Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: gHpvgdujh6+yoLvLyQxEcnALfyaqSdpP5562hOCtnTo=
Subject key identifier: 6B:4C:E3:A5:C2:76:73:4E:4D:74:79:29:13:8D:48:E2:3C:52:89:52
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019D27DF53285DC3A7136D8D09C3AC1AC45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:40 +0000
Manifest this update: Thu 26 Mar 2026 02:00:40 +0000
Manifest next update: Fri 27 Mar 2026 02:00:40 +0000
Files and hashes: 1: Dzdz_x_O4gj2e2hnGWE6XvJbLJs.roa (hash: X387s6xhO5z4K6NGtRm2wqAvgFkPUoPO2i+USe6W0co=)
2: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (hash: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: fSQa8zv/l8z2JUqW84TOL5gZZs3PZ0XHdDonhT/38wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:53:28:5d:c3:a7:13:6d:8d:09:c3:ac:1a:c4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Mar 26 02:00:40 2026 GMT
Not After : Mar 27 02:00:40 2026 GMT
Subject: CN=6b4ce3a5c276734e4d747929138d48e23c528952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:20:26:5f:a8:b8:56:56:28:07:af:19:60:
1b:6c:79:da:ba:02:3e:82:7c:2f:53:fd:6e:ae:37:
34:91:08:48:75:a5:05:ee:fc:37:74:bf:3c:ad:ac:
84:92:70:63:bc:bc:46:f6:cd:d1:7c:4c:c3:f4:89:
65:c9:b2:71:fa:0d:80:71:60:f2:87:e3:49:ba:02:
09:fc:95:b8:c1:4d:69:10:44:09:56:a1:c0:80:66:
77:5b:2e:8b:a6:8f:ef:17:3a:62:05:b7:40:e8:02:
bb:b5:e3:ee:4a:d5:47:ad:dd:14:f9:19:e1:72:fd:
7e:2f:13:e4:9b:43:25:ef:34:77:31:19:e6:7c:4f:
9f:69:af:4d:b2:6d:10:3a:f6:f8:4c:4a:3b:f4:85:
1d:1d:e6:ea:f4:fc:65:99:50:02:24:fc:d3:9e:ee:
a7:ce:2e:80:25:aa:0e:88:e5:ea:f3:5c:27:d4:29:
5e:b9:db:f3:37:32:34:bd:22:fd:37:85:50:79:c0:
0a:5f:68:bf:8d:78:4e:a1:3b:27:b9:be:27:31:a7:
75:85:69:bd:ab:4d:07:9b:76:48:6e:e8:d3:4d:89:
95:5c:3c:bf:18:03:4e:d8:eb:dd:48:7a:60:18:da:
83:76:e2:c5:48:48:6b:1f:dd:92:8b:5e:48:9f:6e:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:E3:A5:C2:76:73:4E:4D:74:79:29:13:8D:48:E2:3C:52:89:52
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0e:2a:29:21:88:4f:dc:7c:0e:ae:4b:fb:5e:f7:26:60:9b:
8c:1d:e9:b8:f2:b7:d0:60:e2:2c:26:b4:1b:48:d4:51:03:4d:
0a:05:fd:c5:63:b4:12:1f:cc:55:9c:c7:4a:d2:a8:41:d3:4a:
6b:81:a8:b3:0f:97:6d:49:3e:dd:07:a9:b2:c4:f7:e4:39:83:
12:70:57:bd:e3:e3:e1:ef:47:f1:5e:c3:27:4c:40:e4:a6:f9:
5f:bf:dd:a4:f6:a1:7b:13:bd:07:0d:64:74:25:70:6f:61:31:
b2:a9:be:50:ce:d3:f0:05:0a:dc:d5:a0:d3:ab:77:fa:42:3e:
eb:8c:6d:07:be:c5:7c:51:79:b6:48:f1:14:c4:14:9f:71:39:
92:bb:83:b3:f6:3f:b7:70:fe:2b:a8:26:0e:74:87:15:63:4b:
b5:27:e1:b2:51:52:82:41:18:2b:36:c7:3d:c9:54:55:2e:f3:
83:0b:2d:14:1e:e9:05:92:a3:43:cc:4c:c9:4a:66:69:25:6f:
f3:03:dd:f5:51:33:2a:74:cb:f1:64:35:89:b5:0d:c6:e1:ff:
af:b4:c6:74:b4:7b:e6:6d:13:2c:8b:6d:f6:77:d8:9e:d0:d4:
ef:18:8f:fe:8e:01:0d:7f:86:8c:5d:31:3f:a7:30:ab:b2:71:
27:b4:98:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n31MoXcOnE22NCcOsGsRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh
NjVhYzUwHhcNMjYwMzI2MDIwMDQwWhcNMjYwMzI3MDIwMDQwWjAzMTEwLwYDVQQD
Eyg2YjRjZTNhNWMyNzY3MzRlNGQ3NDc5MjkxMzhkNDhlMjNjNTI4OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXYgJl+ouFZWKAevGWAbbHnaugI+
gnwvU/1urjc0kQhIdaUF7vw3dL88rayEknBjvLxG9s3RfEzD9IllybJx+g2AcWDy
h+NJugIJ/JW4wU1pEEQJVqHAgGZ3Wy6Lpo/vFzpiBbdA6AK7tePuStVHrd0U+Rnh
cv1+LxPkm0Ml7zR3MRnmfE+faa9Nsm0QOvb4TEo79IUdHebq9PxlmVACJPzTnu6n
zi6AJaoOiOXq81wn1CleudvzNzI0vSL9N4VQecAKX2i/jXhOoTsnub4nMad1hWm9
q00Hm3ZIbujTTYmVXDy/GANO2OvdSHpgGNqDduLFSEhrH92Si15In250UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtM46XCdnNOTXR5KRONSOI8UolSMB8GA1UdIwQY
MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt
MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh
LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg4qKSGI
T9x8Dq5L+173JmCbjB3puPK30GDiLCa0G0jUUQNNCgX9xWO0Eh/MVZzHStKoQdNK
a4Gosw+XbUk+3QepssT35DmDEnBXvePj4e9H8V7DJ0xA5Kb5X7/dpPahexO9Bw1k
dCVwb2Exsqm+UM7T8AUK3NWg06t3+kI+64xtB77FfFF5tkjxFMQUn3E5kruDs/Y/
t3D+K6gmDnSHFWNLtSfhslFSgkEYKzbHPclUVS7zgwstFB7pBZKjQ8xMyUpmaSVv
8wPd9VEzKnTL8WQ1ibUNxuH/r7TGdLR75m0TLItt9nfYntDU7xiP/o4BDX+GjF0x
P6cwq7JxJ7SYYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:18 2026 by rpki-client