Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: IcqtinUhzv6zuXGsi+bnxOwBlZl0uOQO3dT5v1HgOec=
Subject key identifier: E0:AC:9E:EC:8D:A4:01:7E:17:2B:87:D2:E8:9D:01:BC:40:C8:CF:C1
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 019E20FFB37D446117B6F7689819F39C7CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 11:01:28 +0000
Manifest this update: Wed 13 May 2026 11:01:28 +0000
Manifest next update: Thu 14 May 2026 11:01:28 +0000
Files and hashes: 1: Uq_lgf22CyRPTLlDLpseABSp5Z8.roa (hash: ZxjPQAprtj0pbHDEH1/wBuxrsT7248o1k1AiheIh8sE=)
2: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: lrsZ13CH9Ay1XgvyJMw8qD1+Lj1ItXwzzz8ZczMzygE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:b3:7d:44:61:17:b6:f7:68:98:19:f3:9c:7c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: May 13 11:01:28 2026 GMT
Not After : May 14 11:01:28 2026 GMT
Subject: CN=e0ac9eec8da4017e172b87d2e89d01bc40c8cfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:9f:0a:a1:4a:03:f0:4e:0f:c8:48:fe:d1:
89:10:e0:8d:69:e5:c6:02:fe:b1:3a:47:05:86:63:
9f:0f:f2:57:69:7d:6a:5c:7e:84:2e:8c:a8:c4:4e:
17:c4:6f:7c:3f:bc:70:70:84:9c:41:c0:90:e1:52:
99:5e:28:1e:61:94:22:42:a0:67:f8:ac:e1:4a:db:
0d:14:53:25:b2:c0:2a:fc:33:be:e0:ad:4e:b8:23:
62:6d:e2:19:25:e8:01:3f:e4:26:a9:99:33:9b:5d:
9c:75:62:79:37:f6:ec:8c:6d:8f:73:a4:5c:11:5a:
35:80:0a:c2:0a:c5:70:01:a0:29:63:ee:77:96:19:
d6:b6:b3:b0:f2:f7:a6:4a:16:88:3a:9b:a0:7a:6f:
4c:23:8a:61:1f:e0:aa:8e:76:89:c8:bc:92:38:ae:
83:3f:fd:88:be:2c:56:9d:4e:e2:05:36:9b:12:16:
24:ce:1c:ff:09:0f:b7:93:73:13:db:a8:71:b4:92:
e9:28:4f:30:a1:a3:c7:e4:6c:a9:b7:86:60:a1:a0:
e9:4e:f7:1b:54:19:85:7b:59:92:05:f1:b6:b3:92:
5a:3d:80:61:5f:18:cd:f3:d5:96:f7:67:c9:3d:32:
4b:07:8d:80:3a:21:fa:52:19:6a:56:53:d6:d9:d0:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AC:9E:EC:8D:A4:01:7E:17:2B:87:D2:E8:9D:01:BC:40:C8:CF:C1
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:90:39:7d:52:e3:59:b7:45:a0:78:1c:67:f6:3f:67:eb:68:
c3:92:5d:27:05:1b:45:68:29:24:02:9e:1f:89:1c:2d:19:7d:
f4:e8:3a:1c:9b:5e:b8:0e:b9:c8:3a:bb:a3:00:e7:24:e2:3c:
cb:0d:b7:50:cd:03:ca:59:3e:c9:b3:5c:fa:65:25:20:44:c1:
5b:3a:7e:ea:cd:1c:0c:65:c8:28:98:0d:4c:56:4b:36:66:41:
b1:78:7f:d0:0b:62:b7:06:cb:dd:eb:ca:eb:99:b1:96:9d:7b:
15:56:17:73:f3:96:71:f7:d6:d0:2d:5a:69:22:df:e3:c4:18:
e5:7b:3a:1f:85:ed:25:81:57:32:e4:51:52:c1:97:c5:e2:05:
d8:d2:e7:3a:6a:b6:c0:53:7e:01:83:62:f3:57:c6:b6:f2:d5:
6f:8d:e4:c8:16:40:e4:ba:c5:63:01:46:60:20:6b:03:db:1a:
0f:62:e4:bf:c6:49:a7:7c:09:b0:80:50:72:87:4e:ff:5d:bc:
4a:d3:24:6c:aa:57:c3:b5:bc:6d:6d:a6:2f:1d:de:db:6c:80:
77:56:4c:c2:45:3c:9e:59:35:7c:c1:bf:0c:8c:eb:bc:ea:71:
f1:fb:2c:6e:5b:fe:79:f3:55:e7:36:9b:74:52:34:ea:23:bd:
fe:cb:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:38 2026 by rpki-client