Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
File: ikAMEXs2e5IxswUvpRV8OaXgxJs.mft (raw, json)
Hash identifier: UsV0h1YrLv9NQrwhJH5xokoOCQfw5/U9xLCnidBS60Y=
Subject key identifier: FF:22:E3:A9:4F:3D:73:A9:27:EE:51:EE:50:79:7D:8A:E7:E9:FF:AB
Authority key identifier: 8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
Certificate issuer: /CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Certificate serial: 01A0F7C547A251B005208CF42EDF7662549F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
Manifest number: 0304
Signing time: Thu 01 Oct 2026 14:01:36 +0000
Manifest this update: Thu 01 Oct 2026 14:01:36 +0000
Manifest next update: Fri 02 Oct 2026 14:01:36 +0000
Files and hashes: 1: 7l8rYrP6IdaEJaaqwY0VbkiMENU.asa (hash: 9FhE+V62Snn3q2qvvthgQiUIfihNch/hed3BR1KfHyA=)
2: ikAMEXs2e5IxswUvpRV8OaXgxJs.crl (hash: babc0QvBlFwGFB3jJDIl5Zph6Ayu9kwVFK6sYKXcj5I=)
3: x9WwTsf6oq2Wm1sx344wAY3kFgk.roa (hash: HTpECY59VY6PDNF6YftRP3Eef57aiba0Z1IIXlvm9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:c5:47:a2:51:b0:05:20:8c:f4:2e:df:76:62:54:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Validity
Not Before: Oct 1 14:01:36 2026 GMT
Not After : Oct 2 14:01:36 2026 GMT
Subject: CN=ff22e3a94f3d73a927ee51ee50797d8ae7e9ffab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a4:23:52:c0:c9:79:f2:74:6a:c3:02:8d:1c:
94:ea:25:16:27:78:f9:c5:f6:53:8c:4c:f1:cc:d1:
0c:21:be:59:72:e4:d5:36:63:60:41:01:09:74:a5:
34:f4:14:1c:aa:4b:73:c7:fd:c7:5c:cc:51:49:cb:
66:84:44:45:fa:7e:59:19:60:29:af:83:a9:04:0d:
20:74:8d:1a:29:91:07:09:6f:ad:57:82:03:4e:8f:
b7:b3:8f:a0:3a:e2:0b:4d:68:a0:5d:a7:9e:f0:07:
cc:df:7d:91:c6:0a:3b:7b:ee:b1:6a:5b:90:4f:ff:
2c:6a:3b:65:99:9a:1f:8f:b5:54:48:80:45:f6:75:
28:22:db:a0:c1:41:ea:52:92:ef:3c:a8:29:c7:ba:
4f:07:2d:35:49:30:61:d6:66:df:2c:07:66:76:f3:
33:24:d3:df:d8:77:46:6b:91:03:b7:fb:fd:39:29:
16:27:2e:f2:43:76:72:ee:be:fd:6e:ca:c9:8d:87:
ea:88:62:af:d0:47:08:13:0b:1c:d1:78:e0:3d:b2:
9b:3f:ad:96:55:f5:02:c8:d6:1d:fd:d9:cb:ea:63:
04:04:b4:22:88:fb:1e:59:3a:da:4e:7f:71:7f:04:
3c:e3:aa:56:6c:81:76:f6:ec:82:b0:42:2f:84:3c:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:22:E3:A9:4F:3D:73:A9:27:EE:51:EE:50:79:7D:8A:E7:E9:FF:AB
X509v3 Authority Key Identifier:
keyid:8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:80:14:79:ec:e1:3a:16:1c:5a:62:cd:3c:84:95:ca:c7:d3:
ad:3a:85:1a:cd:c1:43:c9:e1:70:de:85:87:4f:eb:f5:fc:f5:
5a:13:e7:0d:27:99:c3:6b:f3:d4:6d:b3:31:a9:6e:c1:a9:67:
83:06:a4:b6:c9:d8:78:a3:d3:9b:8d:13:33:3a:b3:23:b5:eb:
e2:bc:ac:9e:b0:74:da:8f:cc:53:82:c2:e6:fb:e6:ba:2e:e0:
24:b3:a3:b4:17:f2:d8:78:1e:39:35:9a:73:48:15:08:3d:08:
c0:19:68:11:9b:62:e4:67:dd:d2:10:32:94:ec:37:43:ec:65:
35:65:cc:98:50:13:1f:a5:0c:78:53:89:60:2c:e8:8e:ce:64:
46:07:1d:37:b5:08:27:3e:9a:f6:00:f2:09:0e:9d:2e:c7:8f:
e1:54:1e:e9:3f:d0:e2:e6:ab:b3:c8:cf:0b:f3:fb:47:a1:5c:
96:47:5d:84:a0:c9:46:c0:cc:1b:b7:fa:0d:66:31:f4:63:49:
eb:c1:59:57:b5:14:f5:86:4a:58:a7:23:ca:de:44:ca:50:49:
e8:95:55:a7:82:d7:db:fa:af:c0:12:30:43:a1:90:ee:96:06:
3d:20:74:85:e8:9f:9c:31:82:50:eb:fe:80:e7:f0:f6:84:57:
13:56:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:50:07 2026 by rpki-client