Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: HHs8KIPHkTjbYG+nWcEyb3TrzSjwCsgBorb71ysaps4=
Subject key identifier: 55:46:74:7E:38:2B:AC:07:49:DA:71:37:0F:5F:FB:18:D0:8D:B1:39
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019D27A8D8DBF8766AE7521470A9346695D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 154E
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: 0ENTznI9O6mRbIFjXM1sIoyJ60yHdemuIKdCIMIRw1g=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d8:db:f8:76:6a:e7:52:14:70:a9:34:66:95:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=5546747e382bac0749da71370f5ffb18d08db139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:9a:51:97:cb:b8:94:97:ee:a1:d2:76:b0:
21:3b:3e:53:0e:e1:0c:e0:66:c7:3d:12:22:53:21:
19:40:4f:a6:5b:a9:86:3c:f8:72:cb:ea:aa:d2:73:
36:8f:de:1d:18:4e:50:a3:8c:63:76:d7:c7:41:2f:
9c:65:cf:4a:54:a1:9e:e3:b3:81:e0:b9:68:01:ba:
fe:f0:e4:a6:42:db:e3:13:1d:a3:b4:5d:45:80:9b:
e5:af:f9:5e:9d:ce:c1:27:51:d8:92:9f:92:58:ce:
1b:73:8d:d2:37:a4:8b:3f:ff:37:ac:a2:ab:5d:d5:
80:df:e8:76:4a:a2:1a:1b:b8:af:57:1f:ed:dc:a2:
b7:20:98:54:63:21:07:8c:fd:88:cd:58:65:6b:d0:
d1:75:45:8c:37:65:90:1f:5f:af:ab:61:93:52:6e:
ef:81:ed:82:91:43:f1:b7:50:3e:d2:fa:7f:1d:e6:
67:72:9d:b0:1b:42:99:80:90:51:d9:87:c2:51:cb:
b5:dc:c6:e0:51:bb:62:20:67:9f:d6:03:7c:f7:53:
90:52:80:a0:07:70:6f:5f:6e:24:b4:fe:c1:2e:8c:
01:9e:76:56:f1:73:61:04:08:f2:a6:87:d0:f5:99:
ec:5d:ff:18:9b:0e:43:1b:20:47:e1:9c:62:7e:f2:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:74:7E:38:2B:AC:07:49:DA:71:37:0F:5F:FB:18:D0:8D:B1:39
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:60:c9:40:bb:97:94:35:da:6d:7d:bf:b4:26:63:43:45:af:
a0:2d:6f:96:b4:9c:f3:0e:2d:07:c3:4b:61:8a:83:4b:74:b4:
1a:d5:63:d4:d5:25:5f:27:33:f6:50:dc:f0:1c:a8:55:f4:10:
64:e0:7d:b9:bf:32:03:e8:53:86:e4:d7:0a:61:06:25:4d:56:
9f:d9:7e:3e:e5:35:d8:18:14:0c:5a:25:51:01:28:18:71:b1:
12:14:89:94:5b:fd:2a:ea:d5:47:e8:ce:d2:73:ba:45:e1:6f:
25:12:ae:be:3b:bc:6c:b9:3d:1d:b7:da:dd:65:83:ae:aa:96:
ff:7b:cd:6b:4a:fe:b5:b6:c6:30:ac:ad:34:ab:e9:9c:b7:4a:
98:12:1b:44:22:ee:19:a6:e3:28:70:ae:1a:21:21:bd:84:56:
52:a2:b7:7e:ea:1b:b3:5c:8c:f9:fa:24:fe:8c:f6:d6:6f:41:
1d:40:5a:83:99:58:a4:89:9f:c9:cc:d7:51:3c:3b:5b:68:57:
f6:2a:b2:00:eb:37:29:ca:6b:d8:c6:fd:04:57:f3:c6:07:95:
11:18:3d:2c:66:e4:a5:3b:b9:2e:99:b4:e6:1c:d6:19:9b:61:
b1:ec:1a:2e:f5:90:5e:16:17:a7:3f:fb:db:82:95:0c:95:2a:
db:77:ec:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:16 2026 by rpki-client