Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: veJIrR2iQAFaewUIiEEWSSOk1zQ93OJjGM+kSqdIM2g=
Subject key identifier: 62:FC:E8:19:2D:CA:DB:AC:E3:23:DD:BF:DD:DB:44:CD:CC:8F:B4:E5
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 01A0DC177E6FE9591CF8034AAC59B90F5197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 1A7C
Signing time: Sat 26 Sep 2026 05:02:02 +0000
Manifest this update: Sat 26 Sep 2026 05:02:02 +0000
Manifest next update: Sun 27 Sep 2026 05:02:02 +0000
Files and hashes: 1: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: 9LoQXkp2m7jfTlmJGEBSFFX+6J/niDOJfKuFyk1FBVY=)
2: sviolDtkALX237AgHdJy3qGm9E8.roa (hash: UBbw3ecAl6K7Vc8agYWaL992jebVFcU3FnvRCH5/x3w=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:7e:6f:e9:59:1c:f8:03:4a:ac:59:b9:0f:51:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Sep 26 05:02:02 2026 GMT
Not After : Sep 27 05:02:02 2026 GMT
Subject: CN=62fce8192dcadbace323ddbfdddb44cdcc8fb4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:91:a2:55:63:1e:22:09:0a:56:bd:e4:f9:
84:d2:03:47:fc:3b:f6:13:73:39:97:fc:cd:8e:69:
ac:d1:ea:b3:f9:a3:6a:ad:09:25:37:55:25:b4:48:
9e:3d:fd:b4:75:1a:46:e9:0e:42:47:46:e5:06:ff:
35:17:bc:a9:83:d8:e1:ec:ab:a1:5a:24:3f:35:6f:
e4:c8:f7:2a:25:fc:0d:ce:47:32:d8:01:43:b6:ec:
c7:2d:60:12:c0:a1:99:95:54:0a:cb:f9:81:f6:1f:
70:31:ee:0c:43:6d:a2:a5:53:dc:c1:db:96:56:dd:
8c:c6:ce:38:db:e1:fe:56:c2:27:e0:ba:ff:dd:e6:
76:01:ca:4f:c0:26:ac:5e:3e:bf:ac:c7:05:bb:a1:
56:f3:e1:55:05:c0:67:b7:d6:09:46:74:21:d2:cb:
b8:0a:77:09:55:c5:66:b6:58:52:68:4f:61:3f:e7:
e2:21:27:81:8e:5f:70:01:3a:48:ec:4a:4d:5a:29:
8b:e5:c5:2b:93:8d:68:cb:da:e4:e4:d1:b3:e5:07:
4f:6b:0d:d9:3a:02:96:60:ed:59:0b:00:46:58:9f:
4b:b4:af:2e:c4:03:b7:c3:9d:64:74:7d:94:ac:b1:
9c:89:65:f4:9b:b4:04:d7:50:96:00:3b:1f:c9:9e:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FC:E8:19:2D:CA:DB:AC:E3:23:DD:BF:DD:DB:44:CD:CC:8F:B4:E5
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1f:70:3e:72:32:45:ca:fa:66:e9:16:c3:c1:6c:2d:e5:5f:
01:f6:c7:55:c1:e6:81:20:e0:75:b1:74:07:33:dd:7a:e4:97:
2d:59:f5:0d:ce:dc:c4:5c:52:18:c1:32:f9:e2:f9:51:22:7d:
48:25:ed:b9:07:a1:f0:3b:96:07:b2:af:81:1a:ea:69:d4:20:
47:c2:bb:a9:b4:4e:03:4a:7e:fc:17:2b:74:0c:1e:aa:58:3b:
8a:a8:2f:52:7c:3e:4c:b6:05:3c:dc:97:3a:7f:80:a5:69:fe:
a6:72:41:dd:a8:cf:2a:c2:cd:f9:9b:14:e8:b5:73:0f:5f:6a:
43:41:8c:3d:99:32:7c:72:32:03:f0:8a:4c:fa:35:12:fe:9a:
5d:29:2c:ea:72:ff:41:ea:fa:69:a6:f3:3b:23:8c:1f:88:4c:
29:11:63:6e:c1:89:ee:47:05:79:a4:c9:af:86:52:bc:4b:e6:
1e:58:19:f7:3a:c4:7d:18:b5:90:24:d9:69:c1:8a:b4:92:13:
d5:1a:15:1b:10:8b:22:94:f1:6b:3f:cf:12:01:0a:f3:f2:c2:
f6:3b:16:35:c5:b3:a2:59:58:b9:16:ba:6d:93:f1:40:3a:89:
86:8e:4d:27:3d:82:0a:11:43:7b:ea:1b:07:ce:c1:49:c1:70:
48:26:80:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF35v6Vkc+ANKrFm5D1GXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy
M2Q1YjgwHhcNMjYwOTI2MDUwMjAyWhcNMjYwOTI3MDUwMjAyWjAzMTEwLwYDVQQD
Eyg2MmZjZTgxOTJkY2FkYmFjZTMyM2RkYmZkZGRiNDRjZGNjOGZiNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW+RolVjHiIJCla95PmE0gNH/Dv2
E3M5l/zNjmms0eqz+aNqrQklN1UltEiePf20dRpG6Q5CR0blBv81F7ypg9jh7Kuh
WiQ/NW/kyPcqJfwNzkcy2AFDtuzHLWASwKGZlVQKy/mB9h9wMe4MQ22ipVPcwduW
Vt2Mxs442+H+VsIn4Lr/3eZ2AcpPwCasXj6/rMcFu6FW8+FVBcBnt9YJRnQh0su4
CncJVcVmtlhSaE9hP+fiISeBjl9wATpI7EpNWimL5cUrk41oy9rk5NGz5QdPaw3Z
OgKWYO1ZCwBGWJ9LtK8uxAO3w51kdH2UrLGciWX0m7QE11CWADsfyZ5OlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGL86Bktytus4yPdv93bRM3Mj7TlMB8GA1UdIwQY
MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt
NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz
LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABR9wPnIy
Rcr6ZukWw8FsLeVfAfbHVcHmgSDgdbF0BzPdeuSXLVn1Dc7cxFxSGMEy+eL5USJ9
SCXtuQeh8DuWB7KvgRrqadQgR8K7qbROA0p+/BcrdAweqlg7iqgvUnw+TLYFPNyX
On+ApWn+pnJB3ajPKsLN+ZsU6LVzD19qQ0GMPZkyfHIyA/CKTPo1Ev6aXSks6nL/
Qer6aabzOyOMH4hMKRFjbsGJ7kcFeaTJr4ZSvEvmHlgZ9zrEfRi1kCTZacGKtJIT
1RoVGxCLIpTxaz/PEgEK8/LC9jsWNcWzollYuRa6bZPxQDqJho5NJz2CChFDe+ob
B87BScFwSCaAYA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:41:46 2026 by rpki-client