Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
File: IwbLbMzQnnXtGfwG-1kkzyejmMM.mft (raw, json)
Hash identifier: CNjhNQfBSkXSo1pPm6JiQnfCqycZJdr+uaDsLBOi2zA=
Subject key identifier: 62:CF:8D:55:2D:C4:06:40:A7:40:BA:BE:10:91:9E:86:D5:CE:0F:73
Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
Certificate issuer: /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Certificate serial: 019E20923BC66BCA6A182750942EF8BB0C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
Manifest number: 0683
Signing time: Wed 13 May 2026 09:01:54 +0000
Manifest this update: Wed 13 May 2026 09:01:54 +0000
Manifest next update: Thu 14 May 2026 09:01:54 +0000
Files and hashes: 1: IwbLbMzQnnXtGfwG-1kkzyejmMM.crl (hash: 3w5Q+A2AgWa8u/N+8+GKk4y/14b1Tjx8nxg7D6HS5ck=)
2: _ZmWi_4A68mliCVRNTlWAPhsl0g.roa (hash: 2jnimjwEDqLE8neS9dfpFX+zSMTp/IcCZCBA5fy0w8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:3b:c6:6b:ca:6a:18:27:50:94:2e:f8:bb:0c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Validity
Not Before: May 13 09:01:54 2026 GMT
Not After : May 14 09:01:54 2026 GMT
Subject: CN=62cf8d552dc40640a740babe10919e86d5ce0f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:3c:dc:52:a4:8d:58:07:49:92:17:59:2b:
3b:d2:49:23:da:34:8c:0b:11:6e:6b:35:d4:5f:ed:
a0:f3:cd:a8:f6:a7:5f:69:9a:26:c0:82:7c:fc:c2:
ac:07:d1:00:d0:e8:69:4d:0a:2c:76:97:ac:83:f4:
87:07:86:34:cb:6d:03:d5:1d:c7:de:cc:88:8f:16:
c7:16:8e:29:45:12:26:fa:01:88:c1:16:16:cb:ea:
15:ce:bd:0e:15:cc:f9:51:46:81:31:e3:04:b6:5b:
ca:7b:b3:7d:7e:d1:ad:76:77:6d:85:4b:8a:10:d7:
a8:76:2a:1e:90:81:3a:a6:83:28:0f:dc:30:a7:d6:
71:f2:83:f2:a7:02:a2:08:6f:30:02:04:0e:c1:c0:
d2:29:27:80:0f:75:4c:ff:ce:77:e4:cf:18:27:73:
54:00:40:58:65:60:56:d3:ac:af:75:73:29:84:34:
b0:71:d0:c2:de:33:c8:92:ce:dd:26:92:83:43:dc:
f5:97:3b:70:5f:e3:7a:63:f0:ac:22:4f:56:0d:67:
9a:ca:3c:31:1c:77:c8:f3:39:06:9d:4f:96:24:f7:
9b:4e:fb:91:2a:32:eb:0a:1c:92:f2:69:60:42:a9:
68:19:05:fa:50:3f:7f:e8:43:e0:1f:d0:ee:86:b0:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CF:8D:55:2D:C4:06:40:A7:40:BA:BE:10:91:9E:86:D5:CE:0F:73
X509v3 Authority Key Identifier:
keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0d:97:71:73:74:0b:0b:22:66:0e:18:11:6d:3f:e4:45:dc:
f6:f6:65:d3:cf:fb:75:51:a5:d3:3f:b8:46:6a:5e:b5:c8:68:
c3:e4:04:f3:af:cf:3b:35:be:06:e9:eb:94:82:c1:d6:c7:df:
d4:ae:91:81:22:7d:5d:c4:26:80:2e:95:8c:a9:e4:56:07:85:
e8:27:f5:70:21:b1:2d:e6:ae:72:87:c1:50:14:2b:78:4e:57:
c8:d3:40:0c:c1:0b:2d:82:68:9c:82:59:37:4b:07:30:70:54:
ad:ac:d3:d3:a6:92:b7:9a:66:15:ce:19:5b:27:de:19:05:b0:
b7:76:0b:95:b0:e8:23:e1:9e:76:cc:7a:ca:01:0f:0a:7e:d4:
21:54:44:38:ab:c7:e8:dc:ea:d9:4d:66:84:2f:f7:c5:6f:76:
6e:c7:53:94:8b:55:8b:61:0a:74:46:f3:e2:d6:2e:a3:aa:98:
a2:48:f7:c6:1d:28:3d:8b:0f:fb:b3:02:48:b7:ac:b1:68:22:
58:4c:45:df:7c:85:85:94:44:cf:f4:1b:ba:a7:1e:f6:f1:0a:
9c:f7:62:24:6d:62:3b:e5:44:7b:c1:46:c8:4f:fd:99:c4:66:
79:46:7d:9f:4d:ab:9f:ef:9e:3f:2d:55:d9:b8:30:90:6e:27:
54:ea:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:25:02 2026 by rpki-client