Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: ZWLO72aYww9pu9z34LkIZ1nQ0cf6GC339DSe8mCcIqs=
Subject key identifier: 5C:FD:4C:83:66:F5:6D:A9:69:6D:3A:CC:69:70:7E:D0:B2:5E:60:05
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 019E1DC77B67939F4157B92C01E59D66463E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:01:12 +0000
Manifest this update: Tue 12 May 2026 20:01:12 +0000
Manifest next update: Wed 13 May 2026 20:01:12 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: z2wEiaKnCPG56eTvg20vzX1Wz9Om//skUNViiXMx074=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:7b:67:93:9f:41:57:b9:2c:01:e5:9d:66:46:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: May 12 20:01:12 2026 GMT
Not After : May 13 20:01:12 2026 GMT
Subject: CN=5cfd4c8366f56da9696d3acc69707ed0b25e6005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:ce:be:bc:ee:ef:a2:6d:9b:a2:74:b8:db:
4b:5e:8f:0b:ae:6c:22:ce:5b:2b:61:5a:9b:55:b6:
b3:3e:cd:e0:5e:36:e9:94:d2:dc:c5:e6:c3:4c:1b:
3a:b3:76:70:11:fb:85:31:f2:10:1e:cd:ba:35:35:
c1:99:fa:10:36:c8:ea:93:bf:74:3a:34:3d:8e:8c:
eb:a9:e2:41:ed:30:6d:4a:46:21:f2:12:c4:78:0c:
23:93:40:7a:91:57:bc:38:41:e7:c3:a2:6f:03:03:
ec:c8:ce:dd:15:41:66:61:74:d9:8c:34:0d:bd:dc:
97:ea:b1:56:67:02:d7:c3:36:fb:01:02:d2:25:4b:
e6:93:a4:7a:09:98:56:0e:4d:cc:57:fa:2e:8a:dc:
d0:8e:ae:bd:4a:5d:ee:c0:0f:8e:2f:d1:90:e7:dc:
88:01:e7:14:62:ed:33:e5:62:89:54:c3:53:f7:76:
97:76:5f:2d:17:17:4d:0d:22:67:d2:b1:af:00:85:
ab:28:0c:4a:b5:91:17:98:cd:56:a4:59:d9:a5:7e:
30:41:35:21:b2:b8:05:72:cc:c7:3d:7c:0e:0d:f9:
fa:a9:76:d0:72:e8:7f:ae:9b:f3:d7:c4:81:fd:e6:
23:1c:a1:fb:7a:d9:6d:74:1e:5e:4e:ac:83:48:eb:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:4C:83:66:F5:6D:A9:69:6D:3A:CC:69:70:7E:D0:B2:5E:60:05
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:43:a3:ea:28:d5:f3:6e:f9:a4:6d:17:93:5c:a0:b1:19:c2:
2f:dd:18:e3:62:d3:03:bc:19:6e:98:fc:03:01:fe:59:99:21:
42:65:3a:0c:06:33:b4:c4:a3:8f:e3:26:fb:8a:7a:1c:ff:4f:
19:8f:8a:be:c8:70:7e:aa:4b:e1:90:77:36:d7:c5:f9:10:c7:
78:a2:cb:c0:1c:a2:83:d5:2e:f3:03:51:56:c2:3d:e3:55:3c:
86:24:df:08:d3:f6:6f:fe:17:00:89:de:8a:04:9b:44:23:1f:
4e:33:5a:90:40:bb:b1:94:00:8f:f9:11:38:19:43:d5:89:42:
41:94:59:ac:ec:ff:60:a0:7d:05:a7:0e:67:01:6c:3d:d3:90:
a4:5d:27:a1:78:bd:4d:66:13:b8:f9:fd:7f:e9:90:77:56:3a:
aa:51:43:00:cd:ad:dc:52:d0:d3:df:eb:30:8d:0d:9d:cb:9e:
e6:2c:4d:b9:d6:19:b3:35:62:fa:92:8f:2e:0e:4e:45:b5:d2:
3a:9c:b4:53:bb:d5:0e:a8:5c:ce:f0:a4:bc:b1:24:d7:90:d6:
f8:38:85:d3:7a:5c:d7:10:7f:f0:fa:ec:d0:35:35:ab:ed:69:
9f:b0:91:e0:e2:7b:9c:59:20:20:b0:16:94:e8:25:b8:e3:81:
2b:47:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:53 2026 by rpki-client