Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: htcQ8l2iH7WrVwC4jzwjpofz56BAh85hYCcWm6EHnGA=
Subject key identifier: BB:4E:9B:3C:AE:16:DF:71:FF:1F:54:EC:07:8A:90:4D:11:B6:AA:A0
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 01A0DACCEA658DEADB6813C8792FD254ABE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: 0199
Signing time: Fri 25 Sep 2026 23:00:57 +0000
Manifest this update: Fri 25 Sep 2026 23:00:57 +0000
Manifest next update: Sat 26 Sep 2026 23:00:57 +0000
Files and hashes: 1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: N1BmjCHrJ593xeEesISo+ypX4Wl9Jdyo8X/XvNV3VYg=)
3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cc:ea:65:8d:ea:db:68:13:c8:79:2f:d2:54:ab:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Sep 25 23:00:57 2026 GMT
Not After : Sep 26 23:00:57 2026 GMT
Subject: CN=bb4e9b3cae16df71ff1f54ec078a904d11b6aaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:1d:a8:05:34:67:2e:0b:26:f3:84:02:87:
bd:e5:0b:1b:57:67:12:d5:19:b2:2e:46:b1:0e:1f:
2d:a5:df:09:08:6a:c4:25:a5:af:bb:b5:8f:86:84:
f7:00:c7:fe:ec:f6:82:41:5a:c6:ac:b3:20:23:49:
90:6b:4d:cf:5b:98:07:92:e9:70:95:c3:85:9d:78:
4e:7a:1c:38:93:59:74:ff:56:49:91:5c:b2:7f:dc:
a9:cf:13:a8:b4:3a:04:ef:59:18:24:36:8d:7a:79:
9c:f2:04:5d:3e:07:44:03:9a:ee:25:e6:cd:9a:56:
98:80:6a:40:f5:c3:7c:bc:4f:c7:1b:18:4b:1f:5b:
ee:cb:b7:a8:30:8d:c4:90:13:e3:4e:ae:fd:75:04:
6c:9f:1e:1c:cf:70:e6:f7:ce:e0:03:ad:53:c3:84:
11:5b:c9:bb:5f:a3:a5:e8:92:c9:a3:85:da:4d:45:
16:46:03:09:99:47:96:15:8f:c1:32:70:c4:89:ab:
6b:e2:f7:78:10:4f:ef:bb:9d:ab:44:92:6b:01:14:
6b:24:67:37:7f:9a:12:c6:a5:4c:bb:cc:41:34:1d:
3e:90:61:ab:d2:ea:7a:a9:21:1b:d8:2b:60:9c:71:
f9:b6:53:ff:25:9e:32:11:a9:a6:24:dc:a9:cb:a6:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:9B:3C:AE:16:DF:71:FF:1F:54:EC:07:8A:90:4D:11:B6:AA:A0
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5a:ee:12:23:59:a6:b0:6e:2d:8f:fa:3e:e5:d7:5c:6a:92:
34:9c:0f:01:4d:bd:b4:fb:48:67:36:78:d0:6c:94:08:be:fa:
3c:ce:da:b8:63:b7:d1:da:70:0d:82:b7:a5:e5:94:47:ad:a8:
8b:65:5f:cf:12:95:6b:a5:6d:2f:4d:49:bf:3c:fd:68:2b:8d:
5d:95:3d:a0:0d:95:81:8f:33:13:34:fa:ec:ff:29:de:cd:53:
09:ef:ff:f3:2d:c5:68:a0:7f:6b:13:c9:cd:75:5e:0a:00:7d:
8d:27:5b:f5:ff:71:d4:b5:b6:58:82:30:1b:27:33:16:18:75:
77:1f:41:be:f1:48:22:36:0f:d5:7b:a0:08:7e:e7:91:fe:18:
81:ed:69:d5:ea:dd:12:bf:4e:b2:ce:01:c2:7b:ac:ba:ed:97:
b1:a0:3f:50:09:49:6e:75:cd:eb:0c:b2:f3:0e:a8:0c:cd:f9:
84:a6:81:b9:81:90:50:b9:8a:17:e3:d9:d0:04:d2:08:a5:34:
d5:45:5b:cc:9b:59:63:a4:0b:88:94:90:e4:c9:88:5b:36:0d:
df:59:07:16:4e:fd:36:21:71:9f:9b:52:5e:03:04:ab:db:80:
db:08:90:9c:73:90:7d:06:7f:42:cc:f4:98:c0:02:c7:f2:69:
c7:d4:9f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:18 2026 by rpki-client