Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: CNZ/Mg7KJDGuZceEHtf11sGjjUI7xgz/z6DbtNpwXt0=
Subject key identifier: EF:A4:82:7A:DA:35:53:FB:6B:1B:3F:21:F9:38:4B:4D:B8:0F:D0:C3
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019D2816608191B03AFC8F234FA1C6D3028A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0EF4
Signing time: Thu 26 Mar 2026 03:00:48 +0000
Manifest this update: Thu 26 Mar 2026 03:00:48 +0000
Manifest next update: Fri 27 Mar 2026 03:00:48 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: jQoF8+umV0EcKDSFyuIObNayS8p5/QfjtKV4lPqpS4k=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:60:81:91:b0:3a:fc:8f:23:4f:a1:c6:d3:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Mar 26 03:00:48 2026 GMT
Not After : Mar 27 03:00:48 2026 GMT
Subject: CN=efa4827ada3553fb6b1b3f21f9384b4db80fd0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:ca:76:c5:64:8c:f9:7e:7a:43:a7:5f:55:
d9:38:a0:60:cb:14:63:74:5e:9a:55:2b:b6:14:ba:
bc:a6:fc:a2:97:0b:9b:a6:44:fa:2c:c6:ea:dc:24:
e8:cc:ad:42:cc:86:e8:72:26:fb:fe:80:e5:c6:fb:
45:09:ec:8c:a1:2e:76:9e:86:a7:9c:83:e7:d2:24:
ad:58:67:29:a2:c4:b0:39:61:b2:78:b5:af:64:a2:
2c:09:0b:f4:ae:ee:31:19:07:c9:2d:07:41:0b:3c:
d7:a5:20:ff:04:5f:03:4e:33:ed:1a:50:3a:c1:c0:
9b:2a:50:aa:d8:fd:92:7d:13:f3:7b:be:c8:2e:f3:
86:df:54:18:94:cc:11:c8:94:76:9d:a1:f4:f4:d0:
3a:df:c8:b0:d1:af:4c:06:e9:33:e8:0a:54:2a:58:
65:cc:f3:04:9d:09:b2:aa:7c:80:a9:48:28:ec:9b:
86:08:65:64:51:86:9f:81:78:7e:64:f6:d7:15:a1:
da:a6:77:f5:cd:2a:0d:0f:ad:8e:56:f3:61:c4:73:
e7:0c:c3:69:4b:f1:cc:f9:1b:0e:5c:9d:2a:7a:3d:
79:be:62:aa:39:85:77:8c:a8:fd:35:80:08:a8:aa:
4c:7f:af:eb:99:80:41:de:c0:a5:49:63:7f:bc:ab:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:82:7A:DA:35:53:FB:6B:1B:3F:21:F9:38:4B:4D:B8:0F:D0:C3
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:79:52:57:2f:01:7b:d8:29:e6:74:7d:4b:52:c8:52:9e:
45:a5:ae:b0:c9:48:a4:73:14:4a:cb:33:76:ee:74:d1:72:28:
e9:15:c4:f5:7f:88:b0:ed:aa:ab:e7:cc:35:8c:cb:9c:fe:ae:
33:12:b9:54:e9:22:43:f5:f0:45:e2:da:0c:82:f7:5f:30:17:
03:58:98:00:82:ab:d2:47:62:32:50:a3:c3:d2:39:bb:d2:28:
53:37:fd:ac:38:65:d0:1b:09:27:ab:c0:99:96:b2:cb:f1:87:
ba:d9:ae:15:46:9e:51:1f:9a:b9:7f:6e:79:ca:7e:67:18:8d:
f3:a0:53:29:eb:8e:35:6a:8d:bb:5f:4e:72:73:56:43:04:a9:
dc:7d:8a:57:b3:b6:39:44:37:00:22:db:7c:d3:84:70:c1:9b:
85:31:b9:ab:08:2f:04:eb:48:b2:a2:31:41:51:d3:1b:8b:ad:
91:50:12:59:0c:b9:b4:04:63:54:fe:b0:47:85:b2:d6:29:99:
da:af:6c:8a:78:c4:9c:73:9d:fe:9f:9e:88:b0:83:a3:8b:f0:
45:f6:fc:2b:6a:56:8b:9b:db:3b:16:fb:ea:f1:fa:56:73:12:
7f:7d:31:c0:f0:4c:85:5c:49:85:07:ae:9f:c8:06:be:af:45:
e2:ed:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:05 2026 by rpki-client