Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: TOt6tdcefTWqOlZgDkr0UoIafV1lotgR48xcLjFlJ20=
Subject key identifier: BA:06:7A:16:E7:32:8A:A9:E6:CC:8B:44:01:48:06:85:5E:9B:8D:1E
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019EB80EE0F3D1FA5EC5431B29449BDB7332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 195F
Signing time: Thu 11 Jun 2026 19:00:43 +0000
Manifest this update: Thu 11 Jun 2026 19:00:43 +0000
Manifest next update: Fri 12 Jun 2026 19:00:43 +0000
Files and hashes: 1: 1AAfNkOtoDPkV923JU6uKxUBzig.roa (hash: m+bM/ZO45nJYI69NyHTcglKt6eRpdsvdb8DCz1bIBG0=)
2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: O8GgmPaeaAm82R1kdpGQkytBNmYk8p3M+TuN6rvnVIc=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:e0:f3:d1:fa:5e:c5:43:1b:29:44:9b:db:73:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jun 11 19:00:43 2026 GMT
Not After : Jun 12 19:00:43 2026 GMT
Subject: CN=ba067a16e7328aa9e6cc8b44014806855e9b8d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:89:a4:6f:bc:39:7b:95:fa:df:20:5a:9c:
1b:23:4d:a9:28:94:fe:55:b2:c8:11:18:64:ab:4d:
b7:cb:b3:f5:5b:1c:74:03:c7:7c:72:d2:97:c9:2e:
1b:fa:31:a0:d7:4d:e0:17:28:80:4e:71:b0:2c:e4:
02:26:d4:b0:66:b2:ab:56:d6:f0:47:c6:ea:8a:f3:
26:a7:9f:c6:dd:97:81:c0:c6:71:da:8d:cc:04:00:
f1:cd:e1:11:f5:95:d7:34:5b:62:02:ff:5d:e7:7d:
c4:e2:d8:39:7c:78:83:35:55:21:bc:e2:c6:9a:29:
b1:d4:03:0d:b6:24:fb:ab:ab:fb:55:cb:d2:64:da:
a7:c5:ef:4d:c4:b1:60:fb:f2:41:25:9f:63:3f:2c:
00:7d:55:e3:e4:18:e1:0e:ad:75:df:02:a4:51:2c:
52:e6:49:5e:7e:03:d7:70:54:2d:60:0f:e7:33:e5:
da:18:22:c4:d1:97:e5:2f:ea:72:da:11:fd:a1:0d:
8c:ab:47:f8:88:39:a7:97:40:79:95:71:d7:5b:8d:
87:cc:23:cd:c0:2f:06:a2:09:a1:cf:7b:3e:41:e3:
6c:d8:8d:31:e5:30:17:d9:98:b9:a6:dc:28:2c:f6:
58:c4:85:02:c0:5f:33:8c:cc:d7:ee:cf:11:5a:4f:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:7A:16:E7:32:8A:A9:E6:CC:8B:44:01:48:06:85:5E:9B:8D:1E
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c5:f0:e7:1e:85:20:be:a3:2f:f1:57:7c:c0:c6:a6:34:be:
c8:3e:94:5d:4d:4e:1c:73:8c:ec:47:fa:4e:90:58:13:93:fc:
33:36:e9:a2:71:23:8f:fc:c1:43:b2:d2:ae:9d:d3:26:22:2e:
ac:bc:f9:42:31:13:81:e1:25:fc:19:4c:a1:d0:4d:8c:e1:b1:
82:f4:7a:c2:fd:13:7e:1e:f0:7f:e3:2c:af:0b:26:7b:ab:0b:
f7:9f:50:b2:ca:84:51:d7:eb:2c:d2:bd:07:1a:fe:06:c0:f7:
ba:e4:de:41:e8:9d:ad:c1:15:df:60:6d:dc:c6:47:06:0b:c2:
70:64:04:c1:9d:c4:3a:21:ab:13:50:ff:08:e3:e8:84:25:77:
a7:78:60:d7:a1:2f:2b:52:d5:43:e5:75:ba:6a:16:4a:5a:22:
b7:5c:ca:13:b9:b4:ad:5f:b8:06:8d:95:e3:89:e1:fb:75:4c:
1a:00:cf:f9:77:5e:b6:eb:42:61:de:6d:93:80:3d:df:8d:0b:
98:f7:90:11:49:45:9d:c1:72:ce:66:fa:78:49:4e:a2:fb:42:
3b:b8:d2:17:19:87:1a:e5:c8:6e:3c:76:32:6b:bf:3d:17:7f:
99:df:77:b5:4f:ac:bb:59:48:9c:9c:cc:79:3a:02:e8:69:5f:
c3:51:f6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:59 2026 by rpki-client