Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: cQH3nIEmE36y0qeIu13gOvjdvfRPbaxqApAeB0tGkpA=
Subject key identifier: BB:CA:BB:50:AF:55:F0:90:8C:B2:8A:8C:3A:45:88:FD:DE:0C:08:66
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019EB9FD30CA3F01CF0612F8657BA68DA3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 1960
Signing time: Fri 12 Jun 2026 04:00:38 +0000
Manifest this update: Fri 12 Jun 2026 04:00:38 +0000
Manifest next update: Sat 13 Jun 2026 04:00:38 +0000
Files and hashes: 1: 1AAfNkOtoDPkV923JU6uKxUBzig.roa (hash: m+bM/ZO45nJYI69NyHTcglKt6eRpdsvdb8DCz1bIBG0=)
2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: CZed5mfdU996Cf07eNrhIpozcZoo8+Fky0jw9/QHYi4=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:30:ca:3f:01:cf:06:12:f8:65:7b:a6:8d:a3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jun 12 04:00:38 2026 GMT
Not After : Jun 13 04:00:38 2026 GMT
Subject: CN=bbcabb50af55f0908cb28a8c3a4588fdde0c0866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:84:52:72:4e:63:c4:27:04:50:05:0a:98:
79:5c:2a:0c:b7:9f:44:9e:26:d6:44:e0:be:52:a4:
47:4c:75:69:95:e2:46:a5:01:4d:94:b7:42:ef:bd:
c0:cc:3e:ec:80:3e:0b:ba:0a:be:e2:8d:91:ec:fb:
8a:ac:b1:60:9b:ec:60:ff:e3:f7:8b:70:e9:f5:a9:
51:47:06:cf:25:5b:a6:6c:d9:62:66:f2:57:c8:62:
10:e7:43:12:57:56:e8:fa:ad:39:b2:bc:cb:c9:83:
ab:c0:c9:cb:b2:06:aa:91:57:d4:f1:ea:f3:2c:50:
4a:eb:9d:fc:f4:48:16:e0:63:bc:db:57:e0:66:56:
8c:ea:76:63:5d:77:c3:8e:11:6b:71:c6:77:92:4e:
2f:06:57:40:14:fe:6b:ff:81:ae:c3:8a:93:d2:88:
35:f5:38:af:09:a7:ff:d1:c6:20:ae:58:d3:70:4e:
53:b6:34:66:1c:f6:9c:e4:3a:3b:c1:2c:7c:5a:e9:
a3:19:07:cf:43:f5:9b:1b:f9:af:33:da:3c:f3:b0:
d3:42:d8:06:dd:56:8e:e8:78:fc:96:89:1b:57:fb:
b2:cf:62:e0:57:a1:db:e4:3d:24:92:3f:89:ab:a6:
4e:56:12:2d:06:65:4c:55:72:70:78:dc:d7:a6:56:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:BB:50:AF:55:F0:90:8C:B2:8A:8C:3A:45:88:FD:DE:0C:08:66
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1f:19:fb:f5:6e:7e:5a:30:7f:57:83:f7:34:18:b6:a6:a3:
5c:3d:d7:37:c8:65:c7:de:b4:82:bb:f2:58:0e:93:c1:90:de:
78:57:c0:ce:fe:b5:3f:53:04:27:dc:7a:0c:cc:37:91:db:11:
dc:f6:13:0f:51:a0:a1:b0:2f:92:55:12:ab:c8:53:9e:ab:5b:
aa:46:66:09:50:6e:27:70:61:02:cf:41:ed:04:d2:17:66:fc:
3a:cb:f7:37:6c:bb:45:7b:b4:27:a2:59:57:d0:82:04:d2:72:
c1:74:3f:4c:73:ea:6d:ff:1f:92:a1:1e:c5:4e:24:6f:99:5f:
a8:9d:ca:bc:ff:09:5e:ec:e4:fe:6f:ac:2a:91:6e:79:5a:6f:
3f:fe:ba:d8:7b:03:82:79:cf:f8:b8:be:b8:7d:62:6a:a6:82:
f6:9c:0c:0c:a8:58:22:e6:21:eb:ea:65:bb:0a:2e:1e:f0:0e:
14:65:42:11:7d:b9:ad:56:6f:67:6e:07:b3:38:95:04:73:ff:
bc:be:db:6c:d6:4f:94:41:14:2e:c2:fb:9d:1a:86:ca:cc:3a:
09:44:ec:f9:34:0c:a3:98:db:18:75:72:c4:97:d3:ec:f2:b9:
37:9a:9f:26:a0:48:42:f0:7e:e3:39:e1:b2:ac:c2:2d:06:48:
d5:26:02:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/TDKPwHPBhL4ZXumjaPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy
M2Q1YjgwHhcNMjYwNjEyMDQwMDM4WhcNMjYwNjEzMDQwMDM4WjAzMTEwLwYDVQQD
EyhiYmNhYmI1MGFmNTVmMDkwOGNiMjhhOGMzYTQ1ODhmZGRlMGMwODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo6EUnJOY8QnBFAFCph5XCoMt59E
nibWROC+UqRHTHVpleJGpQFNlLdC773AzD7sgD4Lugq+4o2R7PuKrLFgm+xg/+P3
i3Dp9alRRwbPJVumbNliZvJXyGIQ50MSV1bo+q05srzLyYOrwMnLsgaqkVfU8erz
LFBK65389EgW4GO821fgZlaM6nZjXXfDjhFrccZ3kk4vBldAFP5r/4Guw4qT0og1
9TivCaf/0cYgrljTcE5TtjRmHPac5Do7wSx8WumjGQfPQ/WbG/mvM9o887DTQtgG
3VaO6Hj8lokbV/uyz2LgV6Hb5D0kkj+Jq6ZOVhItBmVMVXJweNzXplZNOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvKu1CvVfCQjLKKjDpFiP3eDAhmMB8GA1UdIwQY
MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt
NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz
LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOx8Z+/Vu
flowf1eD9zQYtqajXD3XN8hlx960grvyWA6TwZDeeFfAzv61P1MEJ9x6DMw3kdsR
3PYTD1GgobAvklUSq8hTnqtbqkZmCVBuJ3BhAs9B7QTSF2b8Osv3N2y7RXu0J6JZ
V9CCBNJywXQ/THPqbf8fkqEexU4kb5lfqJ3KvP8JXuzk/m+sKpFueVpvP/662HsD
gnnP+Li+uH1iaqaC9pwMDKhYIuYh6+pluwouHvAOFGVCEX25rVZvZ24HsziVBHP/
vL7bbNZPlEEULsL7nRqGysw6CUTs+TQMo5jbGHVyxJfT7PK5N5qfJqBIQvB+4znh
sqzCLQZI1SYCaQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:53 2026 by rpki-client