Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
File: iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json)
Hash identifier: wRQtaIfswI95Trn2NMvzwzdjT+QjWvk+EM/Hpn+Kt9U=
Subject key identifier: 32:6E:06:AB:E2:2E:38:A7:AC:11:F3:7F:BA:A4:A1:26:E4:A8:39:EF
Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Certificate serial: 019D28BBD8979C73ED9BC7FA490602774BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
Manifest number: 11EF
Signing time: Thu 26 Mar 2026 06:01:32 +0000
Manifest this update: Thu 26 Mar 2026 06:01:32 +0000
Manifest next update: Fri 27 Mar 2026 06:01:32 +0000
Files and hashes: 1: NMCu69roYebbta4TgeF6AUxwckA.roa (hash: ONrUSUgYIaBZ/uTENX+3YgLDxjUCXiWtMPwugRV2lg4=)
2: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: IuMrGhwraNAu1HMhPDmdtfxFp/4xHMYkR+V7MQxgbbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d8:97:9c:73:ed:9b:c7:fa:49:06:02:77:4b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Validity
Not Before: Mar 26 06:01:32 2026 GMT
Not After : Mar 27 06:01:32 2026 GMT
Subject: CN=326e06abe22e38a7ac11f37fbaa4a126e4a839ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:f4:8f:cd:b9:1b:20:db:cd:19:52:f5:67:
a2:9e:57:81:75:06:cc:0e:49:99:9b:52:77:fa:4e:
7a:b0:d7:12:31:b0:65:fb:9f:70:29:8c:e4:b8:81:
a2:1a:0a:82:da:84:24:26:0c:3b:e1:ef:e8:39:d1:
0c:99:79:b6:13:bc:c4:36:9e:f7:8a:30:89:1e:1e:
d8:18:70:f0:d8:f3:e9:3f:41:78:3e:74:3d:19:e0:
2c:92:b9:48:1c:a1:67:f1:0f:52:d3:e0:6d:ba:e8:
a3:72:d1:c4:b0:a1:d1:90:17:9e:1d:c4:d6:24:07:
09:83:15:ba:22:c2:99:af:f1:d4:cf:79:b4:aa:5d:
ca:38:a0:c5:bb:40:f3:30:f9:8b:54:c8:66:a6:6c:
aa:6f:23:e5:19:ee:bb:e2:47:91:04:52:a1:bf:62:
44:7b:cc:40:14:d0:f8:3b:1f:36:f4:a9:7b:1f:90:
d2:44:d2:d7:06:23:db:00:d8:fe:24:de:b8:35:83:
e0:70:ac:fc:45:06:c1:2d:ae:e4:b9:e2:8e:55:a3:
52:fc:c6:cf:4d:c9:0a:f2:61:39:45:58:91:6e:cf:
f6:27:09:67:8c:95:86:1f:e6:6b:41:07:3d:9c:f3:
b2:d6:74:8e:c5:b9:e8:0b:e3:3d:e2:1b:d3:f0:f0:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6E:06:AB:E2:2E:38:A7:AC:11:F3:7F:BA:A4:A1:26:E4:A8:39:EF
X509v3 Authority Key Identifier:
keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d1:83:ed:c2:f8:04:05:c6:33:87:f1:34:0e:19:fc:67:ad:
c6:5f:c6:02:1c:cb:4b:43:34:e8:d3:fd:cf:a7:33:eb:13:78:
88:89:ef:33:f8:8d:9a:56:a4:7d:8b:d7:36:76:a6:b4:40:86:
38:e2:f8:5b:b4:05:75:bd:80:fd:53:a4:e9:92:df:c3:04:e0:
26:1c:c4:1d:b6:2a:d1:01:44:16:a8:54:0d:3e:86:a4:0e:90:
3d:24:82:db:d7:ec:3c:20:f7:0e:6b:78:f4:d0:5b:de:94:3e:
73:69:b7:93:5f:56:eb:54:21:34:66:e9:19:28:bd:11:4a:88:
84:bd:9b:81:ba:34:29:25:84:55:9d:48:f2:6a:b0:a4:97:b2:
f0:5d:47:87:1e:cf:ae:5d:ca:39:96:4b:05:df:d9:2d:2a:b7:
88:63:80:ea:ad:b8:39:22:09:e3:3c:d1:99:eb:52:2d:51:c7:
b8:7c:1e:43:d3:e2:b6:f9:c4:fc:72:f6:08:0a:07:3e:59:ae:
d7:4e:28:5f:76:82:c3:81:0a:3a:65:39:d5:01:68:0f:2c:9c:
51:46:eb:c9:03:85:93:c4:64:59:68:9b:18:7c:4f:f2:93:e3:
73:f8:ac:33:a4:85:83:fd:6a:eb:3d:2e:39:97:a9:71:e0:78:
b5:e1:02:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou9iXnHPtm8f6SQYCd0vWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTU1OWRjZGQ1YmM0YjY2Y2IyNDk2ZjJlNmZiMGU4Zjk1
NGFhZWIwHhcNMjYwMzI2MDYwMTMyWhcNMjYwMzI3MDYwMTMyWjAzMTEwLwYDVQQD
EygzMjZlMDZhYmUyMmUzOGE3YWMxMWYzN2ZiYWE0YTEyNmU0YTgzOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BT0j825GyDbzRlS9WeinleBdQbM
DkmZm1J3+k56sNcSMbBl+59wKYzkuIGiGgqC2oQkJgw74e/oOdEMmXm2E7zENp73
ijCJHh7YGHDw2PPpP0F4PnQ9GeAskrlIHKFn8Q9S0+BtuuijctHEsKHRkBeeHcTW
JAcJgxW6IsKZr/HUz3m0ql3KOKDFu0DzMPmLVMhmpmyqbyPlGe674keRBFKhv2JE
e8xAFND4Ox829Kl7H5DSRNLXBiPbANj+JN64NYPgcKz8RQbBLa7kueKOVaNS/MbP
TckK8mE5RViRbs/2JwlnjJWGH+ZrQQc9nPOy1nSOxbnoC+M94hvT8PBrHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJuBqviLjinrBHzf7qkoSbkqDnvMB8GA1UdIwQY
MBaAFIilWdzdW8S2bLJJby5vsOj5VKrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTct
OTIwZDJhNjIwN2E0LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTctOTIwZDJhNjIwN2E0
LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9GD7cL4
BAXGM4fxNA4Z/Getxl/GAhzLS0M06NP9z6cz6xN4iInvM/iNmlakfYvXNnamtECG
OOL4W7QFdb2A/VOk6ZLfwwTgJhzEHbYq0QFEFqhUDT6GpA6QPSSC29fsPCD3Dmt4
9NBb3pQ+c2m3k19W61QhNGbpGSi9EUqIhL2bgbo0KSWEVZ1I8mqwpJey8F1Hhx7P
rl3KOZZLBd/ZLSq3iGOA6q24OSIJ4zzRmetSLVHHuHweQ9PitvnE/HL2CAoHPlmu
104oX3aCw4EKOmU51QFoDyycUUbryQOFk8RkWWibGHxP8pPjc/isM6SFg/1q6z0u
OZepceB4teEC5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:42 2026 by rpki-client