Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: ZVGGOL7xuF+xq45uewVuVRhYUidvusHDazreEt8utxk=
Subject key identifier: 28:B6:2F:17:FD:BE:9A:0C:6A:03:74:13:30:DF:12:1B:E1:32:23:05
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019DCDF48B79BB01E76445E0C523182B9FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 08:00:48 +0000
Manifest this update: Mon 27 Apr 2026 08:00:48 +0000
Manifest next update: Tue 28 Apr 2026 08:00:48 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: syfrt/6WgMoXpRkm8ef2ko7EeqMYpc5UhvjtEsBZfPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:8b:79:bb:01:e7:64:45:e0:c5:23:18:2b:9f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Apr 27 08:00:48 2026 GMT
Not After : Apr 28 08:00:48 2026 GMT
Subject: CN=28b62f17fdbe9a0c6a03741330df121be1322305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:d9:c6:4d:19:b3:36:8a:08:c0:59:2d:23:
1b:fb:3d:8b:a5:16:df:0b:30:9e:95:42:83:4a:ff:
5f:91:b7:7c:18:1d:7b:d9:b5:4a:53:1b:ab:b2:67:
cb:82:75:89:98:87:4a:2d:46:fe:80:2a:80:81:9a:
45:86:eb:24:89:a2:fe:1c:65:5f:ee:99:45:2c:52:
bc:fb:fb:19:5e:a8:69:f7:52:a2:3c:5a:91:c2:4c:
65:a4:d0:4e:79:db:2b:9f:e8:f1:eb:01:c7:0b:8a:
51:31:1d:30:00:aa:46:01:b1:d8:33:77:cf:57:16:
3b:a5:b3:85:37:bd:b4:ce:ce:e7:d9:9a:2a:59:a7:
5c:19:f7:a9:84:cf:9f:ce:b1:5d:21:b2:2a:61:b9:
b8:dc:08:2e:7c:c0:a6:74:1d:07:95:47:b0:d3:e7:
79:71:83:90:be:6b:17:f2:81:9b:53:eb:ed:3b:c2:
58:52:4b:88:b7:4f:0d:58:82:d9:b7:15:61:06:5f:
ba:43:c1:02:dd:fb:ee:00:2d:ea:65:21:41:d5:bc:
6a:5e:21:4d:78:3d:95:ec:19:1d:eb:3e:4a:c8:2b:
57:af:bb:7a:3e:32:71:04:ef:aa:c9:68:c9:8f:f9:
95:f3:0a:f7:c7:0c:d6:fa:7d:39:6f:15:82:22:e7:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B6:2F:17:FD:BE:9A:0C:6A:03:74:13:30:DF:12:1B:E1:32:23:05
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:ee:7d:98:24:28:28:59:55:4d:b1:44:15:49:34:79:7d:
16:82:c7:8f:f4:49:15:07:d9:8e:d4:37:31:3f:e5:bc:48:79:
d8:6a:90:10:cf:33:a0:57:74:a0:5f:12:ac:81:bf:9c:46:69:
57:ee:7f:3c:e1:fd:24:ba:95:6d:09:69:45:c1:bd:76:13:8a:
24:11:38:34:ef:42:2a:e7:19:99:8b:d0:2a:64:15:10:31:43:
14:96:ea:2e:79:cf:c8:70:af:25:b9:e6:d3:d0:54:0a:68:67:
cf:d0:7e:00:a1:1c:f5:22:f8:8e:ea:d2:5f:ec:21:7a:8a:68:
e4:12:de:d1:3f:7f:50:31:8c:5f:81:4d:f2:06:87:be:94:1f:
0b:00:1b:06:6d:39:6a:c4:91:12:ca:65:28:50:4b:90:d9:3f:
f8:63:a1:02:29:d9:71:33:6a:f9:70:1d:0a:cc:46:64:a6:fb:
fc:0f:3c:1c:67:d7:f5:62:a6:63:bf:5f:06:2f:0f:9b:d2:8d:
0d:05:5b:ce:9c:b0:e8:3a:6b:74:91:fb:7c:22:b3:8f:a5:6d:
29:c4:e3:7b:1c:5e:bb:46:0b:29:e8:c1:b6:07:9d:d8:6a:33:
e6:e7:29:d9:5b:4b:ed:11:e4:4b:1e:b9:8b:53:1a:1e:13:f9:
bd:82:05:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9It5uwHnZEXgxSMYK5+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh
NjVhYzUwHhcNMjYwNDI3MDgwMDQ4WhcNMjYwNDI4MDgwMDQ4WjAzMTEwLwYDVQQD
EygyOGI2MmYxN2ZkYmU5YTBjNmEwMzc0MTMzMGRmMTIxYmUxMzIyMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBbZxk0ZszaKCMBZLSMb+z2LpRbf
CzCelUKDSv9fkbd8GB172bVKUxursmfLgnWJmIdKLUb+gCqAgZpFhuskiaL+HGVf
7plFLFK8+/sZXqhp91KiPFqRwkxlpNBOedsrn+jx6wHHC4pRMR0wAKpGAbHYM3fP
VxY7pbOFN720zs7n2ZoqWadcGfephM+fzrFdIbIqYbm43AgufMCmdB0HlUew0+d5
cYOQvmsX8oGbU+vtO8JYUkuIt08NWILZtxVhBl+6Q8EC3fvuAC3qZSFB1bxqXiFN
eD2V7Bkd6z5KyCtXr7t6PjJxBO+qyWjJj/mV8wr3xwzW+n05bxWCIufFuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi2Lxf9vpoMagN0EzDfEhvhMiMFMB8GA1UdIwQY
MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt
MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh
LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLLufZgk
KChZVU2xRBVJNHl9FoLHj/RJFQfZjtQ3MT/lvEh52GqQEM8zoFd0oF8SrIG/nEZp
V+5/POH9JLqVbQlpRcG9dhOKJBE4NO9CKucZmYvQKmQVEDFDFJbqLnnPyHCvJbnm
09BUCmhnz9B+AKEc9SL4jurSX+wheopo5BLe0T9/UDGMX4FN8gaHvpQfCwAbBm05
asSREsplKFBLkNk/+GOhAinZcTNq+XAdCsxGZKb7/A88HGfX9WKmY79fBi8Pm9KN
DQVbzpyw6DprdJH7fCKzj6VtKcTjexxeu0YLKejBtged2Goz5ucp2VtL7RHkSx65
i1MaHhP5vYIF0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:04 2026 by rpki-client