Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: NoCvhe2ZvH+Rd1baR9Vjkxar50z+/xJsg+lm5574Epw=
Subject key identifier: 70:4E:A3:5F:11:A6:97:8B:CB:D0:63:F7:BA:9C:BE:3B:80:3A:4F:5B
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019E1EDA19837714CC32C9CA2A8F4271DD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 15CE
Signing time: Wed 13 May 2026 01:01:10 +0000
Manifest this update: Wed 13 May 2026 01:01:10 +0000
Manifest next update: Thu 14 May 2026 01:01:10 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: gFth4OcaQJuWh701atuhtuqBygATwwJUsuOTtJY747w=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:19:83:77:14:cc:32:c9:ca:2a:8f:42:71:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: May 13 01:01:10 2026 GMT
Not After : May 14 01:01:10 2026 GMT
Subject: CN=704ea35f11a6978bcbd063f7ba9cbe3b803a4f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:f8:ff:4f:06:c5:c2:2e:e3:e2:de:86:17:
e0:2a:7a:16:c9:39:ff:22:a5:ed:ad:b6:9f:5b:23:
19:26:e9:74:f7:93:fa:ed:c5:f6:5c:bc:35:f9:6f:
17:e0:43:6f:e0:f8:fd:e3:b7:20:94:0d:8f:70:32:
e4:7a:55:5f:70:f9:cf:d5:bc:9e:c2:0d:5a:8b:74:
01:16:6a:37:a0:e5:a3:72:f7:e6:ad:d3:b5:a4:51:
c2:36:46:25:34:87:a4:f6:6a:bc:d3:ef:7c:ef:aa:
aa:bc:7f:b8:2a:1f:35:71:84:3d:a9:8c:8b:d5:54:
55:47:d0:99:6a:e6:f4:57:a6:ba:cd:4f:51:d8:fd:
c9:57:b3:6e:17:08:dc:8e:5f:5a:7a:3d:7a:c4:5f:
1c:02:b4:1f:75:77:f3:33:31:ef:00:4f:ae:51:91:
a4:69:3b:8d:a0:7f:88:ea:6e:7a:e0:23:cb:53:36:
49:84:f1:30:fc:9f:04:57:d3:37:6e:a2:cf:2d:98:
1f:29:bf:51:80:1d:b0:cc:f1:ce:73:76:9d:05:ef:
96:e9:cd:fc:4c:c6:9a:56:f2:2f:a1:20:33:fb:a5:
d5:f5:c9:8c:a7:a8:b8:19:64:4c:5f:ee:2c:29:ad:
65:32:15:08:46:37:f6:4a:57:d6:a0:67:10:7f:d4:
56:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:A3:5F:11:A6:97:8B:CB:D0:63:F7:BA:9C:BE:3B:80:3A:4F:5B
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:d8:e6:25:af:73:08:eb:95:06:0a:e1:a0:41:be:6f:2a:
cd:46:4c:c8:15:36:13:e8:b6:fe:5b:fb:0b:13:c3:49:4e:bd:
cc:c4:7b:68:27:4f:f6:88:2e:5b:cd:86:32:15:1c:22:e2:80:
26:1b:6b:44:db:e3:a0:05:cb:e8:bb:8c:8f:74:fe:20:ab:91:
cf:0b:4b:86:46:7d:e3:06:70:e6:28:f0:41:17:d5:41:32:b2:
e3:9e:2d:44:5b:16:03:72:c0:4d:27:ee:0b:56:e2:50:89:c6:
f9:77:17:79:37:74:a6:70:bd:9d:35:01:b0:48:89:56:57:2b:
b1:9d:df:df:5c:3d:fb:10:1a:59:e7:04:52:54:70:c6:86:88:
ba:b6:a5:2d:d2:dd:28:d4:4b:e0:43:8a:14:80:78:de:1b:72:
86:e7:bf:74:13:0d:6d:f7:8a:72:59:c6:07:a2:3d:27:83:3d:
1f:23:c2:e6:3d:12:3a:dc:d9:e1:97:50:fb:a3:82:74:e6:71:
7e:32:20:74:21:4e:a9:e5:0f:62:de:b1:83:4d:56:0a:4d:f6:
15:5f:af:4a:03:8e:a4:08:19:68:7b:0e:fa:b7:e1:25:05:12:
88:35:c5:37:f9:3d:e9:0c:9a:78:83:fb:41:1c:c5:2e:c4:f9:
89:e9:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:06 2026 by rpki-client