Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: Zuce5p7oRLIQufm2Y0T7v/C32UbuQZgLA3dDBq3G/rE=
Subject key identifier: 58:A9:AA:83:45:0E:76:98:36:EF:5C:CC:05:88:D8:2E:77:F6:18:94
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 01A0DE3C10A94DF76F4D3890AD1CF3D4852C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 10E0
Signing time: Sat 26 Sep 2026 15:01:13 +0000
Manifest this update: Sat 26 Sep 2026 15:01:13 +0000
Manifest next update: Sun 27 Sep 2026 15:01:13 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: Ivf8SPLLW46YcbgT6DBaYLkV7yw3MYHxD+dBMEJhnuI=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:10:a9:4d:f7:6f:4d:38:90:ad:1c:f3:d4:85:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Sep 26 15:01:13 2026 GMT
Not After : Sep 27 15:01:13 2026 GMT
Subject: CN=58a9aa83450e769836ef5ccc0588d82e77f61894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:17:47:52:4c:aa:ab:59:a1:bf:98:b7:8a:
38:bc:e3:5d:10:38:b4:1b:4f:8d:4d:7d:98:f4:40:
17:5f:5c:b5:04:b7:de:18:18:13:59:ff:54:a2:44:
09:a3:85:89:a2:ea:74:d8:29:bb:52:52:cd:66:bf:
e5:4f:27:1a:c6:3b:3a:6a:20:f8:be:75:b7:a7:12:
f9:ca:e3:1c:8c:dc:46:4f:a7:59:e6:c1:1c:0b:53:
cd:9d:b1:12:9a:0f:52:54:c8:ea:e3:a4:62:93:65:
90:26:df:5f:d4:e5:95:46:fa:e3:77:b9:b9:33:79:
1e:40:b5:52:9c:f5:86:43:ac:37:2b:c3:51:7d:5e:
9f:e6:b8:0d:24:96:d3:7d:01:c6:0b:38:ff:05:43:
24:6d:a1:00:a1:51:bc:87:6c:82:51:b2:cb:dc:4f:
5a:cc:b4:13:61:74:d3:af:64:cc:21:c4:d7:c7:c3:
bb:a5:2d:dc:4a:1f:5d:ac:bd:89:9b:0e:1e:37:7b:
26:46:2f:99:b7:14:d7:97:8a:2d:38:37:a3:70:ea:
98:be:55:86:ac:4b:4b:fc:36:c4:e2:43:5c:19:f1:
61:f1:a9:d9:db:2b:4f:04:2f:4c:e4:47:89:ab:21:
03:9f:53:99:33:2f:23:78:34:f8:95:e0:77:6a:79:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:AA:83:45:0E:76:98:36:EF:5C:CC:05:88:D8:2E:77:F6:18:94
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ae:00:78:d6:e2:b6:2c:30:6d:0a:05:be:49:5b:85:4c:20:
d9:e4:92:c6:d9:82:bf:73:f8:4f:08:eb:0a:8c:00:26:7f:e5:
bf:a2:af:59:81:c4:9d:f3:1b:ab:e3:23:74:69:45:af:e6:7f:
df:3e:22:21:40:e8:d0:2e:48:b4:40:c7:be:cb:b8:3a:6f:26:
bf:08:5c:34:9f:29:f9:69:4e:17:38:04:a6:d9:51:a9:28:e7:
4b:f2:b0:d4:cd:0b:39:8b:28:ce:f4:27:b9:25:ea:14:49:78:
bd:95:80:63:a2:76:5e:95:40:85:55:d8:09:0e:4c:0f:52:43:
c2:d8:55:38:25:6b:ff:8d:7b:09:a4:73:37:37:0a:50:13:2d:
e7:7a:41:c4:9d:b8:b5:fb:3e:1d:4e:15:66:0b:49:25:37:57:
ea:33:1c:76:1d:23:e1:b6:84:03:d6:79:3e:2c:25:f7:de:34:
18:7c:29:68:aa:6b:91:2a:b0:9e:31:4d:4a:ef:e8:f6:eb:f9:
74:93:bf:72:ba:14:fa:52:91:13:9d:1b:c1:49:5f:79:08:15:
ca:c4:a7:48:6f:75:c0:c2:72:d6:79:0e:c0:fd:d6:23:2a:d8:
f7:e1:be:7f:9d:b7:46:91:20:84:19:82:36:36:19:25:cf:7c:
58:14:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:28:37 2026 by rpki-client