Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: vvx4Uox4uTgovmjIlC57aAT4/yN6qebIJX/gNtr51Hc=
Subject key identifier: BE:C5:DD:9F:73:55:12:09:9D:27:A7:13:6E:FA:23:1E:29:D7:3A:C2
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 01A0E3996EE826C3ED6AAEBFFDD3E6DB098D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 173D
Signing time: Sun 27 Sep 2026 16:01:18 +0000
Manifest this update: Sun 27 Sep 2026 16:01:18 +0000
Manifest next update: Mon 28 Sep 2026 16:01:18 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: SX8wjNdg/wvPj6X7rOCRqWgYwe7XWjEQfZYuHTaACzg=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:6e:e8:26:c3:ed:6a:ae:bf:fd:d3:e6:db:09:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Sep 27 16:01:18 2026 GMT
Not After : Sep 28 16:01:18 2026 GMT
Subject: CN=bec5dd9f735512099d27a7136efa231e29d73ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:61:6a:ec:64:a9:03:1e:1e:17:6a:a4:8a:
d6:48:44:2d:cf:8f:bb:03:13:25:20:ab:39:fe:b4:
61:36:33:70:51:a8:47:5f:3b:c6:b2:b5:41:89:e9:
0b:ce:81:cf:57:e1:ea:05:88:c9:68:51:51:a9:52:
c4:6a:17:fa:09:ad:ec:85:09:d7:7e:3c:08:11:26:
aa:e3:71:d3:63:0a:ab:c3:a7:d3:02:75:28:e5:03:
c6:43:47:79:d6:87:f1:50:6d:7d:77:21:08:eb:ef:
cb:34:03:30:08:6e:3e:f0:35:db:8f:68:35:8a:2e:
71:06:b1:ec:d5:d0:65:94:43:de:64:b1:7a:d1:97:
54:19:40:b2:89:f1:14:a1:98:66:02:d1:65:32:84:
5a:63:fe:40:39:89:70:03:25:c4:5c:2d:66:8f:e6:
c9:58:71:40:eb:e3:5e:75:2b:b8:bb:2a:89:2c:d3:
9d:b2:68:f6:84:2d:f9:bf:e3:38:e0:c7:ff:0b:35:
61:07:37:9b:94:03:32:bc:1e:43:a2:db:17:6f:2b:
5f:1a:b1:78:53:f0:57:11:a2:46:fc:2f:c6:e9:f9:
a5:58:f2:40:db:40:13:c9:97:00:e4:61:9e:b1:e6:
58:b0:8d:47:23:fd:f1:5a:b6:cd:4d:37:6d:9b:70:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:DD:9F:73:55:12:09:9D:27:A7:13:6E:FA:23:1E:29:D7:3A:C2
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:8f:62:c8:1d:76:4a:6d:a1:13:59:76:a9:cb:76:f6:33:
e9:00:76:c2:0f:91:41:e5:b1:66:ca:81:68:ed:72:72:13:76:
a7:2d:5a:6b:02:2b:1e:43:60:bf:f7:19:f0:f5:23:aa:53:63:
f1:95:78:af:dc:c0:8d:d6:15:11:51:3d:17:71:ce:26:eb:e1:
5d:1a:10:b1:8f:f3:42:10:74:e8:1f:8d:62:78:8f:f9:cf:38:
b9:a4:d4:ea:55:4b:81:dc:a0:20:d0:f0:48:3d:c7:f6:a1:46:
35:09:36:f4:65:40:bb:30:3f:ae:2b:dc:0d:23:4d:c8:48:1f:
58:54:6b:33:13:7d:37:eb:78:40:6a:e0:36:57:ef:5b:87:cd:
44:0a:90:4a:1b:1f:32:ca:5e:b3:bb:40:81:9b:9f:9c:34:93:
91:fd:3f:d1:20:49:9f:ac:af:dd:59:79:7d:bc:0c:32:6b:7f:
91:f9:f0:7d:83:8c:8e:f2:61:58:8f:80:48:c4:c9:a0:99:87:
b0:cc:28:9e:4f:00:81:8d:36:d1:f2:d7:f7:7b:87:67:c6:30:
3b:77:fc:54:2c:53:fa:e6:a3:a4:e1:ab:40:08:3e:de:d2:b9:
97:c5:ba:8b:5e:fe:59:06:2e:6b:e8:21:eb:b1:dc:65:d0:6e:
1f:95:17:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjmW7oJsPtaq6//dPm2wmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy
NjhlZDcwHhcNMjYwOTI3MTYwMTE4WhcNMjYwOTI4MTYwMTE4WjAzMTEwLwYDVQQD
EyhiZWM1ZGQ5ZjczNTUxMjA5OWQyN2E3MTM2ZWZhMjMxZTI5ZDczYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPphauxkqQMeHhdqpIrWSEQtz4+7
AxMlIKs5/rRhNjNwUahHXzvGsrVBiekLzoHPV+HqBYjJaFFRqVLEahf6Ca3shQnX
fjwIESaq43HTYwqrw6fTAnUo5QPGQ0d51ofxUG19dyEI6+/LNAMwCG4+8DXbj2g1
ii5xBrHs1dBllEPeZLF60ZdUGUCyifEUoZhmAtFlMoRaY/5AOYlwAyXEXC1mj+bJ
WHFA6+NedSu4uyqJLNOdsmj2hC35v+M44Mf/CzVhBzeblAMyvB5DotsXbytfGrF4
U/BXEaJG/C/G6fmlWPJA20ATyZcA5GGeseZYsI1HI/3xWrbNTTdtm3DdxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7F3Z9zVRIJnSenE276Ix4p1zrCMB8GA1UdIwQY
MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct
ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk
LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfiPYsgd
dkptoRNZdqnLdvYz6QB2wg+RQeWxZsqBaO1ychN2py1aawIrHkNgv/cZ8PUjqlNj
8ZV4r9zAjdYVEVE9F3HOJuvhXRoQsY/zQhB06B+NYniP+c84uaTU6lVLgdygINDw
SD3H9qFGNQk29GVAuzA/rivcDSNNyEgfWFRrMxN9N+t4QGrgNlfvW4fNRAqQShsf
Mspes7tAgZufnDSTkf0/0SBJn6yv3Vl5fbwMMmt/kfnwfYOMjvJhWI+ASMTJoJmH
sMwonk8AgY020fLX93uHZ8YwO3f8VCxT+uajpOGrQAg+3tK5l8W6i17+WQYua+gh
67HcZdBuH5UXcw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 19:24:34 2026 by rpki-client