Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
File: ikAMEXs2e5IxswUvpRV8OaXgxJs.mft (raw, json)
Hash identifier: gGjsdGCN+ldU2IPbJcp8L314rMdAINPbhGQs1vtwBk4=
Subject key identifier: 1C:BC:C8:45:B4:62:B5:D1:41:B5:BB:49:A2:5F:82:EB:21:62:E9:81
Authority key identifier: 8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
Certificate issuer: /CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Certificate serial: 019D33AD405056F76C592F596EC52B780629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
Manifest number: 0110
Signing time: Sat 28 Mar 2026 09:01:25 +0000
Manifest this update: Sat 28 Mar 2026 09:01:25 +0000
Manifest next update: Sun 29 Mar 2026 09:01:25 +0000
Files and hashes: 1: ikAMEXs2e5IxswUvpRV8OaXgxJs.crl (hash: 24HcIvxm4vBQ2zggah4fao32NfXD2Hg8/aKeonNXS/E=)
2: x9WwTsf6oq2Wm1sx344wAY3kFgk.roa (hash: HTpECY59VY6PDNF6YftRP3Eef57aiba0Z1IIXlvm9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:40:50:56:f7:6c:59:2f:59:6e:c5:2b:78:06:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a400c117b367b9231b3052fa5157c39a5e0c49b
Validity
Not Before: Mar 28 09:01:25 2026 GMT
Not After : Mar 29 09:01:25 2026 GMT
Subject: CN=1cbcc845b462b5d141b5bb49a25f82eb2162e981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:a7:ac:53:f6:c2:d5:4e:2e:36:ab:69:30:
69:f3:c3:5d:80:3a:7c:d7:12:a1:b8:76:7c:35:15:
6e:14:6f:66:b0:77:5e:4e:50:26:6b:6d:8a:23:79:
5b:32:b3:9c:87:31:02:8a:17:69:f9:61:b8:da:33:
3c:28:f0:2c:74:b8:07:93:af:66:f0:cd:f3:03:a6:
c4:8b:84:07:ba:06:71:15:1e:7d:81:68:3e:e2:6c:
a0:72:6d:76:03:15:98:9a:06:89:52:09:fd:41:7a:
de:ca:40:96:d4:db:a5:10:6c:a4:bb:bf:5b:b0:a6:
26:e5:5e:2f:a2:15:43:d5:af:b7:51:79:41:16:97:
aa:3c:ec:99:f9:84:be:78:46:36:8e:d2:39:93:38:
85:1e:d7:eb:8c:4c:e3:27:ad:11:fd:98:cf:9e:09:
16:24:17:d2:f1:51:11:3c:a3:8c:89:ac:c7:0d:62:
d8:e8:0e:cc:a4:3b:82:ee:fc:da:38:b2:15:2b:ad:
51:ef:7c:eb:2e:bb:75:d0:7d:f9:c4:df:48:11:60:
69:6a:10:45:95:3e:97:ad:83:69:a8:74:a8:8e:9c:
c7:f1:1c:b3:67:c7:d9:f1:8c:d0:c8:e8:5b:e4:ea:
f8:ef:b7:7e:81:2d:20:ce:e6:73:11:f9:9e:d1:37:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BC:C8:45:B4:62:B5:D1:41:B5:BB:49:A2:5F:82:EB:21:62:E9:81
X509v3 Authority Key Identifier:
keyid:8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fb:71:fd:a8:15:8c:ba:da:c4:bc:72:dd:97:d6:1e:ea:6f:
b1:e5:6f:9b:0f:fc:78:d7:89:3e:56:0b:44:f4:6a:7f:c9:79:
c4:e5:88:7e:56:df:73:5d:0f:87:04:3b:77:69:4e:3e:81:b6:
09:6b:3b:57:e0:bc:57:de:30:4f:25:3c:b7:21:8a:60:78:52:
70:b6:f3:a3:86:31:a7:a7:72:d6:90:70:8f:59:40:72:1f:4a:
2f:5f:ad:68:25:5e:42:f0:ca:e5:f2:43:b3:bc:63:5f:27:d4:
2e:88:ed:19:39:82:e0:3a:47:3d:35:5f:a4:a2:0b:7d:fd:c0:
77:b5:66:f3:b4:e6:7b:ee:d4:59:e6:b2:62:39:08:92:b1:96:
a3:d9:c3:cb:9e:45:8b:33:2e:1c:e8:ee:b2:04:1e:4f:dc:37:
9b:dc:a6:aa:58:47:c2:4f:8f:2c:2a:32:5d:c3:d1:bb:27:d1:
11:7f:71:2c:03:16:17:eb:62:22:af:8d:89:16:74:e5:ed:43:
a4:03:5e:ab:02:03:40:56:5c:e7:28:c7:93:61:6e:fa:c6:89:
df:dc:a7:73:f2:93:02:27:77:d9:21:b7:84:1b:45:57:3b:17:
cd:5c:85:86:2a:60:d2:5f:f0:fd:97:c3:9c:50:4c:aa:39:ff:
e7:f5:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:23 2026 by rpki-client