Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
File: IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft (raw, json)
Hash identifier: eKrGlrO7nW/DvPjMoSNb7+tq8v1Sn0dlUmxCNbABKIw=
Subject key identifier: EB:29:FA:6C:59:55:A5:B3:96:36:5A:BA:BC:ED:9F:1D:7D:78:E7:D8
Authority key identifier: 22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
Certificate issuer: /CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Certificate serial: 01A0D3EF13852401FAFFEC1B1EA33B28485B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:00:55 +0000
Manifest this update: Thu 24 Sep 2026 15:00:55 +0000
Manifest next update: Fri 25 Sep 2026 15:00:55 +0000
Files and hashes: 1: IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl (hash: /3UxOikPMUj3wrZVEK1qxVnlDgM8r1B4W4yjnrZLUd0=)
2: h2MUZzK6jX-iU91egrEXxJwrlhU.roa (hash: AQQQoSdiJ+jplNp9p3VB8GeXhyTD6RNK0y5PzB9A1Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:13:85:24:01:fa:ff:ec:1b:1e:a3:3b:28:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Validity
Not Before: Sep 24 15:00:55 2026 GMT
Not After : Sep 25 15:00:55 2026 GMT
Subject: CN=eb29fa6c5955a5b396365ababced9f1d7d78e7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:b4:6e:4b:84:be:89:64:96:b5:40:64:10:
33:6c:dd:77:c0:05:29:f5:c8:ad:ee:3e:42:8b:5c:
bb:96:79:1d:b7:53:bf:7a:d5:2a:1f:79:df:ab:70:
03:90:13:f0:42:a2:f5:8b:ca:b2:34:7b:6a:36:f4:
13:21:56:c4:4d:15:e5:91:40:2a:61:1f:22:4a:c7:
f2:37:21:74:eb:a3:cf:47:49:7d:04:b4:c3:59:4e:
ec:20:75:5d:47:4f:d3:62:b7:61:21:c5:39:f7:a3:
56:9d:c3:6e:fd:fb:c6:ef:48:08:77:a6:64:d5:53:
13:a8:fe:07:d0:08:9d:04:e9:72:5d:cf:8c:d0:c6:
c4:44:30:06:78:48:62:df:5b:1b:81:0f:b0:38:c9:
2b:c5:5f:33:c2:80:63:f7:2c:a5:1e:46:84:15:cf:
aa:cb:e2:04:b7:fa:51:4c:c6:ec:65:5f:55:2b:cf:
88:d7:58:54:d8:0a:b1:00:ab:b4:ec:91:92:81:8b:
1c:ad:36:8f:cc:9e:82:96:fd:15:af:46:9f:a4:a8:
60:b4:60:eb:28:72:8a:6c:14:df:6a:4d:d2:bf:ce:
9e:3b:4b:ef:e8:05:6d:2e:37:0f:46:00:9e:f9:f2:
b8:6c:d3:48:e0:73:12:27:5b:e4:af:83:4e:e3:78:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:29:FA:6C:59:55:A5:B3:96:36:5A:BA:BC:ED:9F:1D:7D:78:E7:D8
X509v3 Authority Key Identifier:
keyid:22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7f:f8:f7:62:50:14:66:7e:1f:aa:b1:8a:8e:8c:d3:d5:c3:
0b:73:d5:aa:34:89:0e:89:de:40:d0:92:ff:47:0e:02:3e:62:
a4:f4:1f:5a:a1:25:55:34:c3:cd:8c:8f:9a:0e:4d:23:01:56:
b8:4a:c6:4f:b1:f3:97:37:b1:ba:90:89:b7:c5:c4:4f:84:0b:
db:56:97:6a:ae:9c:76:ae:65:6a:bf:a8:da:4a:7f:47:c1:d7:
55:9a:1e:d5:69:1a:41:04:02:dd:7e:2d:7c:22:fa:35:aa:c6:
65:7e:c0:1c:75:cc:77:1f:52:6f:22:ad:c3:89:32:8c:30:a1:
e1:e4:22:03:8d:6e:74:20:72:be:7a:5d:c3:d9:47:95:ec:ec:
b2:3f:18:b4:1f:c6:58:6e:b9:2f:e6:91:a3:e8:9b:0a:30:b6:
c2:98:7e:fc:2c:9f:3d:64:78:84:6f:4d:6d:04:c8:20:1f:60:
9f:eb:9f:43:88:f0:89:fa:3d:04:6b:64:6d:c8:44:84:31:ad:
2c:96:99:a0:42:80:98:16:21:8b:46:77:af:2a:b1:cf:4e:6d:
d6:7c:78:e5:33:c1:8a:e3:f1:ad:fc:02:5b:fb:c1:5c:bf:e6:
bb:5d:4e:bb:3f:3a:02:42:2a:73:34:ca:e1:fa:c3:cd:97:33:
77:06:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:52 2026 by rpki-client