Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier: IpU5m8bOVjKz0b75AIVxZwuzFKSyE2Kc464j6tTx5PY=
Subject key identifier: 14:CD:C8:9B:89:3F:CD:F3:17:DC:76:43:87:7D:A4:59:E5:2A:91:02
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 019D2695EE6751C172AE4B31768D0F713983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: 43pN-WIjxrlIQNotsgt3YfTiHeI.roa (hash: 1+7ecs4b6WUw0OVverAERc7DZquSqzhJFqQu6TpVJ2A=)
2: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: DNUo0PO0rBRfR9ofkxJoQrunN7hqESqhWcgYJCWq2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ee:67:51:c1:72:ae:4b:31:76:8d:0f:71:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=14cdc89b893fcdf317dc7643877da459e52a9102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:74:7b:f4:68:d9:7c:a1:c0:06:a5:6a:34:4e:
bd:a8:0c:b4:04:f6:da:1b:ab:3f:48:85:9f:8c:8b:
d4:51:5e:47:13:54:40:cd:7b:b9:a0:85:57:55:90:
ec:c4:d9:86:dc:42:ab:19:3d:22:1d:c8:ad:13:fc:
cb:ce:2f:61:55:92:22:2f:64:33:11:61:96:6a:69:
93:a6:bb:fb:fa:a2:82:06:7b:f1:61:2b:d2:89:01:
23:5a:bd:b8:64:3f:82:d5:f1:c1:92:0e:29:13:07:
00:9b:ba:b4:79:cb:19:65:1c:ba:87:6a:e9:75:1d:
5c:85:8c:0e:64:d5:45:4a:3d:d9:5d:9e:2a:fc:e9:
a6:e2:fd:78:25:86:52:8b:db:ac:4c:ce:2b:7f:03:
69:bc:38:a1:cc:a6:dc:e1:cc:92:59:1a:74:e5:62:
53:8f:5e:2f:ac:2f:89:4d:f8:1b:92:e7:2e:35:19:
9a:0f:9f:65:3d:f5:70:87:85:f9:21:7b:69:50:9a:
20:ee:28:c1:8c:29:84:b1:d7:a5:7f:d2:ae:d8:e8:
25:8a:5c:34:c6:64:db:b2:0b:1a:e3:15:de:6d:a2:
38:94:74:3c:e4:48:98:bf:12:3d:67:52:7f:85:df:
55:52:ec:ef:24:7c:35:42:47:f9:64:51:5f:4a:33:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:C8:9B:89:3F:CD:F3:17:DC:76:43:87:7D:A4:59:E5:2A:91:02
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:46:bf:48:ca:b1:27:cd:ec:44:29:78:c1:58:e7:07:22:fe:
83:44:67:28:9c:62:70:be:c3:e1:03:18:53:32:0a:cd:32:3d:
d7:b6:46:b1:2e:75:f4:81:ec:42:a6:62:92:25:db:8d:55:d8:
51:f6:49:c9:a9:ba:a2:19:e1:b0:89:aa:e9:e9:00:84:c9:af:
88:d3:8b:ed:cf:90:c0:0d:bd:b6:39:07:6b:95:ad:46:03:7d:
a8:43:d9:d4:bb:a7:e9:ab:74:6d:c2:41:1a:8c:54:01:fc:be:
f3:da:55:ce:00:6c:b2:ae:7a:69:e8:ca:c2:bf:a1:a4:7f:8a:
63:5d:02:44:4c:e5:b5:e0:ac:9a:fc:0f:f4:12:08:7a:e7:61:
8a:d6:21:a9:6e:82:39:7c:be:26:3b:8b:c6:9e:52:55:16:c0:
1e:98:b1:8e:2a:3a:b2:a6:e0:74:7c:b2:2a:1b:41:ce:d8:04:
b0:c8:3d:85:8d:b1:de:a3:c8:12:30:8c:fb:86:3b:11:df:39:
44:59:54:86:e9:43:4d:53:04:ea:69:2f:06:6b:40:40:5a:ae:
9d:80:5b:56:25:b2:56:6e:72:71:1e:f1:8e:ae:0a:04:5c:d0:
4a:bc:9f:bc:77:cd:46:bd:bc:e7:82:c0:23:ce:0b:47:2e:23:
2b:7e:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:39 2026 by rpki-client