Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: iEKK/1yMc4sk024nd/+CyW+RfbXocBJvehDVQ6bnNVw=
Subject key identifier: 83:63:2B:37:20:2A:0B:F7:D0:7A:06:C6:E9:74:CC:1B:DC:B3:F4:ED
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01A0D200610D13BBD2B4E04AB03DD4F13535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 1ACB
Signing time: Thu 24 Sep 2026 06:00:35 +0000
Manifest this update: Thu 24 Sep 2026 06:00:35 +0000
Manifest next update: Fri 25 Sep 2026 06:00:35 +0000
Files and hashes: 1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
3: EDn6jQwDUb3_g3td9FsRuFag4vc.roa (hash: odWjY9IlQTpSIG4MhA9Jlqnd2G5ltLMnoOP98UOiafU=)
4: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: D/STMD9hasI9lVWBMUtA76/ldOxOck8pOkSsvRvbDic=)
5: R7Lu4Y1fCyTXONuoklyDGrymZag.roa (hash: 5a8I6IIILgZSlU2ehvXhgeJfg0YzkicxbnbV++shmxM=)
6: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
8: xOkTZSLsa771caq28USEEIkXpes.roa (hash: NwIcfsi68DSP9V21cWD03wWREzD0An2kgwljZOmrIf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:61:0d:13:bb:d2:b4:e0:4a:b0:3d:d4:f1:35:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Sep 24 06:00:35 2026 GMT
Not After : Sep 25 06:00:35 2026 GMT
Subject: CN=83632b37202a0bf7d07a06c6e974cc1bdcb3f4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:47:2b:a4:92:ce:f6:ba:df:7f:e2:ba:b2:
e0:64:54:88:ca:c6:65:83:84:57:9c:17:05:c5:54:
c0:89:ac:48:64:64:15:aa:08:e9:ce:7d:bf:3a:90:
40:3d:b9:b4:e8:d4:c2:10:1d:12:f3:66:cf:04:04:
4b:52:f0:a3:a9:6b:df:88:b0:38:72:88:3b:bb:50:
46:58:28:3d:b0:7e:ac:e1:2f:aa:a2:9c:f8:25:e9:
e4:f8:55:72:57:82:9c:a6:7d:4c:7e:84:dc:b1:4d:
2f:8a:cf:5b:68:a1:1a:99:c8:48:75:d7:fc:c5:02:
9a:8d:e3:79:1c:08:21:63:60:a7:5d:4c:77:fa:ab:
8d:ba:f6:ca:1e:84:e5:c4:fe:48:3d:d7:1d:ac:96:
4c:25:a1:10:10:9d:75:ba:3d:77:49:b1:de:7c:5c:
e5:66:31:45:ad:e2:f3:47:d5:ca:ab:9e:1d:e4:e2:
65:3b:b8:96:65:75:f3:c2:ce:43:15:fb:b5:06:3a:
20:ff:c0:c6:c1:02:35:3c:10:44:17:c8:69:28:40:
b9:ca:0c:a5:2f:a8:91:df:82:ff:dc:ee:ec:5f:a0:
bb:6e:3f:e9:f9:0d:b8:c7:d0:2b:ba:b0:7a:2b:c6:
e9:c4:6b:d0:ee:fb:d5:aa:8a:80:a7:86:a2:97:da:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:63:2B:37:20:2A:0B:F7:D0:7A:06:C6:E9:74:CC:1B:DC:B3:F4:ED
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e7:6e:e0:05:4a:be:40:85:53:ae:20:20:7d:18:50:69:2c:
8a:d0:07:ac:db:1c:6a:c9:99:6f:31:8e:b7:cf:c0:33:99:dc:
23:e2:30:2c:66:a1:07:ef:b1:05:25:3d:60:a9:48:25:33:cd:
52:bb:8a:58:bd:03:96:7b:b1:c2:bd:c5:36:cd:3b:d2:31:cb:
a0:63:97:a9:67:08:ee:cb:f4:8e:ed:86:de:4a:b6:51:1e:51:
62:bd:2b:74:25:5c:3c:8f:ed:38:08:1b:43:04:09:e7:9e:c3:
b6:f3:25:93:e9:07:d7:b3:ee:37:f2:69:7d:e9:f1:bc:41:86:
d8:b3:79:4e:4f:c6:9e:4e:25:c8:9a:89:31:19:4c:72:c2:33:
74:90:fe:39:da:e6:19:7d:f4:ad:2c:fd:00:a1:56:08:0e:2e:
9e:23:78:d5:0b:09:5d:ae:0f:6f:db:b8:51:f8:29:1a:44:d6:
f7:7d:1e:cd:b2:31:f0:9f:2e:38:93:ec:9d:3a:b6:42:f2:cc:
bf:02:04:d7:26:f2:09:b2:44:46:13:5c:da:c8:22:db:05:80:
00:15:bd:7c:fc:cf:81:b1:c8:fc:31:f5:af:5a:3b:6b:3e:c6:
99:d7:ed:c3:75:da:b2:81:01:64:f1:fb:de:cb:ff:81:b5:43:
11:a0:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:26:41 2026 by rpki-client