
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: xA+iFhx03StnrOkh5XweZiP2PbbRlvdfKL4eiPK1aGY=
Subject key identifier: 95:57:C8:ED:61:95:96:DF:FD:0A:04:F6:C1:D8:08:AC:38:FA:CE:6B
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019E1F7EF98F8B4D241DC6BC269BA5A95340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 1910
Signing time: Wed 13 May 2026 04:01:15 +0000
Manifest this update: Wed 13 May 2026 04:01:15 +0000
Manifest next update: Thu 14 May 2026 04:01:15 +0000
Files and hashes: 1: 1AAfNkOtoDPkV923JU6uKxUBzig.roa (hash: m+bM/ZO45nJYI69NyHTcglKt6eRpdsvdb8DCz1bIBG0=)
2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: B+G2PFllvd4lvuz8sGd3M8hKF3uJtY1pG4ylAhkl9Yk=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:f9:8f:8b:4d:24:1d:c6:bc:26:9b:a5:a9:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: May 13 04:01:15 2026 GMT
Not After : May 14 04:01:15 2026 GMT
Subject: CN=9557c8ed619596dffd0a04f6c1d808ac38face6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:e7:52:6f:14:3f:82:24:ca:32:e9:8c:ba:
1c:7a:0d:e6:b2:0c:e7:2c:9c:56:60:4b:29:ba:28:
97:b9:34:43:ee:81:6d:fe:ef:a1:46:3d:33:98:5b:
ad:e2:52:80:67:9d:d6:e1:27:be:60:ff:37:a1:e8:
c4:ef:99:c9:5b:36:42:f9:9d:02:cd:1e:0a:00:af:
c3:e0:34:e8:20:5e:9a:3e:74:78:18:d2:e6:a3:88:
12:84:6d:70:37:d2:0d:75:1f:f5:79:84:8a:22:8a:
e4:a3:31:37:b5:04:a9:05:f0:ff:b0:81:31:b1:e9:
ad:a0:8b:03:a4:75:98:82:ea:66:61:52:a0:69:1d:
4e:0b:62:b4:4a:67:14:3d:8e:f0:3f:64:c4:0f:64:
b1:4e:20:f1:e9:cc:d8:8f:0e:7f:93:00:c7:a8:81:
82:60:b8:e4:f9:3f:1c:39:5a:e6:87:aa:af:bd:c5:
32:43:51:76:9d:0c:47:eb:77:be:d6:ce:7e:fc:4b:
bb:99:4d:34:fb:48:32:38:a0:9f:29:03:73:96:ff:
ca:f0:5b:b8:ea:3c:21:bf:86:a2:ea:a4:34:da:71:
9d:38:a3:bd:43:49:55:4c:44:1d:3e:9e:05:c9:3d:
45:55:78:d6:04:68:aa:cf:e7:43:55:7e:6c:ca:49:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:C8:ED:61:95:96:DF:FD:0A:04:F6:C1:D8:08:AC:38:FA:CE:6B
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9d:71:df:87:52:de:64:5c:6d:b6:c6:b1:d2:55:5e:fb:69:
83:50:96:dc:e8:85:6c:59:c5:bd:4f:68:a3:36:2d:4a:79:da:
06:78:ac:4e:75:81:bd:ea:31:18:df:38:44:95:9a:bb:56:f6:
c6:90:b0:af:0e:58:b2:45:0e:35:62:c5:09:c3:47:e8:06:0c:
27:60:f0:1d:06:f5:85:82:b3:c8:d9:21:66:23:55:0f:6b:e5:
e5:3f:b4:3e:b8:2e:19:1b:d2:4c:4d:5d:3d:10:1c:8a:bb:fd:
e8:42:7c:01:af:9e:1d:a2:89:bc:82:bd:f8:a6:f0:23:e3:13:
93:39:fe:36:2c:4f:3f:18:e2:49:4b:a7:63:be:17:25:c1:35:
af:df:6f:18:44:83:c6:97:a4:0f:71:e3:5f:cd:17:73:d5:ee:
f4:c7:fa:28:5b:f2:e3:e3:03:cf:08:5c:d1:5f:74:40:b5:f0:
a0:4d:7c:3a:91:e7:88:f7:65:a0:0a:d9:c3:19:83:5d:df:73:
e1:46:a8:11:cc:72:91:fa:36:cf:dd:1e:89:df:8e:3a:e6:a4:
00:88:d1:63:b7:2d:47:fd:ec:49:9d:e2:61:be:82:00:10:9d:
8a:63:3e:1c:e3:de:0a:19:94:31:b1:01:0f:d2:ae:79:52:bc:
48:f7:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:52 2026 by rpki-client