Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
File: IkRK1QtOfbbWPJiQF9DlknSV52s.mft (raw, json)
Hash identifier: f3gKfU0NEjd8m8NG6YVgyllDTQ6e4GS9fPpjChuEXlk=
Subject key identifier: 02:EA:04:B7:4B:3D:A0:25:9B:FC:00:BA:B5:C4:79:3C:77:A4:DA:7E
Authority key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
Certificate issuer: /CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Certificate serial: 019E1E3607BC0D61721162D85C482167F284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
Manifest number: 0160
Signing time: Tue 12 May 2026 22:01:57 +0000
Manifest this update: Tue 12 May 2026 22:01:57 +0000
Manifest next update: Wed 13 May 2026 22:01:57 +0000
Files and hashes: 1: 0UJ55DUEjeibc7wTso1_f6VUnhc.asa (hash: FH/6k5/NmJrDnuK/OxObcfgW++VOBxemcPQj9UKf598=)
2: IkRK1QtOfbbWPJiQF9DlknSV52s.crl (hash: jBRx9QgsFGUtrF98wD+CLb/aB8pig9j/orotwfIxmqI=)
3: psWf16-euXoZZyipKgg4GGHcKWo.roa (hash: 9Dq5TbddVkCgvKuTdX4uUTRcMjOGR2syGrgqitoMwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:07:bc:0d:61:72:11:62:d8:5c:48:21:67:f2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Validity
Not Before: May 12 22:01:57 2026 GMT
Not After : May 13 22:01:57 2026 GMT
Subject: CN=02ea04b74b3da0259bfc00bab5c4793c77a4da7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:dd:6f:7a:48:8e:30:1c:4e:96:11:e9:3e:
4c:d2:e7:aa:41:76:a9:ca:2a:11:93:af:67:a4:94:
1e:83:7d:69:ff:95:8a:da:24:90:e5:5c:be:96:8e:
43:ec:79:6e:e0:3c:e2:9f:1e:5a:2d:24:67:45:bc:
f7:8e:85:0b:9e:f7:1e:eb:46:31:99:b2:9a:bd:e9:
55:66:f4:30:56:5f:d4:b9:01:90:b2:61:8b:36:26:
9e:02:61:3a:8e:62:ae:c6:be:9a:19:a2:79:b0:38:
4b:60:ec:ff:b7:07:71:36:f0:44:30:51:49:ce:83:
75:22:dc:93:4d:c2:43:9e:1c:11:da:ab:f7:84:96:
a7:df:2d:f1:b4:aa:ce:5a:3e:52:71:8e:36:b7:47:
f9:a2:ad:e8:0b:90:56:7f:d7:2a:a9:9d:6b:71:39:
be:e3:bb:20:64:65:dd:29:1f:b4:b4:7c:f1:9a:e1:
34:d5:68:4e:43:5f:d7:b2:54:ea:dd:4a:4d:8b:b7:
d4:58:6f:d9:9b:a9:c9:55:0e:0f:47:41:06:00:6e:
e9:c1:71:88:fa:6c:e2:7a:93:3e:2f:e5:c8:b1:be:
b7:49:ab:14:93:09:b2:41:bb:b1:f3:cb:50:a6:54:
60:41:bc:01:93:cd:5e:6c:80:f0:ef:0d:f3:8f:29:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EA:04:B7:4B:3D:A0:25:9B:FC:00:BA:B5:C4:79:3C:77:A4:DA:7E
X509v3 Authority Key Identifier:
keyid:22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a9:b4:94:0e:17:cb:3d:cd:e9:29:96:bb:ea:73:48:8e:68:
6a:d7:60:62:db:6a:3d:29:74:34:1e:a5:9e:86:cb:90:0e:8c:
24:94:37:31:ef:b0:f8:1a:7c:2a:0d:0a:32:6f:ce:b2:d3:24:
b9:c1:40:51:fc:31:73:ac:aa:30:a6:97:35:bc:88:1c:b9:74:
15:db:d3:fc:20:7e:fd:c5:e6:48:88:17:14:e8:bc:48:9e:5b:
97:e8:66:10:7a:96:75:37:0c:bd:cb:b0:fd:c6:ff:bc:93:54:
f9:ab:e9:3b:fe:2b:ee:e3:40:ee:b9:ec:bc:b1:ea:52:9b:d2:
b2:ed:a4:0d:d6:5f:06:24:56:af:57:e0:20:eb:0a:0f:19:1b:
68:be:32:dc:7e:7a:da:e7:92:d6:24:6b:61:0c:ac:d3:47:df:
6d:f0:3d:a2:cd:af:4c:c0:38:bb:fe:86:ae:7c:83:ed:44:61:
50:63:f2:65:19:99:4b:e8:15:8c:40:61:7c:5a:fa:72:cd:1e:
cb:9d:20:9b:70:ca:b4:17:b1:4c:b8:b0:67:30:0f:ea:59:e5:
dc:fa:57:4e:31:0a:41:a0:4e:7c:1b:ca:e0:c1:4a:ad:f1:14:
56:29:0d:6e:ca:eb:26:10:20:63:8e:af:5f:89:25:6f:5b:1f:
20:fb:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:23 2026 by rpki-client