Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
File: iWsznbz4QR1YQAjPAptHyIqzedU.mft (raw, json)
Hash identifier: j6aAm0GekXq41TS8/Q4NSZ9MI+89jVheMttFXoZKxCg=
Subject key identifier: 35:DE:F2:63:02:42:1B:AD:69:B2:62:02:35:E5:95:4D:3C:33:01:84
Authority key identifier: 89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
Certificate issuer: /CN=896b339dbcf8411d584008cf029b47c88ab379d5
Certificate serial: 019E1F109290160266E0324A5B83033100B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
Manifest number: E3
Signing time: Wed 13 May 2026 02:00:40 +0000
Manifest this update: Wed 13 May 2026 02:00:40 +0000
Manifest next update: Thu 14 May 2026 02:00:40 +0000
Files and hashes: 1: _01xdN9b6VGiDq8TdVfHkv4nsNA.roa (hash: cof+3EhtbeAEqNmK/OvBSq8ShRaGyYdb9JejvgRl8nA=)
2: iWsznbz4QR1YQAjPAptHyIqzedU.crl (hash: Zz3cyzPJbvln1qk75vOfqY9srPWgHKLfB1zFac6iN+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:92:90:16:02:66:e0:32:4a:5b:83:03:31:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896b339dbcf8411d584008cf029b47c88ab379d5
Validity
Not Before: May 13 02:00:40 2026 GMT
Not After : May 14 02:00:40 2026 GMT
Subject: CN=35def26302421bad69b2620235e5954d3c330184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:8d:0d:a7:22:63:fa:12:c7:c6:7a:96:af:
1e:b1:b6:ef:55:f7:55:0b:04:c9:0d:37:04:92:1e:
2b:fc:6f:e8:f5:26:e9:64:3f:a2:63:1d:13:4f:7b:
1d:81:5d:60:c3:8b:0f:8e:29:22:74:ef:c9:a5:e8:
f0:f1:1a:d5:71:42:47:0f:10:53:ad:e7:f7:49:19:
51:e6:5d:3a:b7:e2:2a:bc:d0:bf:1d:2e:aa:7e:6f:
4d:68:c9:32:b4:48:9d:5a:65:7e:c8:05:2c:f2:28:
37:e5:a3:86:79:62:72:01:56:cc:71:a6:4c:40:c2:
01:b1:4d:c1:09:ef:9c:90:c4:42:53:61:12:a8:0f:
ae:33:40:99:c6:06:0b:df:72:79:d7:bf:f4:b5:14:
61:e2:c4:44:3b:2f:8c:d1:ea:ee:71:3e:7b:81:05:
2b:7e:99:17:b0:0d:3a:11:75:d4:bb:48:cb:fa:44:
24:b8:fa:c1:db:9c:18:ec:54:2e:3a:ae:8a:e4:1d:
45:52:36:39:ef:f1:1c:d2:58:6c:41:41:5d:66:92:
df:5c:81:ef:75:a5:97:8e:11:ff:50:b9:46:4f:59:
9e:be:5b:f6:01:c2:44:67:fc:ea:a8:0d:ee:a9:a7:
0e:c8:1a:2b:1d:83:08:ba:a0:ad:fa:3c:8f:6d:e2:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:F2:63:02:42:1B:AD:69:B2:62:02:35:E5:95:4D:3C:33:01:84
X509v3 Authority Key Identifier:
keyid:89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:28:1c:cd:7a:d3:d7:0d:d0:6f:12:90:e7:24:ca:d4:fc:9a:
0f:83:ad:f5:0c:50:f9:9a:0d:20:74:58:77:34:ed:72:30:7b:
87:e1:bc:6e:90:1f:4b:26:a6:d6:be:0c:ef:c5:d8:ff:19:24:
eb:02:fd:3b:8d:b8:a5:08:4b:61:6a:74:95:dd:56:02:73:ac:
0d:72:a1:54:a7:dc:58:5a:0a:06:85:ab:66:13:b7:96:d3:c4:
aa:5c:30:46:1f:41:34:90:5c:44:33:14:c9:13:7d:a4:5c:a0:
8a:34:d7:66:cb:47:3e:91:17:05:d5:b9:cb:20:89:9e:e7:ec:
e6:4e:28:7c:4a:2f:69:8f:d7:94:40:e3:9d:0e:16:08:bb:96:
88:f1:ff:3f:76:51:ac:0c:d2:fb:36:82:39:e7:d4:43:36:15:
51:ef:e6:f0:66:4d:b6:3e:70:c1:87:ea:b4:8d:a5:83:0f:ac:
3c:c9:3d:95:e7:b4:c9:96:5a:27:d4:ec:e0:8b:07:75:6c:6d:
db:b4:44:da:0a:70:2d:49:c1:cc:c9:28:c5:50:6d:1c:a4:37:
26:24:1c:00:8a:52:63:f7:3b:f0:7d:1a:34:8a:47:32:10:c9:
3f:09:0e:75:e9:e1:73:07:a7:45:cf:81:3a:21:41:ec:4a:1a:
c3:8f:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:55 2026 by rpki-client