Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File: iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier: CzLYjWcd8Hgl71Gaf+CNmwZ7Cho0gZXo1rcHOYWlO8Q=
Subject key identifier: 61:61:F5:30:46:DF:C0:19:64:46:4F:79:E2:F3:33:90:74:46:71:96
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 019D25F0F39EC93C2F42AB8C28E556828EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number: 1606
Signing time: Wed 25 Mar 2026 17:00:41 +0000
Manifest this update: Wed 25 Mar 2026 17:00:41 +0000
Manifest next update: Thu 26 Mar 2026 17:00:41 +0000
Files and hashes: 1: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: wUT75FJ4batmXzNUwcRpXwl4knBqebYS/S/P8JBjb24=)
2: iz-s1SV_V4AaMH-6-vZcdBe9_28.roa (hash: AFIMSomYZRZ7dduGJLch69mRqRFbHaPPEtg9WN6niUo=)
3: m9EXLhYWcdpBDX-fRVjeJwFcks4.roa (hash: hO49V1SsoRH71HYWYcEzmHsz7GxUTsYMMr0hhLYqiYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f3:9e:c9:3c:2f:42:ab:8c:28:e5:56:82:8e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Mar 25 17:00:41 2026 GMT
Not After : Mar 26 17:00:41 2026 GMT
Subject: CN=6161f53046dfc01964464f79e2f3339074467196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:63:6b:c0:92:25:98:ce:65:0d:46:73:a6:
97:9e:28:8a:90:e6:ea:09:97:1c:85:dc:88:00:7e:
8d:c1:16:13:19:e4:3a:9c:29:a3:28:40:bf:82:ef:
97:16:a7:47:7e:b1:81:97:a2:34:72:53:3a:ec:6b:
45:c1:d1:a7:ff:ca:af:56:02:5c:26:2e:d9:fe:50:
e3:48:9f:41:7c:18:96:40:b2:77:a6:a8:62:d1:40:
c0:c9:68:69:04:e5:78:9a:7b:95:5a:0f:14:ae:1e:
33:fd:71:fb:49:3c:27:84:da:28:b9:ed:ae:92:2a:
ef:27:3b:26:b1:7b:eb:25:90:2e:48:da:93:54:d8:
70:47:76:d1:6e:f6:2b:ca:b7:83:2d:e3:f8:35:c8:
3e:37:32:8b:62:bb:1b:af:4b:85:df:c3:2a:72:cc:
0a:1f:83:9a:a3:7d:88:a7:9c:a2:a0:40:94:f0:64:
34:91:a8:ed:47:ae:a4:37:f4:cd:dd:4b:46:76:8c:
22:97:2f:6e:a6:fc:65:db:5a:dc:e3:eb:01:a3:d4:
11:f3:1b:19:0d:ec:c9:b3:b1:72:dc:e3:ae:c8:4b:
18:d8:bd:a0:aa:72:a2:ce:de:41:22:ca:1d:be:97:
ec:65:d8:b0:ba:0c:3b:a5:fb:3c:90:d0:01:8a:40:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:F5:30:46:DF:C0:19:64:46:4F:79:E2:F3:33:90:74:46:71:96
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:75:ff:5c:06:0e:70:33:27:a4:4f:76:9c:81:1f:28:55:4e:
30:c6:2e:23:08:a8:c3:dc:26:ec:88:4a:cd:f8:e5:b3:4a:fb:
2d:76:3c:54:38:94:13:d4:e1:ec:9a:6d:8f:92:37:d9:6c:5a:
5d:92:e4:f0:0d:56:60:79:22:ba:90:5c:97:7e:57:14:51:e0:
4b:2c:39:93:9c:4a:d5:5c:b5:02:4a:76:b0:59:84:c8:7d:4e:
98:f5:88:ae:3c:fe:53:76:31:95:0c:49:73:30:dd:65:c2:fa:
1a:50:ff:46:56:c1:d5:b0:90:75:0f:4d:19:02:c2:07:79:9c:
bf:2e:c4:41:00:8a:3c:5e:6d:11:c2:a5:31:10:f7:1b:91:8e:
34:03:24:db:fd:eb:ed:7e:18:43:41:bd:2c:03:c4:e2:18:c4:
97:de:87:98:63:5b:b6:fc:4a:bf:4b:17:44:53:fc:90:58:19:
66:42:74:72:af:d7:65:95:00:c8:91:2a:28:21:39:df:79:b7:
ef:d1:c8:79:1b:d6:7a:7e:44:fd:c0:b8:32:c8:c7:f4:5b:bf:
c8:79:f0:bd:5f:c5:77:79:4b:3d:40:0c:6f:24:9c:b2:c8:af:
1b:54:76:d2:9f:0c:dc:15:54:3c:3f:f8:60:b2:27:d7:89:4d:
71:5b:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:14 2026 by rpki-client