Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: ZRLTWdRuR1G7LLM+SS/f9VkOQuZtVOZL8v12p2n8d4M=
Subject key identifier: 3D:34:86:96:01:85:DA:E9:09:DC:5E:3B:31:61:03:71:72:BD:8F:77
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 01A0E1AB54507D5A02AEE63CFF76FDEAB1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 173C
Signing time: Sun 27 Sep 2026 07:01:36 +0000
Manifest this update: Sun 27 Sep 2026 07:01:36 +0000
Manifest next update: Mon 28 Sep 2026 07:01:36 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: 9hUtRAZCeXx+u8LQRH+5H1FS/ZeHwBd02YTrIacbqqM=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:54:50:7d:5a:02:ae:e6:3c:ff:76:fd:ea:b1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Sep 27 07:01:36 2026 GMT
Not After : Sep 28 07:01:36 2026 GMT
Subject: CN=3d3486960185dae909dc5e3b3161037172bd8f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:e4:9c:c1:f1:67:3d:d3:e7:c6:90:a2:cd:
43:05:bd:67:9b:89:af:f4:9c:26:96:67:56:54:43:
07:f8:d4:05:93:ce:90:ff:d8:59:14:42:ee:c5:f5:
36:3c:43:20:45:dd:62:a7:bc:a4:bd:e4:47:b2:33:
88:41:4e:9a:f4:da:ff:6e:9b:dc:76:20:7d:a0:9c:
7e:57:ce:04:44:86:c0:bc:d7:c7:02:b5:14:d2:ec:
0b:65:82:1b:35:88:4b:22:5c:3b:80:76:47:4e:d2:
ee:a0:6d:76:7e:4a:e6:aa:c5:48:d4:f8:a3:dc:c9:
57:46:60:84:02:43:34:07:21:41:06:c9:2a:b9:57:
9b:a2:15:5e:f7:0e:08:fc:8b:a9:13:ec:32:45:76:
c1:e2:69:33:67:a8:dd:37:c3:8f:14:86:97:18:3f:
71:34:74:e9:e4:dc:75:7a:c5:cd:da:c5:65:fb:ec:
be:66:bd:90:a5:ac:61:e3:93:0c:c1:59:64:72:c1:
9e:c8:a1:5c:2a:7d:ed:fa:9a:5c:03:eb:01:f0:e2:
fe:20:7c:89:37:46:e8:56:8b:9d:ee:8a:e7:da:1c:
da:86:8a:86:4e:3a:49:af:e4:7a:14:83:90:64:e6:
57:28:e5:40:37:09:24:b1:d1:52:9c:f0:18:4f:b2:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:34:86:96:01:85:DA:E9:09:DC:5E:3B:31:61:03:71:72:BD:8F:77
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:50:58:d3:a3:43:40:23:68:3d:a1:6d:6a:80:e3:15:51:0e:
01:ea:06:ee:da:29:f4:17:65:99:f8:59:27:76:87:4a:3f:0b:
a3:b4:cb:ee:9d:e0:ae:c1:ef:46:ae:d3:a5:75:3e:29:42:73:
87:c0:e9:9d:0c:62:15:c1:3c:98:57:40:5e:8c:e5:01:6c:f8:
27:fe:d7:36:71:68:0c:70:c2:68:c1:29:43:1f:1f:32:3e:7e:
35:67:81:6f:a5:ae:4a:6c:0f:26:6a:ab:b8:25:e7:ad:b6:1c:
20:cb:4d:97:a5:b5:13:a6:20:6a:8f:b8:e1:3f:f3:69:72:9f:
30:a5:ec:35:b8:95:62:3b:0b:e6:5a:18:90:ee:5c:67:27:16:
0f:c8:6d:08:9f:d2:ae:d3:aa:05:11:5b:69:97:7c:ba:74:bb:
0c:5f:25:eb:e3:d9:77:06:be:77:2f:df:f6:02:4d:b9:2e:61:
8b:ce:cc:fa:44:15:90:68:c5:9a:f0:59:17:8c:0a:bd:c5:2b:
4d:04:a5:a1:78:87:bf:e9:7a:f2:d6:bc:ae:e1:af:6e:25:ad:
d0:c3:bd:e5:7a:19:9a:f7:7b:3d:49:d3:76:04:ee:76:01:c7:
d1:1e:2a:8f:07:94:12:e1:68:3e:a6:03:90:5b:d6:9c:8e:38:
48:f3:18:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:51:40 2026 by rpki-client