Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: JS5kg7CSFBQLd0yfFR/AIOMyW1LnOOzAOkeUYiBOiAM=
Subject key identifier: 8B:EB:DD:15:9A:64:E2:F8:B8:63:94:4D:CD:FA:7A:8A:FF:90:1E:AE
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 019D265FA1E6DB157C65E71F0ED02B8406A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 0991
Signing time: Wed 25 Mar 2026 19:01:34 +0000
Manifest this update: Wed 25 Mar 2026 19:01:34 +0000
Manifest next update: Thu 26 Mar 2026 19:01:34 +0000
Files and hashes: 1: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: 4etWxrxRX2y4FcgY/9fYbv7KO+yRZx82S7WSLtnW/+U=)
2: rTrNf2BtsL1vlw_R__r7UKcCZJk.roa (hash: lQAxfhbBIAhm99xgTizcCxmFSvD0y0yK3pththJkeEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a1:e6:db:15:7c:65:e7:1f:0e:d0:2b:84:06:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: Mar 25 19:01:34 2026 GMT
Not After : Mar 26 19:01:34 2026 GMT
Subject: CN=8bebdd159a64e2f8b863944dcdfa7a8aff901eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:05:84:25:71:69:87:80:7f:56:b4:f8:f1:
0b:3d:17:13:94:2b:b0:9a:8d:61:85:50:9c:74:ce:
77:f5:65:8a:86:6a:50:e7:31:f2:12:8c:ba:74:87:
5f:fd:ef:44:1e:59:b0:c7:ee:34:59:56:f9:ba:b5:
f8:66:1a:e7:66:8d:cd:8d:7c:c8:18:f1:12:a0:26:
dc:97:e8:f3:64:72:06:32:ab:0c:a3:10:f5:83:79:
6c:c8:5f:2a:46:44:44:17:99:0a:8e:33:d7:2c:7c:
d2:5d:86:04:8a:c8:5d:d8:02:78:5c:c6:19:f9:57:
3b:8a:2f:c2:00:be:eb:2f:70:1f:d8:89:c5:83:5f:
5d:89:e4:e9:60:5b:a2:5e:3d:27:d1:f5:25:71:1f:
1a:01:df:89:8b:f9:62:d7:3e:68:5a:41:fb:a5:19:
77:01:da:53:f7:2f:18:07:2f:aa:b3:df:94:fe:af:
e6:e6:77:06:cf:43:50:00:62:ed:6c:da:d9:a4:c8:
f8:c6:c2:ed:04:80:dc:10:fd:a2:58:a1:97:f5:a2:
77:7f:bc:ee:24:6f:a3:27:8a:ec:87:8a:25:47:a3:
70:df:22:e2:f3:f7:2e:a8:e2:d5:c4:77:4d:a1:f2:
50:bb:d5:c4:d8:df:42:8e:bf:48:07:6a:3f:f7:d2:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:DD:15:9A:64:E2:F8:B8:63:94:4D:CD:FA:7A:8A:FF:90:1E:AE
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1e:63:54:5f:e6:11:aa:97:36:6c:10:8c:99:5e:05:d2:1d:
0d:18:05:b9:38:d2:49:ca:c8:dd:d5:77:cc:bc:60:1a:cc:61:
bb:b3:51:a4:a7:6f:25:20:14:fa:c8:1a:a7:33:54:90:d7:7f:
f0:9a:64:0d:9c:f7:22:ea:d8:cd:76:7d:c6:5d:fe:99:87:be:
96:b1:c5:8d:e0:d8:36:62:93:5e:b8:3a:14:88:ef:e1:95:aa:
45:f4:12:d3:b9:b9:cb:89:12:05:43:2c:15:c9:bc:ef:12:dd:
90:29:02:75:03:a7:d8:6a:f2:23:10:44:df:c3:0f:ef:3e:dd:
ff:cf:b5:47:22:b3:f8:d3:4c:db:40:0f:20:eb:15:c6:85:cd:
d8:6d:18:da:17:5e:ff:9a:0d:b0:ac:d6:fe:55:fb:29:8e:04:
c5:57:6c:93:4c:73:e7:f3:36:36:81:0e:1a:d6:76:ee:c4:eb:
0c:d3:bc:b2:30:ff:1c:ac:98:7e:6b:35:bd:d2:f7:db:d2:f7:
76:a4:1a:41:b3:29:d3:d9:50:2a:01:e0:fe:4e:67:bd:66:50:
de:93:42:bb:fc:69:bb:83:58:98:60:c7:f8:bd:e5:cf:ca:61:
5a:c8:bc:9d:6a:17:a0:f1:6a:78:22:26:36:23:41:fb:80:7b:
62:63:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:03 2026 by rpki-client