Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: ryYAvBWtaHY3/CRrxT3WEfN2kPT/pb8eoBunXwZ568w=
Subject key identifier: 9A:26:D9:16:45:64:ED:F6:E8:7D:EC:EF:2F:6F:27:34:CB:A0:62:EA
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019F92119636BFB4B4904EB540D3B35A747A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 1034
Signing time: Fri 24 Jul 2026 03:00:53 +0000
Manifest this update: Fri 24 Jul 2026 03:00:53 +0000
Manifest next update: Sat 25 Jul 2026 03:00:53 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: qxAh8SHRzlOpiurcprF/BQcwh6u2TXhbU4hVzfQSzfU=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:96:36:bf:b4:b4:90:4e:b5:40:d3:b3:5a:74:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Jul 24 03:00:53 2026 GMT
Not After : Jul 25 03:00:53 2026 GMT
Subject: CN=9a26d9164564edf6e87decef2f6f2734cba062ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:b5:13:50:8b:8d:f7:6d:bd:4c:3c:20:20:
d4:47:e3:dd:dd:d4:64:14:14:c5:26:6d:c9:be:d7:
f5:08:ee:9f:dc:09:54:63:cd:de:7b:dd:d1:21:e0:
7a:0c:66:b6:a3:bd:1c:1a:c6:71:b6:f7:64:78:21:
37:9c:8a:88:77:ec:e5:0d:09:2e:fa:41:ce:63:e4:
5b:8a:94:f6:9a:89:24:fc:e3:e9:90:0a:14:8c:26:
7a:54:d5:96:bd:c0:50:9e:00:e7:8f:7a:98:61:0d:
35:2a:dd:43:3a:cb:40:16:45:02:39:25:f3:e5:88:
ea:31:9e:94:65:87:69:45:3e:00:fb:96:89:35:a0:
c4:60:e9:07:57:5a:60:30:56:97:36:c9:24:57:94:
83:e1:7c:f6:79:f5:c2:e2:98:f7:59:94:eb:25:1e:
dc:52:c2:62:9e:06:c7:14:fb:01:00:f8:03:35:0e:
51:ca:e9:3f:f4:11:fa:a2:ab:81:e9:35:e0:06:6b:
42:0c:46:74:4e:57:47:bd:06:c7:11:26:7b:db:0a:
0f:89:80:66:c0:9c:9a:fb:ed:cf:e5:50:64:af:55:
fa:43:82:44:95:33:0a:f9:f6:c9:d0:9c:be:7f:70:
60:fa:f5:32:41:ef:05:f4:25:4d:d1:da:47:89:75:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:26:D9:16:45:64:ED:F6:E8:7D:EC:EF:2F:6F:27:34:CB:A0:62:EA
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:91:f3:22:cc:fb:75:b8:8c:b7:a4:08:86:04:04:50:7e:40:
c9:09:19:4f:7e:e3:04:13:15:15:50:bd:c7:c1:d5:07:dd:35:
57:84:b4:31:31:c5:38:7b:d0:5f:ee:2c:43:4f:9a:33:03:fd:
23:51:4a:50:61:d4:d8:67:8a:6b:db:cd:31:c1:ac:f4:f7:5a:
dd:64:9f:51:9b:cd:e7:3c:6b:cf:80:1e:b4:f5:b2:ac:87:03:
94:a8:33:de:47:15:6a:56:65:0c:74:dc:16:48:9d:de:0e:06:
4c:63:be:28:0c:23:63:c3:ba:62:ad:78:de:11:4b:e7:64:46:
71:97:b9:10:1a:69:cf:05:64:0d:d4:e2:64:f7:f5:0c:02:8b:
dd:4f:c2:2e:1e:05:45:38:0e:9f:b2:7a:6d:5a:e3:e8:3c:6a:
d4:3c:88:dd:d7:46:33:fe:cf:02:9f:41:80:50:00:bd:f6:b4:
9c:34:22:5d:c9:39:d4:7f:58:9e:7e:61:64:b1:37:42:dd:57:
74:0c:0e:61:c5:ba:6f:c1:22:e9:c5:05:9d:89:69:71:09:bd:
a0:ff:a7:45:f6:12:1f:8b:ee:78:82:2e:b4:bc:6e:97:49:58:
ed:3c:a9:49:d2:29:53:aa:d6:8c:d8:5a:4c:47:fb:6e:c9:a0:
55:0b:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:46 2026 by rpki-client