Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: F4PPG4nghJ2yu9vdIr4Yvw0J7C+jyaV9KTI28mlfxQE=
Subject key identifier: C9:9C:22:78:C9:B0:0E:F8:31:06:50:E9:F4:E6:0A:18:64:00:E0:DE
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 019D25F152BC805E2F6CA2DA575E7A381CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 17:01:05 +0000
Manifest this update: Wed 25 Mar 2026 17:01:05 +0000
Manifest next update: Thu 26 Mar 2026 17:01:05 +0000
Files and hashes: 1: Uq_lgf22CyRPTLlDLpseABSp5Z8.roa (hash: ZxjPQAprtj0pbHDEH1/wBuxrsT7248o1k1AiheIh8sE=)
2: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: iO/Nws8SGYA3BpTaKVwbE9wyHs1R8QoDxpefKfqMeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:52:bc:80:5e:2f:6c:a2:da:57:5e:7a:38:1c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Mar 25 17:01:05 2026 GMT
Not After : Mar 26 17:01:05 2026 GMT
Subject: CN=c99c2278c9b00ef8310650e9f4e60a186400e0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:3d:4a:65:9c:01:cb:88:f3:25:61:fc:af:
e5:61:90:67:39:35:02:96:82:8c:16:6f:ec:e7:44:
e4:7b:90:d9:05:20:d0:ff:ad:f6:3a:5a:66:69:af:
48:1f:ad:4e:88:0f:e2:6d:ce:cb:00:ef:e7:15:55:
12:88:0e:11:a6:f8:66:f7:1a:9c:0f:7f:07:94:9e:
bc:85:e2:41:25:4e:f8:24:c9:3c:ed:18:3c:4c:ea:
e0:98:a8:a1:38:be:eb:5a:74:50:f9:55:3e:0c:ac:
09:fe:3d:e8:02:b1:a8:04:5c:22:28:f9:89:d4:83:
d3:f3:6f:53:d4:f2:b3:90:61:e5:13:54:ca:cf:8d:
92:af:a4:cf:23:dc:10:96:d4:eb:5c:16:66:02:63:
19:52:5f:26:ec:c6:b4:09:97:26:aa:15:4e:6d:7d:
50:4d:75:56:a1:9a:bc:f8:39:1a:f0:cd:0b:8f:b2:
48:35:f2:7c:50:ab:97:21:26:8f:cf:85:96:6e:c5:
2a:0c:9a:b2:c1:2b:34:f4:79:41:b3:12:bd:bc:dd:
33:dc:e7:b4:2f:3a:70:e5:40:88:ad:9d:e2:62:79:
49:2a:6a:52:55:7d:77:9b:d2:f8:64:15:83:e9:fd:
d0:ac:40:08:e2:05:3c:ba:fb:91:5e:73:a5:24:d7:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9C:22:78:C9:B0:0E:F8:31:06:50:E9:F4:E6:0A:18:64:00:E0:DE
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:df:56:70:7e:93:e3:f5:8e:c0:86:d7:11:33:bb:0d:77:58:
04:f5:50:11:55:0d:cd:51:f0:ac:9c:80:67:28:5c:cf:83:1e:
ca:7c:2b:d7:fa:d8:41:7c:a8:3c:0e:de:4e:85:76:11:f5:a5:
79:47:ac:18:2c:2b:06:bb:21:bf:e4:e4:18:32:f5:6d:ac:b9:
91:c3:e8:d3:d5:c6:64:c8:20:a6:d0:72:d0:79:ff:c3:21:e3:
d2:b9:15:64:2f:8b:e4:29:85:62:73:aa:77:b3:02:bb:dd:5e:
39:f2:c3:2d:0f:a9:95:21:b4:52:07:24:35:00:6a:bc:0e:aa:
a1:cf:a4:79:60:5b:ac:c6:8f:3e:b7:02:99:c2:ec:bd:17:70:
61:aa:2f:3c:71:a0:22:c4:69:80:16:bb:f4:82:b5:9d:8a:ce:
d4:2a:4f:a7:75:07:8f:00:ac:1f:6b:2e:9a:f9:e4:02:cf:59:
81:30:ac:e9:ed:a6:f4:fa:7b:0a:db:c7:e1:4c:4b:e7:a6:04:
5c:03:db:88:38:ff:b0:dc:6a:d2:ef:69:b1:aa:8b:8b:5f:21:
0b:c3:87:99:d3:71:0b:11:84:eb:1d:11:6a:8e:e0:39:bd:a4:
8d:96:37:63:fa:02:07:5f:ec:34:38:45:85:2e:04:ab:8b:4a:
eb:67:e7:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8VK8gF4vbKLaV156OBzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDAwMDEwMWFkMzkzY2FkZjdmYzhmZDYzZGFhZDNjNmRh
ZTEyNGYwHhcNMjYwMzI1MTcwMTA1WhcNMjYwMzI2MTcwMTA1WjAzMTEwLwYDVQQD
EyhjOTljMjI3OGM5YjAwZWY4MzEwNjUwZTlmNGU2MGExODY0MDBlMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF89SmWcAcuI8yVh/K/lYZBnOTUC
loKMFm/s50Tke5DZBSDQ/632Olpmaa9IH61OiA/ibc7LAO/nFVUSiA4Rpvhm9xqc
D38HlJ68heJBJU74JMk87Rg8TOrgmKihOL7rWnRQ+VU+DKwJ/j3oArGoBFwiKPmJ
1IPT829T1PKzkGHlE1TKz42Sr6TPI9wQltTrXBZmAmMZUl8m7Ma0CZcmqhVObX1Q
TXVWoZq8+Dka8M0Lj7JINfJ8UKuXISaPz4WWbsUqDJqywSs09HlBsxK9vN0z3Oe0
Lzpw5UCIrZ3iYnlJKmpSVX13m9L4ZBWD6f3QrEAI4gU8uvuRXnOlJNchpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmcInjJsA74MQZQ6fTmChhkAODeMB8GA1UdIwQY
MBaAFIpAABAa05PK33/I/WParTxtrhJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtBQUVCclRrOHJmZjhqOVk5cXRQRzJ1RWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iMjdiZDAtM2QzOS00ZDc4LWFhMmMt
MWYzY2NmYTYxYWFjLzEvaWtBQUVCclRrOHJmZjhqOVk5cXRQRzJ1RWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iMjdiZDAtM2QzOS00ZDc4LWFhMmMtMWYzY2NmYTYxYWFj
LzEvaWtBQUVCclRrOHJmZjhqOVk5cXRQRzJ1RWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtN9WcH6T
4/WOwIbXETO7DXdYBPVQEVUNzVHwrJyAZyhcz4Meynwr1/rYQXyoPA7eToV2EfWl
eUesGCwrBrshv+TkGDL1bay5kcPo09XGZMggptBy0Hn/wyHj0rkVZC+L5CmFYnOq
d7MCu91eOfLDLQ+plSG0UgckNQBqvA6qoc+keWBbrMaPPrcCmcLsvRdwYaovPHGg
IsRpgBa79IK1nYrO1CpPp3UHjwCsH2sumvnkAs9ZgTCs6e2m9Pp7CtvH4UxL56YE
XAPbiDj/sNxq0u9psaqLi18hC8OHmdNxCxGE6x0Rao7gOb2kjZY3Y/oCB1/sNDhF
hS4Eq4tK62fnwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:53 2026 by rpki-client