Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: 2pwoR2hnEYWQFmXW0RY3YgsisRPTJEO0J6EvSvWSR+k=
Subject key identifier: 84:2C:24:A1:0A:5F:04:8F:A0:61:78:33:68:3B:6B:35:81:A2:3F:40
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019E1F477462E1CB8024E8DD6B13FE4BA120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 03:00:36 +0000
Manifest this update: Wed 13 May 2026 03:00:36 +0000
Manifest next update: Thu 14 May 2026 03:00:36 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: 1EtWlhHGMeQDh0nppFU5p0WJ0XJoVUb6nSLdCxYVDmg=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:74:62:e1:cb:80:24:e8:dd:6b:13:fe:4b:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: May 13 03:00:36 2026 GMT
Not After : May 14 03:00:36 2026 GMT
Subject: CN=842c24a10a5f048fa0617833683b6b3581a23f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:95:ec:c6:88:ed:d5:04:a5:e4:6f:f5:3a:
6a:63:82:b9:24:24:da:11:2e:20:9c:55:07:47:32:
fa:79:e3:0b:dc:aa:67:df:00:e4:8b:6c:73:86:cb:
32:9f:cb:c2:7c:5e:79:1c:bb:6a:53:fc:ef:eb:69:
81:e1:cd:92:11:dc:90:74:b0:ab:9c:d4:f5:ba:e1:
2c:c6:35:a8:dc:35:bb:71:6d:96:6e:6c:26:d2:ac:
dc:19:a7:d7:b4:07:90:37:28:d9:b6:b2:38:ac:98:
a4:ae:02:04:45:42:6a:53:a5:16:f0:a6:d9:ec:de:
83:73:d2:05:cd:76:1b:90:73:41:79:44:41:ca:2e:
98:be:45:71:93:0b:63:91:c2:0c:df:d7:aa:5b:be:
0b:c9:a4:60:6e:0f:c0:48:ab:fe:b2:8d:a9:58:ac:
93:ed:42:55:45:e8:a8:c9:67:71:b5:ec:84:a0:49:
39:36:42:fc:9c:2c:df:6a:f3:81:ed:3d:70:c0:6c:
f2:69:73:5e:0d:6e:3c:9a:7f:0b:ba:84:4f:5a:6d:
71:10:d1:ea:ef:a4:c7:5f:75:b2:cc:7a:bc:dc:e1:
09:95:4c:f3:e8:5d:ff:58:43:98:f7:04:49:54:c0:
92:5b:52:60:f3:26:e1:93:94:3d:9b:59:f0:27:35:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:24:A1:0A:5F:04:8F:A0:61:78:33:68:3B:6B:35:81:A2:3F:40
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:d1:11:0d:01:90:ff:8a:5c:22:95:09:0e:5c:00:2f:70:
05:b6:51:33:a5:29:ce:6d:eb:74:7f:f7:de:d7:99:4a:be:c1:
95:b7:6b:07:4b:b6:77:f9:2b:90:11:67:2a:64:c4:ff:a2:66:
c1:06:6f:34:45:40:0f:5a:e3:9b:cb:cc:ca:0d:cc:e1:a2:80:
25:41:ae:a2:5f:30:68:9a:a3:57:ce:85:ce:df:94:b2:a7:12:
4e:a2:57:09:d5:1e:6d:e4:69:a5:b5:24:6f:0d:6e:38:c5:97:
21:b9:f2:3c:e3:2d:ab:ab:96:4e:81:52:bd:83:02:57:55:f5:
e3:1c:9a:59:2d:8d:c5:43:e3:89:8b:ba:cf:cb:45:80:01:7d:
c2:29:87:5d:5e:ee:0b:f9:c7:bb:30:71:bc:f0:c6:e7:10:2b:
a4:24:c0:ed:e4:b8:73:d2:8e:ca:64:b2:ed:0b:73:73:e2:67:
e7:ed:d9:0e:7a:9e:1e:64:b3:de:2e:e1:f9:10:14:85:c0:5a:
35:b2:c8:c3:da:2b:56:4a:1d:3e:65:b8:fa:1e:8e:6a:22:51:
32:2b:e6:b4:d7:9a:4c:43:8c:0b:2a:8c:cf:18:de:ef:89:16:
15:51:53:2f:54:06:b1:ee:ec:8b:cf:f5:5f:33:f2:e2:a5:15:
40:17:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:48 2026 by rpki-client