Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: 75lIK90wQkTsrQGkPRmnXT2GCxmzEHN2VkZs46L1Eds=
Subject key identifier: 67:89:53:D8:79:40:10:9D:67:80:6B:A5:92:38:8D:E9:50:8F:68:02
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019D2A04B9D71FD216BD10393AAE8BD56847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 12:00:45 +0000
Manifest this update: Thu 26 Mar 2026 12:00:45 +0000
Manifest next update: Fri 27 Mar 2026 12:00:45 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: eaZnofCaSvvlDnP7nc0cPDmHGO4FfrcmfP0mvpPo04g=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:b9:d7:1f:d2:16:bd:10:39:3a:ae:8b:d5:68:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Mar 26 12:00:45 2026 GMT
Not After : Mar 27 12:00:45 2026 GMT
Subject: CN=678953d87940109d67806ba592388de9508f6802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:f1:dc:15:e7:a2:a1:a1:fd:37:62:19:76:
2c:d2:5e:97:0c:f4:40:62:62:35:eb:6c:59:7e:e8:
c8:4d:9b:92:6f:01:16:78:12:51:ac:d1:6d:56:f4:
f9:8f:b0:1d:08:3a:83:62:da:d5:c9:b1:39:91:76:
9b:10:21:2f:9d:38:b7:ed:84:d4:f8:3a:ae:b0:5f:
34:23:75:6c:ed:2f:96:5b:42:e2:60:9c:a8:14:57:
88:93:b4:7d:fa:5a:6b:ed:e7:13:ac:35:a5:82:c8:
29:e5:83:f3:03:5b:2c:a3:19:e7:cf:c5:b4:10:99:
26:6d:b3:22:16:b6:c6:47:6c:16:a3:dc:3d:c8:b4:
08:00:9c:19:19:7f:4a:a7:2f:5a:3f:97:e9:04:28:
ce:7e:03:98:38:59:89:a6:1c:10:ca:48:43:eb:58:
40:c5:80:14:a1:b2:50:e5:00:a8:51:79:3b:e5:6e:
3a:f1:d7:b5:a3:96:3b:64:1d:8e:47:1f:23:91:ac:
25:be:5a:82:d6:fc:27:89:5a:53:10:bf:32:5e:bc:
3e:24:a3:7f:63:67:11:7a:94:92:f5:30:e6:53:2f:
11:07:e4:3a:91:85:98:2e:eb:38:ba:4e:0f:e4:9d:
f1:64:ea:7b:e0:de:6e:8d:93:f1:5a:50:70:6b:69:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:89:53:D8:79:40:10:9D:67:80:6B:A5:92:38:8D:E9:50:8F:68:02
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:9f:b0:59:ef:dc:d3:00:5f:74:29:7a:3e:0f:0f:ef:6f:
d9:77:29:ac:5a:ae:07:6b:b8:d4:ad:62:e1:d4:76:96:5e:21:
e1:36:62:9d:15:d1:4a:0b:b8:97:67:ca:d8:d4:42:0e:9d:f1:
c1:6f:69:42:e6:1e:f1:be:62:ba:e9:e3:ba:d8:77:91:05:4f:
49:f1:13:77:85:56:3f:31:ae:5f:80:cc:2a:72:b0:9f:a6:47:
86:32:8b:69:3d:0a:09:24:b2:f7:63:44:d2:5e:74:65:12:cb:
f8:a8:70:ad:d2:b9:25:ed:44:ad:ae:d8:58:e3:9f:e9:f5:45:
15:e7:cb:d0:08:5c:27:64:7b:ff:91:35:74:b4:46:b5:96:9b:
6a:cf:43:87:97:a2:87:98:63:01:3f:c5:4f:64:4d:2b:fc:5b:
d3:fa:33:30:d7:52:32:6e:c8:6f:7a:4a:87:a0:91:fe:c0:ae:
e3:8e:a6:4e:25:f8:9b:c7:47:a9:9f:44:86:a2:55:c5:b3:36:
fc:55:6d:4f:ed:83:0e:39:02:ed:23:63:0f:12:25:4b:35:f5:
04:31:cc:62:f8:64:fe:a6:27:3e:90:a3:19:27:7c:85:94:59:
de:2f:ec:d5:e3:8f:1c:6e:e4:0e:32:35:60:e5:0b:55:59:a3:
3c:54:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:41 2026 by rpki-client