Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: yitOQ1U7jp+a1OyXOjBrSNmQnN2FmKkARFmHiZZblTc=
Subject key identifier: 3E:29:D4:7C:A7:9F:32:2A:E1:B7:63:DF:77:CA:39:9D:A4:D2:C2:85
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 01A0DA288F2BD1BD86D21EDC9FB89D4F4189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 20:01:26 +0000
Manifest this update: Fri 25 Sep 2026 20:01:26 +0000
Manifest next update: Sat 26 Sep 2026 20:01:26 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: jUNvPJU+S9Vd6vfaLaQrTTn/5h+h9H7RVbcmErWHPho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:8f:2b:d1:bd:86:d2:1e:dc:9f:b8:9d:4f:41:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Sep 25 20:01:26 2026 GMT
Not After : Sep 26 20:01:26 2026 GMT
Subject: CN=3e29d47ca79f322ae1b763df77ca399da4d2c285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:54:55:cc:e9:eb:4e:35:13:a7:fd:ee:0b:
da:98:d7:87:0c:40:80:ae:e9:fd:1a:36:09:0d:ac:
ff:55:b2:8d:23:60:84:d6:4b:c6:3f:1b:70:10:ed:
c6:02:54:2b:26:a2:51:d8:29:d7:e6:c8:16:b7:75:
1f:fc:71:48:11:28:83:4c:5c:9f:b1:35:61:cf:9c:
80:30:a3:17:64:4e:a9:9d:27:04:aa:b3:ef:be:94:
39:46:b2:97:e6:62:a9:f1:e2:53:f4:24:c6:97:3f:
05:99:b8:bb:37:db:f1:99:7e:3f:f9:2a:b5:28:16:
30:16:83:e2:a9:61:a4:22:0e:39:f5:43:ee:36:12:
9b:04:71:10:66:50:66:8c:6b:3e:f4:40:73:d0:51:
45:37:08:21:89:2c:2f:f5:db:79:09:9a:c5:7f:49:
c9:04:71:5e:8c:f9:1d:66:6c:4e:2f:b1:3d:b4:12:
55:88:d8:5e:56:6e:8c:e2:7c:19:02:46:5c:9e:06:
fc:c1:ca:6b:9b:84:be:69:54:29:c3:f5:65:0a:72:
0f:60:5c:27:96:f5:03:5b:e3:d8:1c:44:18:65:ce:
a6:27:65:32:35:9e:07:1b:05:86:4b:de:2f:9c:54:
34:13:eb:2e:d9:3f:e4:b1:3a:8d:13:a0:25:97:a0:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:29:D4:7C:A7:9F:32:2A:E1:B7:63:DF:77:CA:39:9D:A4:D2:C2:85
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2e:2e:09:11:60:38:81:05:bb:52:cf:63:66:79:1b:76:27:
c0:65:fa:07:d6:87:48:ed:6f:b9:3e:26:a2:10:e0:36:a2:ee:
15:e6:b9:5d:aa:2b:55:42:d4:d9:73:36:8a:37:5c:c3:da:f9:
d8:2b:7d:a9:d0:71:ca:3a:3e:ce:e7:cf:ae:3f:2f:1d:99:f9:
f1:35:34:ee:c6:3a:26:c7:dd:1b:26:0a:dd:ca:9b:24:f8:99:
99:02:47:86:24:b7:52:da:5f:71:92:00:b9:c9:f9:2e:a7:81:
57:61:f0:cd:96:30:ab:a9:f3:f6:f8:c1:a0:55:c2:99:28:7a:
ee:69:4f:0b:e0:0c:b2:f0:cd:b4:08:b9:25:14:88:cb:90:8f:
76:85:78:74:05:f5:af:3b:c6:09:33:f6:38:de:60:61:f7:8f:
88:cb:eb:0d:9b:54:e4:61:61:3a:e1:7b:bc:56:cc:9d:54:f8:
d8:ec:d6:3e:07:a9:fb:00:08:e8:21:a4:b9:9e:e7:6b:f2:e6:
ca:49:00:c5:d9:af:93:9f:95:23:e9:cc:3d:af:88:f1:bc:c0:
5c:9f:3a:ce:2a:f8:06:20:b4:f2:e7:3e:69:cf:63:ff:7e:af:
c8:a5:ce:c6:e3:e4:61:82:e6:98:0d:66:77:e6:9e:64:c0:22:
41:ab:45:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:08 2026 by rpki-client