Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: 7puWTm2Qqa8wlWcusueyVnOiN7UHoNADdbx9hzCInBQ=
Subject key identifier: E8:DF:4F:B4:D7:EB:0A:E0:23:72:69:97:E5:D1:14:1A:7F:4D:32:02
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 019E205A1C6B3BAB61A87C949E5C8B520C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 1567
Signing time: Wed 13 May 2026 08:00:36 +0000
Manifest this update: Wed 13 May 2026 08:00:36 +0000
Manifest next update: Thu 14 May 2026 08:00:36 +0000
Files and hashes: 1: 4ad3Sx3tHCKPvoySsJwPEN1dqk0.roa (hash: 9KW5traDiZ8b8YIka+3LA3dxjZd+hGHcIvyVnNUiXKg=)
2: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: LkZo2s5/yDgf6GuzCYdH1wjch7jUMq5JPfKPcdZysPA=)
3: k82VZQjPTfp29HOrsd4ebLlbLLQ.roa (hash: mCVrb2F3QQSAvERyzJs5ziCWnKSLVC3ur8XxDFUzHh0=)
4: w6ZIXPDpAeu5P7_mH6HZiqnkV9o.roa (hash: Yf1g7ljDU7te6N4XEGH4NkhfBi9rKgbfTnWehMLxzL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:1c:6b:3b:ab:61:a8:7c:94:9e:5c:8b:52:0c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: May 13 08:00:36 2026 GMT
Not After : May 14 08:00:36 2026 GMT
Subject: CN=e8df4fb4d7eb0ae023726997e5d1141a7f4d3202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:54:60:22:14:d0:6d:ca:89:6c:21:b9:6e:
27:38:ac:a5:3e:0d:52:e7:3a:88:3f:51:e5:e2:b3:
8a:41:59:d0:3b:ee:91:ff:13:ec:ae:1b:31:90:4c:
f3:05:36:84:0d:6f:89:f3:50:36:9b:6d:7d:48:a9:
a1:5f:33:98:60:74:d2:d8:7d:03:6a:b7:2f:55:d2:
d5:8b:56:e9:f8:8f:02:46:8b:2e:af:a1:cb:bb:63:
1a:ec:02:2e:73:fa:f6:6f:39:2c:03:e4:5d:df:73:
8b:a0:2a:dd:3b:4a:49:b9:4e:b3:66:85:01:60:1e:
28:24:3c:bd:f7:9d:f3:ba:15:65:58:b7:6c:10:22:
2f:30:2f:79:52:9b:98:89:70:45:94:c2:ed:e0:95:
46:0d:82:c0:22:9c:d2:8e:70:0d:f4:18:a7:74:d2:
18:10:d3:b2:9a:b4:f8:05:0b:2c:e3:d7:63:ed:ea:
5d:47:f7:32:a8:e8:26:68:d6:bb:54:c1:42:ad:60:
ee:e7:06:23:9e:e4:1a:0f:30:31:b7:8a:3e:35:6f:
32:c3:83:a6:fb:77:cc:62:5c:08:f1:c0:af:b7:97:
8d:07:a2:41:72:13:71:87:61:23:c8:8d:ed:78:95:
a7:cd:08:f7:64:5f:35:57:87:57:6e:1b:e4:46:b2:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DF:4F:B4:D7:EB:0A:E0:23:72:69:97:E5:D1:14:1A:7F:4D:32:02
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:df:5f:9b:36:e8:fc:b1:0c:81:62:a5:66:d5:ae:a8:22:88:
62:be:3a:2a:b3:08:cd:be:fe:7c:59:be:32:7c:72:20:8f:4c:
c3:8e:2b:50:90:95:4d:b3:3f:b1:4a:32:e1:9f:cf:a3:85:6d:
c1:44:d1:f3:e9:83:30:78:f8:34:2c:eb:22:37:93:3d:94:86:
35:18:4c:1e:e2:b5:1b:e3:54:07:55:0f:16:c5:40:fb:b3:aa:
b5:bc:9d:fd:e9:b2:00:fa:31:4f:32:b1:a5:53:2b:6f:a4:a9:
49:c1:ee:e3:10:22:50:31:28:c9:81:c3:87:8a:c1:c9:39:56:
be:10:ed:fe:f1:67:51:6c:8e:7d:81:19:d1:ff:8c:e1:bd:de:
a6:b8:aa:9d:ae:9a:06:ce:17:b6:dc:32:ed:22:e1:eb:90:6c:
7d:2a:9b:e4:9c:59:15:a6:61:63:58:d3:9a:83:3b:f0:7f:da:
21:3c:7f:83:c0:7c:a9:4f:bb:d4:19:55:3d:5c:51:b2:3b:d2:
f2:5b:bb:c5:ca:17:3a:0b:ff:41:1c:60:7a:67:9c:71:26:45:
ab:4f:33:2f:4c:1b:18:d1:51:9e:cf:c1:d3:d2:cf:ab:1e:d4:
f7:d1:c9:1d:65:86:ce:44:d1:b3:9c:1f:ca:a8:d4:ed:2d:c8:
f9:b0:bd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:01 2026 by rpki-client