Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json)
Hash identifier: B/R+kJAKc/iy5sAkVnR/P6sOWOoKc0u1FALLc6wD+Cc=
Subject key identifier: 30:D5:EC:D3:FF:5A:0F:74:A6:27:BE:3A:91:BC:D6:CC:79:F8:66:FA
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 01A0E3D061B474D64345852E87DA7E02CC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
Manifest number: 1875
Signing time: Sun 27 Sep 2026 17:01:19 +0000
Manifest this update: Sun 27 Sep 2026 17:01:19 +0000
Manifest next update: Mon 28 Sep 2026 17:01:19 +0000
Files and hashes: 1: AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa (hash: K8ES0stF0B9nVEj6mDlZTMrk2WtUAQbBdwAem6tOZGY=)
2: V3G71UC8xUJzfEK-hF2a1Yy949k.roa (hash: yY9pBQvp1vLjACvkKNCIEskOtDHt2fp1vqTKV4RgjCM=)
3: XuYhwk-vZ6eHT9NMXZQLHvYX3mk.roa (hash: BjmLFR3czcNpgH0BRh9yLVvvlaso2JNdlmTSCadoaH8=)
4: ZgTKdwUh3SurmRUa8dm-u_MWcXw.roa (hash: qRP4wuFNa16Ds9pfHaXqX+aH3Ub6klNpQNjHeuFx6D8=)
5: fzC-AcNh2yOJ_5dGUvrvfw9vsok.roa (hash: tSTIZaYoRGt64j2os/R+JCN+/UAvU/awUqy9sBJwtAc=)
6: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: YiRb8Baz+xjFjXyv88/QERGhkDCFP9zaTvHTw/LeYpo=)
7: q_lN0AMsr2Qj0y4K_NZe2rjNBPg.roa (hash: C6pfCVwE4cQONMTXJ4xVp576Td1nh/4UsOPJ8M0ylXo=)
8: tLU7_bzaau1tfdnsi8rr9NFZ168.roa (hash: 6yuhsyZZqvngC1bxHOsVAKXHySf91v1PlvKK7/v6/Ik=)
9: xpN5zraKiIDTkd918KKze_PLUR4.roa (hash: NFN27n7LM3oXIoVyd7siXk3IhtAWZMYT7ZhRr4tRlec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:61:b4:74:d6:43:45:85:2e:87:da:7e:02:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Sep 27 17:01:19 2026 GMT
Not After : Sep 28 17:01:19 2026 GMT
Subject: CN=30d5ecd3ff5a0f74a627be3a91bcd6cc79f866fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:94:e5:15:df:df:fc:b6:b1:6a:f3:0a:43:
03:bb:71:d6:ad:e5:20:55:84:86:e9:05:2a:8c:4e:
5e:92:f6:ee:44:40:92:81:84:b1:f2:0c:34:fb:e2:
23:da:66:cf:9b:d2:3b:99:6e:a5:e4:02:6e:8e:f4:
a0:a4:f8:84:7f:bd:12:92:8e:a3:0d:44:6d:28:b5:
3f:d2:67:3f:58:47:43:73:aa:3b:8a:32:91:fa:0c:
a4:fd:87:80:9b:d9:a8:f5:7c:66:45:0f:6b:04:e7:
7e:9b:6a:6d:bc:65:44:d5:29:26:54:c6:be:ec:9a:
28:b8:b6:84:7d:a8:8a:f5:cc:32:4c:3e:a8:f2:81:
70:66:14:e5:50:2d:ce:90:7d:67:fb:c7:3c:61:b8:
a9:e0:19:d9:b2:b0:b9:8d:80:47:82:88:d7:bb:53:
9b:c1:29:85:2a:04:20:a1:b0:73:33:21:14:52:2a:
82:34:95:a7:05:6b:76:db:23:28:95:28:b8:d8:d7:
9e:f4:1f:64:1e:bc:07:cd:5a:70:a6:77:ea:6a:69:
92:a2:59:a0:de:ea:2d:82:59:ee:01:93:cf:3f:3e:
10:ef:d8:f2:0f:df:97:3d:e1:c2:81:6a:c5:1e:ca:
b3:01:94:35:51:c5:02:0f:62:50:7f:5b:b4:08:38:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:EC:D3:FF:5A:0F:74:A6:27:BE:3A:91:BC:D6:CC:79:F8:66:FA
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7a:71:62:ab:f4:6f:3f:fb:e0:7e:36:00:ea:53:17:17:0f:
e1:d6:69:21:18:80:14:96:4e:93:17:8f:16:9c:7f:f7:8c:ba:
bb:36:30:e0:bc:38:b3:b5:a7:ca:d5:be:1a:30:b3:fb:ba:25:
21:c7:90:53:8a:55:bb:63:d8:9d:0c:05:31:d0:af:c2:98:15:
50:ea:27:58:b3:53:be:ca:70:08:d1:f6:83:be:d3:96:3f:b3:
fd:6c:3e:70:8e:b6:31:29:43:e9:a9:bd:43:7c:85:19:7d:38:
03:00:5a:fa:1f:22:03:d8:df:23:58:e5:24:dc:a4:4a:96:c9:
6b:16:f2:d6:ea:72:e6:cd:ec:f2:59:cc:26:96:47:29:52:83:
37:44:5b:3a:80:3b:4c:5c:79:d4:e6:a1:c5:a4:14:4f:da:2b:
1e:e9:ed:5c:a1:22:37:ea:70:99:0e:f4:8a:da:ac:5e:c8:04:
88:51:c5:7f:94:f2:66:1e:f3:ff:c3:9a:56:6f:5d:83:e8:fd:
82:12:2f:d1:60:af:1f:28:53:03:77:1f:36:1a:4c:f0:a7:33:
4f:c7:c8:5b:84:96:b3:55:ca:72:8c:b3:9a:42:55:6c:35:e8:
1a:68:bc:2e:64:57:b7:ca:6a:e0:a0:26:95:a9:fd:4b:d4:70:
b9:c8:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:33:18 2026 by rpki-client