Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: eUUiP5Cd2g39MZjg22knHYO+6L1u9hbZMfqWP7Xn+q0=
Subject key identifier: FF:E5:1B:58:E3:C4:4E:48:0C:B1:19:53:9B:C2:10:81:49:04:2D:D9
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 019E216D6595C165A810391ACB7E13DB931A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 0A13
Signing time: Wed 13 May 2026 13:01:17 +0000
Manifest this update: Wed 13 May 2026 13:01:17 +0000
Manifest next update: Thu 14 May 2026 13:01:17 +0000
Files and hashes: 1: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: JffwlvyZQJvrcogEkA1FVogbAd9LvpbXSYxQG9b/QWI=)
2: rTrNf2BtsL1vlw_R__r7UKcCZJk.roa (hash: lQAxfhbBIAhm99xgTizcCxmFSvD0y0yK3pththJkeEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:65:95:c1:65:a8:10:39:1a:cb:7e:13:db:93:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: May 13 13:01:17 2026 GMT
Not After : May 14 13:01:17 2026 GMT
Subject: CN=ffe51b58e3c44e480cb119539bc2108149042dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:23:62:9d:d7:d5:dc:e4:74:5d:e1:c7:b2:
1e:03:0d:05:47:68:3c:58:5f:5d:1a:1e:d3:5e:64:
1e:07:e4:30:96:d8:94:90:3d:f6:fc:d8:c4:78:3a:
e5:55:d9:57:3f:a7:dd:64:3f:34:9d:c4:7f:6a:4d:
dd:d2:d4:f5:89:95:6a:c4:6e:2c:03:c0:f5:cb:7c:
9e:dc:b2:05:ef:8c:ce:8b:4b:5d:6c:7a:90:49:33:
db:7f:f8:e3:9f:80:16:5d:82:78:b4:0f:2e:02:70:
dd:6f:59:bc:36:b7:2a:32:62:57:5e:1a:17:1f:3f:
fe:9e:dc:d9:b3:6f:7f:a0:89:6e:92:da:f3:6e:7f:
a3:c6:a2:b0:7f:6a:3b:37:58:f6:ab:75:77:8f:a6:
d0:67:51:3d:9d:4d:a1:9d:eb:28:0b:3c:d2:2c:39:
48:a0:4c:b0:2d:46:f7:6f:f2:1e:08:fc:16:36:a5:
c1:1a:b2:3e:af:bb:be:01:e1:f2:7e:f5:1d:97:f9:
5a:08:fb:cc:e5:67:a6:2e:e0:86:4f:b6:91:47:6d:
aa:e8:e9:ed:88:f2:dc:a6:18:24:9b:65:07:99:78:
c0:7d:d7:92:b7:09:30:8c:4b:65:2b:fc:17:cc:a3:
c0:00:02:8a:59:0c:1f:3c:d9:be:39:d4:89:a3:90:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E5:1B:58:E3:C4:4E:48:0C:B1:19:53:9B:C2:10:81:49:04:2D:D9
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:90:6a:5f:7f:4a:be:6f:28:06:06:59:6c:53:b9:28:6c:45:
8e:94:19:5b:f0:ee:1a:75:3b:e5:ea:96:b4:0a:84:36:a7:c8:
69:fe:d1:fd:dd:c8:37:f1:78:b4:69:e9:eb:9f:98:96:7b:ee:
38:eb:e4:3f:74:d9:a7:25:23:36:a5:1e:eb:3f:ad:85:f2:8a:
7f:25:7b:88:8d:e7:e8:4c:6e:23:85:4f:40:d1:57:3b:18:a5:
10:9f:78:10:09:10:a9:55:b2:7e:30:4a:7c:1e:f6:a2:a8:94:
01:e7:7d:d4:d9:73:39:04:4b:20:f7:12:6d:a1:e5:de:8a:1d:
f1:46:71:4a:58:15:77:aa:79:0a:b0:92:bc:dc:50:42:22:59:
41:46:db:3c:2e:d8:87:a5:53:0e:1a:e1:91:3d:e3:86:07:47:
11:d1:3d:c0:71:1b:6c:29:87:80:82:e6:c5:f1:1c:39:8c:3b:
48:c3:78:8d:ae:f1:66:39:b4:b6:73:09:78:26:8f:74:ec:a2:
26:bd:b7:a9:60:67:d5:0c:07:1a:90:0a:6b:40:24:ad:c6:4f:
eb:f0:29:88:d9:5e:dd:e6:f2:e9:cd:d1:a3:38:49:cd:fd:fc:
44:fb:d5:4d:32:c1:2d:ed:59:93:05:84:b0:9a:10:1b:5f:8a:
b6:4f:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:29 2026 by rpki-client