Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: RWdQDC/Kc2WIQFGq6fLL8TUKLdlhnlY5SPKxdJ3edGY=
Subject key identifier: 11:66:A9:33:F4:C5:28:FF:A9:43:93:8F:35:B4:F1:A1:D0:4D:B9:FC
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019F91A3C9BE99AA2988EB1534CA2EE13349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 168E
Signing time: Fri 24 Jul 2026 01:00:58 +0000
Manifest this update: Fri 24 Jul 2026 01:00:58 +0000
Manifest next update: Sat 25 Jul 2026 01:00:58 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: /Fvxj+A8Is0OVcmZPmEjeFDCIVMM6AuWjdj1M/ja/lY=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:c9:be:99:aa:29:88:eb:15:34:ca:2e:e1:33:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Jul 24 01:00:58 2026 GMT
Not After : Jul 25 01:00:58 2026 GMT
Subject: CN=1166a933f4c528ffa943938f35b4f1a1d04db9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:0d:1d:9b:ce:69:f4:55:75:d4:9d:e8:aa:
89:8e:b6:06:2f:2f:d8:de:cc:52:01:10:6d:80:16:
e4:0f:5e:45:63:94:56:b5:1e:3b:41:da:a1:02:04:
40:bc:ec:48:ec:da:50:db:ef:5d:00:36:2f:b3:36:
5c:ff:c7:2f:6c:cd:96:25:2c:8c:1a:f7:3d:ec:1f:
98:a6:81:5c:eb:81:57:cb:97:0f:c8:fe:e9:54:e4:
eb:f9:6c:ba:4c:81:0f:15:d0:20:9e:73:e7:f3:11:
7a:08:25:e5:3c:dd:58:59:06:3c:c9:27:6e:d8:31:
04:c8:c8:70:a7:81:58:d5:46:11:fc:bf:69:7d:df:
51:a5:4a:66:b8:3a:a8:97:d2:af:5e:5e:73:84:5e:
58:52:d5:48:d0:2e:3e:7a:57:c9:41:36:6b:0a:f1:
28:a6:85:6a:fd:65:45:02:ba:32:4f:0b:e7:1e:c3:
16:04:38:c2:f7:05:2a:a9:73:79:c8:5a:c4:68:65:
81:25:ed:9b:c7:2e:4f:e2:74:1a:3f:a1:21:b6:60:
b7:d5:65:bf:ce:4e:68:ca:bf:5c:9f:02:d1:41:e7:
04:57:ed:be:59:6a:85:00:eb:47:a3:b3:6d:9b:22:
2e:89:09:8a:2c:5b:ee:3f:16:18:89:17:11:28:80:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:66:A9:33:F4:C5:28:FF:A9:43:93:8F:35:B4:F1:A1:D0:4D:B9:FC
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:81:73:be:d1:e0:af:24:df:83:73:c3:73:23:d6:b2:c1:58:
a1:6a:bc:df:ec:59:70:02:93:59:18:38:1d:29:e8:80:b2:a5:
f0:08:99:87:e5:4a:c7:b3:ba:4d:2b:5b:25:8d:2b:b8:b1:ea:
87:da:58:c7:9f:19:20:18:9b:7d:f0:83:16:9e:ce:06:eb:6a:
f5:f6:5e:7b:a6:5f:4c:22:89:7b:29:5b:c5:58:f2:b7:c7:d2:
fc:51:1d:9b:60:3d:73:87:c2:43:a1:48:2a:1c:64:94:00:45:
82:95:b2:1c:a1:2f:09:4f:09:50:56:18:5c:6b:2d:9e:a4:ab:
5c:b6:9b:54:9e:2b:6e:7b:7b:14:14:8d:33:76:f9:1a:96:5c:
31:88:3b:41:91:34:4b:89:96:2c:73:9e:7d:53:4c:38:d9:c9:
f3:9c:db:d9:c3:bb:af:a0:53:04:19:cf:eb:74:67:0f:76:ce:
ea:57:99:7c:35:5f:82:ce:75:34:52:57:03:be:17:89:e3:2e:
82:a5:b3:43:70:70:48:80:bf:d4:8f:68:3d:4c:b9:a3:66:68:
35:cf:5c:99:e5:fc:ea:95:47:93:e2:ec:fb:e3:b8:8a:dd:ef:
04:ec:0d:a8:4d:78:40:5d:ad:5f:3f:95:12:38:27:d7:cf:d5:
d9:43:76:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:15 2026 by rpki-client