Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
File: IkRK1QtOfbbWPJiQF9DlknSV52s.mft (raw, json)
Hash identifier: eyqinW0nJYBJPKUna3KFtHnYRcUSTsRwgMNKG+9O61s=
Subject key identifier: 0D:FD:C2:87:B2:68:E1:4D:A9:6A:55:9D:3E:58:7C:74:B0:52:1C:23
Authority key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
Certificate issuer: /CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Certificate serial: 01A0D192DAEF13704D3A1D16F78C277138E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
Manifest number: 02C6
Signing time: Thu 24 Sep 2026 04:00:57 +0000
Manifest this update: Thu 24 Sep 2026 04:00:57 +0000
Manifest next update: Fri 25 Sep 2026 04:00:57 +0000
Files and hashes: 1: 0UJ55DUEjeibc7wTso1_f6VUnhc.asa (hash: FH/6k5/NmJrDnuK/OxObcfgW++VOBxemcPQj9UKf598=)
2: IkRK1QtOfbbWPJiQF9DlknSV52s.crl (hash: J97fUSaAbGfLmaZD5sBjX/fOJbTO06fZBvSkApBTvlY=)
3: psWf16-euXoZZyipKgg4GGHcKWo.roa (hash: 9Dq5TbddVkCgvKuTdX4uUTRcMjOGR2syGrgqitoMwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:da:ef:13:70:4d:3a:1d:16:f7:8c:27:71:38:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Validity
Not Before: Sep 24 04:00:57 2026 GMT
Not After : Sep 25 04:00:57 2026 GMT
Subject: CN=0dfdc287b268e14da96a559d3e587c74b0521c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:3c:96:ff:02:9c:be:f4:2c:f1:3d:16:a5:
4f:f2:78:28:95:4a:fd:15:e3:b6:b2:69:e4:96:cd:
11:f3:e9:3e:b2:f4:69:57:78:db:aa:93:23:e3:59:
06:51:18:27:99:ef:4f:c0:ea:42:93:f3:ab:c5:10:
a1:6a:f7:7d:63:86:b2:f9:4d:27:ea:fe:c2:bd:bc:
a3:a2:5b:0d:5d:7b:65:f3:23:6d:71:ba:4e:17:79:
07:40:2b:a2:15:6f:1e:e5:6e:16:05:9a:51:18:76:
d7:8d:70:01:37:eb:70:ec:fb:42:84:31:5c:1f:9c:
7d:87:6b:93:d9:89:51:ff:e0:0c:43:8c:f2:d2:5d:
0d:b7:39:03:cc:b2:ca:09:51:a4:44:db:e6:98:79:
97:8a:78:86:09:7b:7c:5e:4c:f8:fb:ec:11:7c:8f:
94:f6:c9:d7:c6:31:e4:ba:5b:2f:a2:68:0d:57:8a:
da:a5:60:e8:07:a0:74:42:4d:67:78:33:8c:4a:f8:
6f:72:6b:83:ec:c7:6e:f2:7f:39:bd:3d:3d:58:3f:
60:92:b8:6f:f0:76:8b:fe:82:b9:cf:ba:bd:d8:8e:
1c:27:f4:f4:3a:a6:10:5e:6f:63:29:05:53:9f:74:
0d:f5:cd:9a:99:9a:08:1b:bd:32:a2:83:db:b2:4e:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:C2:87:B2:68:E1:4D:A9:6A:55:9D:3E:58:7C:74:B0:52:1C:23
X509v3 Authority Key Identifier:
keyid:22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fa:52:38:ac:02:a2:8c:48:a9:9b:e1:e2:2d:28:de:6d:3a:
1b:a3:16:30:ad:1a:9d:5d:c8:ec:88:ae:a2:5a:af:1d:46:66:
