/dn2SWimgIec=
Subject key identifier: 9A:B0:22:E4:6B:9C:65:45:39:A9:77:43:78:25:EB:6A:67:4A:24:1A
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019EB7A1365DCD411B1AE44115E8A305AD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 17:00:55 +0000
Manifest this update: Thu 11 Jun 2026 17:00:55 +0000
Manifest next update: Fri 12 Jun 2026 17:00:55 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: 4CS4qaW62+DnP130iYyimo7qeyqnYrvmfwsVQiRTHws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:36:5d:cd:41:1b:1a:e4:41:15:e8:a3:05:ad:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jun 11 17:00:55 2026 GMT
Not After : Jun 12 17:00:55 2026 GMT
Subject: CN=9ab022e46b9c654539a977437825eb6a674a241a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:1e:4c:ff:68:0c:b9:bb:2a:60:bc:bf:37:
6a:4f:d4:49:62:15:8e:26:c6:7a:16:12:65:d3:04:
68:08:5f:68:40:54:b1:08:2e:4b:5a:16:1e:fe:29:
12:db:74:a2:de:a7:bd:5e:1b:8b:b6:e6:4e:bc:df:
47:f0:03:67:87:35:84:2c:1a:27:68:aa:7f:7f:15:
ca:5d:ac:61:88:f1:0b:ab:d1:a9:9e:a1:4d:ea:74:
a2:4e:ad:a2:f9:72:48:05:d5:34:29:fc:2b:7b:52:
60:75:1d:64:14:7f:1e:cb:ca:83:c2:66:06:1f:04:
37:a9:f0:03:19:6b:65:9f:ec:9b:ef:03:3b:50:0c:
9f:56:69:61:3c:cb:ec:ab:5f:dc:97:ec:ea:3f:20:
42:43:17:a9:00:bb:d2:6e:64:bf:5f:6d:eb:93:2e:
3f:d4:d0:51:99:65:70:c0:07:cb:c5:89:47:ef:93:
62:72:12:23:dd:da:e7:a3:ae:b8:00:3e:a6:b7:57:
9d:c7:de:71:19:ef:ce:75:dc:62:0a:0b:00:1d:29:
f9:bb:4e:f0:1e:de:3c:a1:9f:ee:a1:c3:c1:77:66:
33:08:6b:57:b6:a3:a7:7a:b7:00:04:10:23:93:06:
a8:51:dd:af:a4:f3:c6:46:c7:87:a2:ad:65:22:b4:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:22:E4:6B:9C:65:45:39:A9:77:43:78:25:EB:6A:67:4A:24:1A
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7a:6d:bc:92:3a:5b:03:38:98:99:a2:1c:85:64:5b:76:c7:
c0:ea:96:ea:96:10:a6:b7:7d:79:86:7f:aa:c3:15:ab:79:8d:
9a:9f:8e:f2:44:f3:fd:4b:6b:d4:b5:47:b5:6e:57:68:e7:34:
26:b7:b0:8b:4b:1c:7e:5f:74:3b:b5:91:14:1c:46:f8:ba:c7:
ec:0c:aa:1f:5e:84:d9:0a:57:71:ed:a0:c7:e5:2a:c8:43:9d:
af:e5:42:4c:99:1c:e7:00:3d:55:49:fa:58:66:d7:5e:e2:29:
50:9a:62:30:f9:8a:64:6e:1e:82:c7:05:da:ba:39:49:d2:64:
40:a7:02:7f:76:2d:60:69:66:ae:6f:1a:53:fb:f9:c1:29:b5:
b9:fa:82:07:ed:5b:95:e2:b0:0a:da:9a:2a:4f:d4:d8:ba:84:
44:fd:3c:b3:cc:84:67:8b:a0:ea:20:38:10:0c:56:74:54:32:
8e:5a:1e:2b:60:15:5a:e0:66:90:9a:8a:c0:28:59:20:d5:20:
74:ad:1b:46:16:cd:9f:28:3e:88:45:87:8a:fc:8b:5a:16:f7:
36:69:af:f3:9c:db:74:3d:14:e1:c8:53:1a:25:21:0f:7e:d1:
62:06:45:f9:d2:24:25:75:00:74:4f:c0:a2:6c:15:70:2f:63:
c9:c3:ec:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oTZdzUEbGuRBFeijBa1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh
NjVhYzUwHhcNMjYwNjExMTcwMDU1WhcNMjYwNjEyMTcwMDU1WjAzMTEwLwYDVQQD
Eyg5YWIwMjJlNDZiOWM2NTQ1MzlhOTc3NDM3ODI1ZWI2YTY3NGEyNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuoeTP9oDLm7KmC8vzdqT9RJYhWO
JsZ6FhJl0wRoCF9oQFSxCC5LWhYe/ikS23Si3qe9XhuLtuZOvN9H8ANnhzWELBon
aKp/fxXKXaxhiPELq9GpnqFN6nSiTq2i+XJIBdU0Kfwre1JgdR1kFH8ey8qDwmYG
HwQ3qfADGWtln+yb7wM7UAyfVmlhPMvsq1/cl+zqPyBCQxepALvSbmS/X23rky4/
1NBRmWVwwAfLxYlH75NichIj3drno664AD6mt1edx95xGe/OddxiCgsAHSn5u07w
Ht48oZ/uocPBd2YzCGtXtqOnercABBAjkwaoUd2vpPPGRseHoq1lIrTU9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqwIuRrnGVFOal3Q3gl62pnSiQaMB8GA1UdIwQY
MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt
MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh
LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3ptvJI6
WwM4mJmiHIVkW3bHwOqW6pYQprd9eYZ/qsMVq3mNmp+O8kTz/Utr1LVHtW5XaOc0
Jrewi0scfl90O7WRFBxG+LrH7AyqH16E2QpXce2gx+UqyEOdr+VCTJkc5wA9VUn6
WGbXXuIpUJpiMPmKZG4egscF2ro5SdJkQKcCf3YtYGlmrm8aU/v5wSm1ufqCB+1b
leKwCtqaKk/U2LqERP08s8yEZ4ug6iA4EAxWdFQyjloeK2AVWuBmkJqKwChZINUg
dK0bRhbNnyg+iEWHivyLWhb3Nmmv85zbdD0U4chTGiUhD37RYgZF+dIkJXUAdE/A
omwVcC9jycPsog==
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:52 2026 by rpki-client