Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: waLHJcRdRA9K091GoPTBeqCmmFVtQ60Sz6FHXx7qXYs=
Subject key identifier: F6:69:E6:7B:2F:DB:02:C7:1C:A5:A4:24:62:CC:26:F2:23:5E:DA:E1
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 01A0E7E4609AA695AAAFE9C56147A086A027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1A0A
Signing time: Mon 28 Sep 2026 12:01:38 +0000
Manifest this update: Mon 28 Sep 2026 12:01:38 +0000
Manifest next update: Tue 29 Sep 2026 12:01:38 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: POBZone8safSIhDZdoIegF3U4dJ8n4+dl9jo5KIUI1s=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:60:9a:a6:95:aa:af:e9:c5:61:47:a0:86:a0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Sep 28 12:01:38 2026 GMT
Not After : Sep 29 12:01:38 2026 GMT
Subject: CN=f669e67b2fdb02c71ca5a42462cc26f2235edae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:0f:0a:e7:0a:b8:2a:34:b4:21:36:7c:d8:
88:b0:de:0e:4b:3e:11:08:e7:5b:56:09:55:6a:46:
23:e3:78:db:be:4a:d8:0a:f3:48:d6:4e:be:35:85:
1f:08:91:6e:01:e9:a5:9e:6d:0e:d8:36:36:0e:f2:
52:7c:b6:6d:3b:15:ba:f9:c7:c6:ac:dc:45:fe:1a:
9b:ff:35:db:87:c0:83:47:6b:e7:53:ad:3b:de:4e:
cc:4c:a2:c0:84:f3:99:67:25:01:f9:53:d8:ac:93:
cd:a9:a8:36:4f:84:f5:3a:d4:b1:b3:1a:43:9a:c6:
c4:fe:99:73:42:1a:b2:5e:d6:ef:79:cc:38:db:43:
55:fc:ce:3d:4f:48:c1:32:69:91:dc:34:0a:a7:cf:
e5:c3:f0:af:f6:bd:84:02:72:63:e6:95:91:e6:c0:
a5:00:e5:13:a3:57:65:c3:4a:37:a0:84:c6:f1:a6:
a6:a9:79:73:df:81:51:6b:10:57:7a:4d:af:5c:ff:
65:f0:23:b3:5e:b7:dc:a9:72:f0:0f:0e:17:1f:5f:
4d:42:10:00:8c:25:4b:b3:f8:7a:43:e4:38:a4:bf:
c0:61:20:b4:1c:7a:89:b8:e1:f5:50:f3:e5:47:f1:
66:65:cb:72:d8:ab:dd:ec:49:9d:47:3a:6a:d5:51:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:E6:7B:2F:DB:02:C7:1C:A5:A4:24:62:CC:26:F2:23:5E:DA:E1
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c6:07:c2:7c:0f:cc:da:22:34:13:a2:62:87:65:fe:52:91:
96:77:af:a6:43:1a:fe:49:0b:77:7d:c5:27:83:65:58:2b:4b:
a9:2a:f8:8a:61:1d:89:4e:b7:68:a4:f1:09:20:29:d4:ac:8f:
13:65:a1:f1:82:ee:fa:fa:7c:81:e6:56:90:3d:f2:11:a8:69:
29:0b:b6:0e:bd:7e:0e:2a:23:3a:32:54:64:d5:64:ba:48:b4:
88:89:18:92:15:e1:33:6e:e9:53:2a:8f:29:e4:bd:25:ff:ac:
14:83:16:ab:a4:00:13:d4:7d:08:9f:8b:1b:95:39:06:d0:0f:
98:96:85:22:f4:86:47:24:7c:b2:67:ae:7b:bc:f7:cb:c2:6b:
40:d7:9f:04:67:03:86:31:e7:9f:9d:62:00:6d:e7:a2:ae:01:
6c:4f:0d:81:ce:a3:57:2a:79:cf:71:a3:62:64:60:65:b3:fe:
a1:28:9b:2c:3a:b7:be:ca:81:52:d7:33:7b:53:e4:cc:dd:b4:
40:ce:3b:27:b1:b2:13:5c:e7:ba:13:b1:ac:47:1d:aa:4e:98:
b6:08:10:5d:d3:ff:5a:c8:19:16:b2:4c:4e:68:6b:65:af:1f:
fd:3c:dc:4b:15:2e:1e:6a:9a:c8:bf:e3:11:6b:fa:0e:1e:6d:
33:83:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:27:23 2026 by rpki-client