Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: J/Ywi/Vb2zk9Ox3h9bvgFw+RKJu96L745GOwRY6mO1Q=
Subject key identifier: 0D:84:D0:EE:FE:88:A9:FA:18:D5:14:FF:DF:43:FA:CB:E9:E2:A2:03
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 01A1DD26D046D46FC63AC8366A61F8729083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 1164
Signing time: Sun 15 Nov 2026 03:01:10 +0000
Manifest this update: Sun 15 Nov 2026 03:01:10 +0000
Manifest next update: Mon 16 Nov 2026 03:01:10 +0000
Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=)
2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=)
3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: kKm+4jh+B1g00gmjWPizRN2YIj/3V+T36heL3Otf7Z8=)
4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:d0:46:d4:6f:c6:3a:c8:36:6a:61:f8:72:90:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Nov 15 03:01:10 2026 GMT
Not After : Nov 16 03:01:10 2026 GMT
Subject: CN=0d84d0eefe88a9fa18d514ffdf43facbe9e2a203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:73:70:f4:8f:45:52:0d:49:46:31:95:dd:
17:00:6c:9d:3a:1d:40:e0:35:fe:06:4a:7d:96:c2:
64:c4:30:3e:8c:6a:8b:c4:a1:4c:6c:56:d4:58:de:
fd:cf:8a:c4:5c:fa:e2:4b:b0:af:7e:fa:6e:06:13:
31:d4:d5:e8:39:f1:bd:32:a3:19:21:4f:c9:2c:69:
1a:76:1b:91:06:72:a4:b7:1c:ca:d4:b9:06:f4:f7:
f5:ee:47:0e:e9:9b:85:a2:98:81:55:a6:4e:80:84:
38:88:0d:71:58:7e:5b:85:09:18:04:d4:72:bf:bd:
99:bd:23:e8:3b:d2:b5:6f:19:42:1d:24:a1:c3:a8:
2f:9a:29:62:ba:77:8d:51:11:38:1e:30:6d:61:df:
09:25:d5:16:3e:30:1c:ba:91:58:95:4b:e3:33:c1:
4f:08:02:d4:fc:c1:b7:09:22:22:69:d8:9b:da:15:
f6:a2:ca:8c:0b:c8:d2:c5:05:35:fe:69:09:13:30:
d8:4d:df:ce:fe:ec:35:fb:0b:e9:e0:78:2b:ca:55:
f6:3a:45:c2:1b:c3:17:72:34:e9:88:c1:9e:62:60:
82:bd:2c:63:c9:45:95:0b:14:69:d1:9c:ce:4d:50:
21:16:79:eb:ac:59:fa:c4:fe:8e:bd:12:7f:ef:a2:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:D0:EE:FE:88:A9:FA:18:D5:14:FF:DF:43:FA:CB:E9:E2:A2:03
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ff:0f:ab:f1:12:c5:7e:61:4e:2b:a1:28:fa:c7:64:58:12:
19:bb:95:87:f2:69:21:f8:8d:cc:12:17:4e:e2:eb:be:cf:66:
c0:f1:f4:9e:16:a3:49:95:72:c9:4d:48:d9:d3:25:30:45:b2:
63:b6:f5:81:e9:11:5d:a6:a1:4d:9c:6c:43:dc:38:f4:66:1d:
b4:3b:68:b1:2a:3d:96:32:08:71:80:7e:c4:93:c8:03:b0:ee:
34:1e:8a:59:9c:a8:f6:cc:2c:e9:50:d8:97:18:50:fb:0b:cb:
cc:4f:e5:4c:7a:c2:a9:75:2a:de:f1:0e:88:f6:5a:26:1f:ed:
9c:9b:ee:e7:fc:29:c6:ae:ed:5f:7b:23:b1:f4:59:7c:78:35:
df:92:6d:01:0c:c0:f6:fb:36:ab:65:4e:88:fb:f5:c4:55:fb:
55:96:a0:89:6f:88:2f:d4:80:38:c6:33:43:60:44:76:04:4f:
fb:34:5a:0b:9e:15:6b:05:96:a2:05:65:c3:77:fc:ca:69:b7:
4b:ed:5b:be:fc:c8:2c:27:05:bf:fd:e7:db:7c:53:20:83:a7:
33:14:a2:a6:13:d2:ed:2c:ae:fa:a1:32:8c:2a:e8:63:2a:f7:
3a:02:14:17:c1:98:0a:98:1f:5a:38:54:ec:49:62:c9:ba:4b:
e3:d7:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:03:06 2026 by rpki-client