Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
File: iWsznbz4QR1YQAjPAptHyIqzedU.mft (raw, json)
Hash identifier: ffMvdiDJwp+YjLsUzMs3kf95AxeV5S26NGudQmUzIcA=
Subject key identifier: 5A:57:1E:14:80:81:0A:60:8D:95:CF:6B:F7:D7:C2:EA:6F:4F:47:15
Authority key identifier: 89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
Certificate issuer: /CN=896b339dbcf8411d584008cf029b47c88ab379d5
Certificate serial: 01A0DA2852E80B04C2262236862B9372B35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
Manifest number: 024D
Signing time: Fri 25 Sep 2026 20:01:10 +0000
Manifest this update: Fri 25 Sep 2026 20:01:10 +0000
Manifest next update: Sat 26 Sep 2026 20:01:10 +0000
Files and hashes: 1: _01xdN9b6VGiDq8TdVfHkv4nsNA.roa (hash: cof+3EhtbeAEqNmK/OvBSq8ShRaGyYdb9JejvgRl8nA=)
2: iWsznbz4QR1YQAjPAptHyIqzedU.crl (hash: EX+KJ3OPONbAOtw/flLxxWdgSkk8XbphTQ49GZd06KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:52:e8:0b:04:c2:26:22:36:86:2b:93:72:b3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896b339dbcf8411d584008cf029b47c88ab379d5
Validity
Not Before: Sep 25 20:01:10 2026 GMT
Not After : Sep 26 20:01:10 2026 GMT
Subject: CN=5a571e1480810a608d95cf6bf7d7c2ea6f4f4715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:50:b9:f5:29:3b:19:d4:52:3c:a4:94:2c:
ae:00:8f:17:cb:02:38:39:ae:45:be:b9:fb:7a:10:
53:40:6b:dd:a9:6a:3e:8c:ee:85:80:46:42:71:f6:
41:a6:09:da:64:60:95:0a:27:8a:8a:54:c7:eb:20:
ac:9d:20:69:5b:21:46:db:4e:09:78:36:04:9b:28:
6d:6c:5e:b6:7b:21:6c:d2:32:5a:1b:85:5f:a9:c3:
b3:5a:5d:d3:ce:59:bc:e1:33:7b:d5:8d:1e:8b:23:
b3:94:62:6e:7b:b6:f4:3a:cb:c2:3c:6a:10:ef:8d:
17:5c:cb:4f:73:f3:e7:9c:4f:5d:63:cb:1d:94:a9:
cc:8b:1b:1e:19:c3:99:c5:69:df:46:67:ae:74:71:
16:45:3d:dd:7a:1f:8a:e6:77:a4:8f:0c:a5:14:9b:
34:76:6b:b3:39:3c:2f:2d:42:e2:44:2f:11:f2:64:
18:ed:e8:a9:95:80:c8:72:1c:ea:8a:39:34:c0:26:
cf:33:3a:6a:27:6c:68:c0:69:5e:69:13:e9:45:52:
bb:78:b8:f7:59:17:c0:eb:8f:91:ff:2b:72:c2:3f:
90:2f:4c:b1:9a:30:ff:7c:d9:1f:ff:55:8d:35:c0:
bb:8e:66:ce:fe:bf:9e:4f:d3:e3:4a:f3:88:63:f2:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:1E:14:80:81:0A:60:8D:95:CF:6B:F7:D7:C2:EA:6F:4F:47:15
X509v3 Authority Key Identifier:
keyid:89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:99:9b:5f:d1:ac:ce:93:08:b9:9b:c8:9e:fc:41:5b:b4:e6:
e0:e9:a3:42:ea:5d:d2:d4:57:0c:03:ae:1d:6d:3a:1e:1a:d1:
57:92:57:7b:d4:97:9b:23:44:78:f8:4b:44:45:c3:a4:ca:fb:
5a:46:27:95:ee:e5:20:be:29:58:47:29:8d:80:50:86:8a:57:
ba:3c:e8:5b:76:f6:22:a2:1f:c3:19:cf:cf:72:72:fa:d5:6f:
6e:f2:8a:0a:52:d4:5f:3b:c4:6f:30:1d:95:92:35:a1:08:f5:
5b:eb:b8:41:e8:10:44:ba:43:9d:af:04:4d:24:ca:ee:07:74:
1d:4a:b2:fa:76:3f:d0:ad:d6:ce:30:ce:09:93:82:61:19:22:
3f:87:d0:3a:4f:76:0d:b9:e6:2e:95:e1:4b:a4:9f:7b:b0:bd:
99:ce:e8:65:ba:0f:a2:81:19:c9:9d:24:3c:c1:63:49:23:9d:
12:c0:a1:c0:6b:30:03:4d:23:dd:2c:b3:f2:b3:58:a3:8d:3b:
31:1f:d4:81:8c:26:38:5f:f5:d6:90:e3:1f:5b:be:1f:60:ff:
72:c0:eb:d7:dd:eb:a9:95:be:61:8d:15:14:13:38:34:7d:38:
2d:44:6b:cb:b7:a1:46:14:34:f9:92:80:64:f5:86:b3:0e:0a:
55:ff:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:38:43 2026 by rpki-client