Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: zsw2I4nXf7+ZBZXUnnPJI37L7B8/Bxj3UPOlQEyvjgs=
Subject key identifier: 5B:CD:18:2D:BC:14:87:7A:A0:97:36:48:4F:57:12:D2:C6:83:38:03
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019CE4B5DCFB4E921936BF90FC65C952B116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 186D
Signing time: Fri 13 Mar 2026 01:00:49 +0000
Manifest this update: Fri 13 Mar 2026 01:00:49 +0000
Manifest next update: Sat 14 Mar 2026 01:00:49 +0000
Files and hashes: 1: 1AAfNkOtoDPkV923JU6uKxUBzig.roa (hash: m+bM/ZO45nJYI69NyHTcglKt6eRpdsvdb8DCz1bIBG0=)
2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: Dac+U+7NCmHZDltQbo2RpQH4pxo6Bfx5guLhIhxOFCE=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:dc:fb:4e:92:19:36:bf:90:fc:65:c9:52:b1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Mar 13 01:00:49 2026 GMT
Not After : Mar 14 01:00:49 2026 GMT
Subject: CN=5bcd182dbc14877aa09736484f5712d2c6833803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:ca:3e:18:30:11:79:cb:e9:2b:91:d8:0d:
7c:c4:9a:32:3f:ec:2f:51:86:87:0a:6c:81:3c:a1:
24:34:cf:c1:94:8e:31:41:2f:c3:29:aa:7f:75:7a:
03:ad:2e:ab:d0:c9:2d:ae:bd:76:ea:b5:da:fa:ff:
3a:6b:09:7c:63:67:3a:db:8b:57:1c:d4:94:a3:cd:
46:95:03:55:4f:81:ec:a6:a0:18:8c:ed:1e:c4:7d:
8e:18:83:39:54:0a:07:2c:45:84:dc:84:a1:23:14:
64:2f:71:e5:fb:5b:1b:22:fc:c6:d8:ea:36:9d:7c:
94:83:25:66:f5:d6:53:9c:33:62:30:02:e2:07:56:
11:68:70:bd:60:80:5c:9d:63:2a:c4:e9:58:7a:55:
f7:68:e9:e9:92:1e:0c:4b:b8:a6:21:77:c9:f2:18:
19:93:eb:ae:24:3d:0e:3a:c2:30:fa:79:ab:26:df:
f2:a0:2b:7a:50:f3:68:f4:93:c2:6a:ce:34:2d:af:
27:21:69:a6:21:66:fa:80:52:de:6f:81:f0:b2:75:
1b:25:36:f1:6e:5f:13:5f:e8:a8:3f:71:44:5b:55:
db:ea:7c:ff:d9:e9:52:05:bf:6d:c2:6c:5f:38:dd:
a4:bb:98:08:e5:be:3e:4d:f2:bb:c2:a6:c1:66:3c:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CD:18:2D:BC:14:87:7A:A0:97:36:48:4F:57:12:D2:C6:83:38:03
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e8:9a:a6:c9:d8:6a:bd:d0:58:b4:12:7b:17:12:04:3f:a5:
74:60:c0:55:9f:14:0a:8b:1f:f7:4f:e4:1d:5b:53:46:0f:d4:
00:ec:6c:10:00:b8:9a:31:eb:f0:ee:a1:83:59:b6:e2:9b:c9:
ee:dd:42:e2:17:00:ee:79:dd:cf:1b:d4:bc:0e:ae:45:e7:02:
ad:bb:0c:5b:4f:2a:4a:54:35:74:03:4d:ce:ce:c9:90:a4:e3:
9d:95:e9:7a:60:e3:f7:f5:59:03:41:80:da:36:35:93:5a:dc:
8a:eb:ee:e8:99:93:20:77:5a:7c:a4:f0:a5:54:28:11:8a:61:
ec:49:df:79:aa:fc:4e:7c:bb:32:14:98:de:b3:c9:80:ee:8b:
4e:7b:4a:67:aa:2d:3d:8e:2e:ad:1c:a4:27:44:26:e6:c3:0a:
f2:ac:02:9d:80:b0:40:9d:93:68:cf:19:52:82:6d:54:23:07:
c6:1b:2e:98:18:0e:19:2e:c9:33:2d:4f:60:a6:4c:4b:f4:23:
8c:70:ee:72:25:0d:84:d9:5d:6c:41:e1:ba:ec:65:0f:32:01:
dc:66:29:f7:cb:71:76:01:63:35:b2:49:82:90:17:92:aa:59:
89:2a:9a:b3:40:5b:69:be:6f:6c:98:58:a7:bc:2f:a3:9c:85:
be:99:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:22 2026 by rpki-client