Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: 3Swni/U1fJ3kmOIaoogEQzm0EkS4nDszuTtWMzxaZ2w=
Subject key identifier: 4E:8E:2C:CE:6F:50:D2:F6:BD:59:64:48:24:89:2E:1A:E5:F4:3B:BB
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 01A0DCBB7F12235140B441D8A8037EDB042C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 08:01:10 +0000
Manifest this update: Sat 26 Sep 2026 08:01:10 +0000
Manifest next update: Sun 27 Sep 2026 08:01:10 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: HXmVKGioZUUJoqAWpe5505AxSb7X6pLcxDPZMiE6reE=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:7f:12:23:51:40:b4:41:d8:a8:03:7e:db:04:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Sep 26 08:01:10 2026 GMT
Not After : Sep 27 08:01:10 2026 GMT
Subject: CN=4e8e2cce6f50d2f6bd59644824892e1ae5f43bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:93:60:b0:4f:7d:81:a6:fc:31:e9:c9:4e:
28:1f:c2:0c:2a:21:98:00:ca:52:06:07:d7:0c:ac:
e6:77:c0:fe:5f:4b:c7:f8:02:c1:1f:42:ae:26:8b:
a4:ef:97:03:1e:6d:4a:c2:96:13:e3:9b:6b:a2:ca:
5d:d9:25:d0:64:e6:d3:ee:01:4d:a0:4f:df:a3:f9:
62:0b:00:78:49:57:29:df:2f:85:da:b8:d4:55:19:
d1:f4:b2:ee:6d:95:d5:38:9c:be:e0:07:a2:a9:d7:
b7:b3:8a:ba:f9:56:79:5a:6b:b6:c3:fe:0e:25:b5:
7c:8b:5d:16:77:e3:19:a0:27:97:0c:a0:e0:f8:fc:
3c:6d:12:4d:e7:e2:66:95:e5:a8:b2:00:7b:97:ce:
b8:ce:de:51:d5:52:cd:d1:02:54:b6:2c:2a:48:1e:
f8:2d:68:25:53:50:f5:de:fb:15:5d:48:24:a3:8a:
22:d3:ca:56:fc:35:c0:00:be:85:e1:4e:ee:32:e3:
aa:df:17:63:01:89:1f:d5:16:4a:fc:ef:1e:90:03:
ed:c2:48:bb:b4:b1:10:a5:e8:ec:d9:4f:fc:07:06:
47:6c:a8:e1:b9:5c:63:24:39:74:b9:28:22:02:0c:
7c:4c:83:e9:a0:bb:0f:98:46:dd:cf:8c:a6:e6:6b:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8E:2C:CE:6F:50:D2:F6:BD:59:64:48:24:89:2E:1A:E5:F4:3B:BB
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:43:ba:a3:7f:66:c5:2d:ba:28:5e:25:36:7d:b3:58:62:62:
26:9c:cb:7f:76:3f:6f:dd:9b:b6:e8:35:3f:c5:63:4a:63:10:
e2:49:1b:6b:95:b6:ca:1e:a2:f6:6a:da:ea:b8:8d:64:b0:40:
f9:81:80:a8:97:d5:e4:b4:de:84:25:84:d5:64:b6:ab:0d:37:
62:af:38:c9:e7:2f:9f:d5:cc:3c:1d:ff:f8:c1:03:63:79:60:
ab:b4:b3:77:70:a2:15:98:20:26:09:51:23:be:03:39:6e:66:
34:89:21:3e:70:08:8d:1b:9c:1b:46:8e:55:66:45:b4:c7:d7:
d8:55:5f:a8:ff:03:55:c4:ee:49:2a:7f:8c:f8:87:85:a7:74:
5b:3f:0d:12:47:82:7e:7f:ba:ca:60:d5:88:f0:be:5a:d1:04:
6d:bd:83:0d:9c:79:ae:50:86:d5:73:be:a5:b6:3b:0a:96:9d:
c7:86:13:1f:24:85:08:c6:06:20:aa:ea:aa:74:0c:00:5d:54:
e5:55:91:8d:b0:96:2e:d0:15:dd:d8:f7:fa:87:f4:20:27:88:
99:e5:14:85:7c:16:a2:4d:99:31:e3:06:d7:82:8a:f9:33:53:
fe:38:b7:0e:34:df:24:79:95:fd:1c:d8:0a:19:53:bf:11:8e:
2f:8c:6e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:37:55 2026 by rpki-client