fa:40:cb:7b:16:2e:66:4c:6a:f7:82:91:1a:5f:a7:56:6a:aa:
06:8f:93:b5:6c:a4:ef:7e:d4:74:cc:0d:24:22:9c:ee:82:ce:
bc:f7:c8:41:80:4b:e4:3d:5d:b4:a5:0b:93:61:37:63:9a:ef:
e0:ad:fa:db:15:ce:2e:ec:06:78:b0:c7:a9:f6:96:6b:af:4a:
e5:ab:ba:49:01:3e:a2:3b:1f:95:16:de:e2:40:d1:d0:6b:24:
c5:48:36:46:30:e9:e4:80:4e:30:c1:f8:54:3d:26:0f:e2:ce:
a0:64:a7:22:b5:52:79:c4:0d:c5:73:57:ba:66:b7:d4:11:4e:
13:74:c3:e0:93:2b:b6:07:f5:41:67:78:34:1a:20:3b:29:0d:
30:9e:09:fd:20:d5:ed:93:bd:3b:f6:74:7c:4a:47:4f:60:f7:
15:17:cf:ef:b8:37:02:6d:ea:31:5b:c1:2f:bc:2e:ea:34:05:
87:b4:5c:f5:21:3d:66:42:53:84:16:87:51:fb:41:46:57:11:
76:39:d8:02:75:d5:44:7c:68:6a:c3:44:7e:47:f3:0a:95:23:
b7:99:04:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRktrvE3BNOh0W94wncTjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNDQ0YWQ1MGI0ZTdkYjZkNjNjOTg5MDE3ZDBlNTkyNzQ5
NWU3NmIwHhcNMjYwOTI0MDQwMDU3WhcNMjYwOTI1MDQwMDU3WjAzMTEwLwYDVQQD
EygwZGZkYzI4N2IyNjhlMTRkYTk2YTU1OWQzZTU4N2M3NGIwNTIxYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFA8lv8CnL70LPE9FqVP8ngolUr9
FeO2smnkls0R8+k+svRpV3jbqpMj41kGURgnme9PwOpCk/OrxRChavd9Y4ay+U0n
6v7CvbyjolsNXXtl8yNtcbpOF3kHQCuiFW8e5W4WBZpRGHbXjXABN+tw7PtChDFc
H5x9h2uT2YlR/+AMQ4zy0l0NtzkDzLLKCVGkRNvmmHmXiniGCXt8Xkz4++wRfI+U
9snXxjHkulsvomgNV4rapWDoB6B0Qk1neDOMSvhvcmuD7Mdu8n85vT09WD9gkrhv
8HaL/oK5z7q92I4cJ/T0OqYQXm9jKQVTn3QN9c2amZoIG70yooPbsk4uvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA39woeyaOFNqWpVnT5YfHSwUhwjMB8GA1UdIwQY
MBaAFCJEStULTn221jyYkBfQ5ZJ0ledrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWtSSzFRdE9mYmJXUEppUUY5RGxrblNWNTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iNTY0NjMtNTllYS00OTRiLTg4MTYt
ZTAyMDIzZjEyMmU4LzEvSWtSSzFRdE9mYmJXUEppUUY5RGxrblNWNTJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iNTY0NjMtNTllYS00OTRiLTg4MTYtZTAyMDIzZjEyMmU4
LzEvSWtSSzFRdE9mYmJXUEppUUY5RGxrblNWNTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/pSOKwC
ooxIqZvh4i0o3m06G6MWMK0anV3I7IiuolqvHUZm+kDLexYuZkxq94KRGl+nVmqq
Bo+TtWyk737UdMwNJCKc7oLOvPfIQYBL5D1dtKULk2E3Y5rv4K362xXOLuwGeLDH
qfaWa69K5au6SQE+ojsflRbe4kDR0GskxUg2RjDp5IBOMMH4VD0mD+LOoGSnIrVS
ecQNxXNXuma31BFOE3TD4JMrtgf1QWd4NBogOykNMJ4J/SDV7ZO9O/Z0fEpHT2D3
FRfP77g3Am3qMVvBL7wu6jQFh7Rc9SE9ZkJThBaHUftBRlcRdjnYAnXVRHxoasNE
fkfzCpUjt5kE2A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:38:31 2026 by rpki-client