Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: VLDcUDavTvxKzmrEB9v14B5XrPDh1p1rTzOwQVzPGE4=
Subject key identifier: 56:DF:68:BB:9A:FD:FA:B5:5B:91:FB:E6:B8:AD:EC:E7:61:2D:8B:B3
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019F902328BD3E0FC14210F5E0513C235769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 18:00:50 +0000
Manifest this update: Thu 23 Jul 2026 18:00:50 +0000
Manifest next update: Fri 24 Jul 2026 18:00:50 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: /zcEzsnC7ygoR2ixZghXUYGVZCW9Dd8f/xm7kclp+18=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:28:bd:3e:0f:c1:42:10:f5:e0:51:3c:23:57:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jul 23 18:00:50 2026 GMT
Not After : Jul 24 18:00:50 2026 GMT
Subject: CN=56df68bb9afdfab55b91fbe6b8adece7612d8bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:82:17:1f:53:10:03:47:76:39:c7:cb:13:
96:c0:1f:b8:2c:29:51:d0:18:96:0d:bd:85:2c:01:
3b:31:74:51:68:bb:8a:6a:f8:68:1c:5d:d0:09:23:
96:0f:c2:7c:22:44:57:3d:bc:f7:75:12:01:7e:98:
59:18:d2:29:cb:38:b5:ea:7f:2b:93:80:e1:98:b9:
46:df:af:67:8e:eb:60:ae:b8:3d:f5:29:93:d9:a8:
37:43:3e:32:0e:52:18:3b:0c:5d:7d:63:f1:1d:db:
97:d4:e1:d9:26:79:bd:29:68:70:6b:bd:c9:c5:f0:
cf:71:f5:de:0c:91:64:b9:ed:cb:2d:0e:7c:0e:df:
6e:12:fe:b3:b1:32:40:ec:7c:ab:ba:85:1f:69:0b:
9b:9b:41:11:7f:30:91:02:ee:53:07:f0:90:12:7a:
09:a1:9a:39:8b:39:e5:9f:d6:db:cf:83:0b:99:dc:
11:c1:22:7a:84:1d:54:2d:16:ef:95:26:42:ea:65:
eb:ea:98:84:d5:81:4a:66:48:6b:93:9c:ba:e5:75:
36:d6:66:c8:a8:ba:64:35:4f:e3:1d:d3:82:ac:1b:
c7:04:8a:89:74:b8:6c:9a:09:27:e1:33:8f:98:b4:
4d:73:ca:87:21:4d:94:cc:4a:4f:cf:b4:44:ab:43:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DF:68:BB:9A:FD:FA:B5:5B:91:FB:E6:B8:AD:EC:E7:61:2D:8B:B3
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6c:e2:a1:b9:e9:a9:da:22:93:da:e4:ba:08:b9:c8:5f:a7:
3f:50:ef:16:fb:58:99:ac:3a:20:32:5f:2e:d2:0d:ab:01:68:
9f:31:db:d1:0e:b8:a6:c0:e3:09:84:6b:d7:4a:4f:f4:01:12:
a0:cb:25:57:27:42:b7:0f:e1:1c:47:07:ab:e1:cd:53:81:c2:
21:6f:f9:6b:ce:35:e3:0a:fa:51:27:22:50:b3:fe:cd:08:b9:
2e:07:25:f8:2b:f7:73:b4:ea:50:64:ec:e8:aa:83:3a:93:27:
2d:c1:b7:d3:03:f0:e5:87:34:d4:44:ac:c6:4a:5d:ac:0d:85:
38:53:77:4c:f7:4d:7e:99:58:29:7d:0a:01:a6:0f:1d:9e:53:
b2:6b:65:d1:a9:a1:d5:8e:5c:11:29:ce:84:64:06:3f:7c:04:
7f:13:45:f2:13:16:70:e2:cb:5a:0e:57:17:00:9e:e0:a1:ad:
8c:b5:b3:fb:aa:d9:70:88:4a:38:14:5c:cf:39:0c:d6:e8:1c:
59:43:5a:95:07:d2:39:93:4f:47:bd:41:34:5a:9f:38:33:15:
98:51:43:74:4a:23:76:e3:41:d3:83:ff:65:2b:9a:df:fb:c6:
f5:48:18:35:a3:cc:29:15:e3:4f:5b:ea:e3:22:b1:f1:c7:e8:
e5:70:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:27:14 2026 by rpki-client