Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: im2LRFop7FqBKt4yibRo6oixswkjqykVe25i+wo72Vk=
Subject key identifier: 05:48:9D:1A:DB:32:D1:EF:97:32:E6:D0:63:66:D9:CD:16:78:90:27
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 019F8EA2826B6FDE04EDD992E2943A2015BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: ED
Signing time: Thu 23 Jul 2026 11:00:42 +0000
Manifest this update: Thu 23 Jul 2026 11:00:42 +0000
Manifest next update: Fri 24 Jul 2026 11:00:42 +0000
Files and hashes: 1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: 6aMg+Ut9hJ1jBTr+J0Q40SBFhcOL8s9fFF6ITM7TQpc=)
3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:82:6b:6f:de:04:ed:d9:92:e2:94:3a:20:15:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Jul 23 11:00:42 2026 GMT
Not After : Jul 24 11:00:42 2026 GMT
Subject: CN=05489d1adb32d1ef9732e6d06366d9cd16789027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:b2:11:c3:4b:a2:6f:74:28:43:d8:40:2a:
cc:01:c9:f6:36:ea:4e:ed:57:a3:ee:82:1a:ce:fd:
89:0d:af:db:52:0f:ac:ce:10:e5:cd:9f:ae:ff:10:
87:9e:59:88:d7:19:b9:50:0b:d2:0a:82:58:e5:14:
12:45:31:6c:e2:7e:b7:30:33:b0:ff:46:1a:a8:00:
c3:06:e8:d0:07:da:56:6d:b9:a2:b2:b8:46:c5:5b:
90:8c:ba:19:95:19:17:4b:a3:23:f3:bb:47:df:ea:
fa:76:b5:54:da:46:d9:84:3f:ed:6c:fe:f0:fa:df:
3d:b2:ed:f3:18:9e:6b:94:ee:a1:2e:f5:91:a8:d7:
05:b2:ae:cf:11:86:11:2e:71:35:f6:7e:59:b3:66:
c0:18:0a:82:3b:56:d8:a0:b1:e5:0f:73:0b:f3:8f:
8b:cc:4e:86:f1:a1:cb:13:70:60:ef:85:c4:80:c9:
f7:be:c3:03:41:96:ef:36:21:68:14:fb:38:bd:bc:
ea:c3:0b:76:0a:37:e4:31:ca:bc:10:23:7b:e9:89:
f8:53:64:f4:b7:06:1e:18:6c:2b:71:5d:0f:0c:c3:
a6:36:8d:b9:a1:63:67:82:8e:3d:39:7e:c3:69:df:
a6:39:bf:8c:2b:6c:30:14:68:f4:56:3e:67:8c:a8:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:9D:1A:DB:32:D1:EF:97:32:E6:D0:63:66:D9:CD:16:78:90:27
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:99:ec:63:da:76:53:c8:3a:d0:dd:96:b9:ee:e6:56:3e:54:
99:89:f8:47:1b:cd:b0:ce:2a:2a:41:5d:9a:6d:cd:e8:0d:89:
5f:24:83:da:10:49:1e:75:20:fb:7e:66:c4:fc:b0:83:7b:f5:
ab:c8:52:3b:45:6e:67:68:10:76:a9:f6:60:a8:0e:1c:57:f2:
ab:6b:fb:be:bd:68:42:2b:ae:66:a7:73:ad:32:2a:93:56:8b:
ee:f5:19:ea:e0:f7:6d:b5:09:82:f0:ed:90:fd:9e:d2:b5:1f:
15:f7:67:7d:41:f4:9c:7a:70:31:f2:46:af:67:d8:29:b6:5b:
c7:c1:3f:d4:19:5e:6d:20:d2:79:54:cb:cf:c4:f0:6d:10:30:
58:b8:5a:cc:86:ad:fa:6f:92:e3:f1:08:3d:f5:82:98:38:5c:
a6:ee:b9:75:fd:78:30:87:1b:32:93:64:df:9a:a9:b4:3e:d2:
16:0c:49:8c:6f:34:b8:d8:fc:f6:56:02:2a:09:30:33:27:be:
a7:d5:2e:f6:9d:9b:2b:89:2d:58:9b:64:e1:63:25:d6:33:e9:
ea:e2:d3:02:6d:e6:db:fa:f0:95:e5:44:5a:28:72:fd:5f:99:
c8:21:23:6a:28:a6:a3:29:8e:a5:a1:14:67:a2:22:04:d0:24:
8b:d9:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:05 2026 by rpki-client