Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: MopJpa0lNUVaqGGRXtj9s0eNvxhXM/e/VYO1I5rEtX4=
Subject key identifier: B3:FF:17:14:D7:0D:38:7D:4A:F2:53:B8:1D:D7:9B:D8:74:83:4D:F6
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 01A1803DB7203D4E463FC0C4F1466B43342B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 1AD1
Signing time: Wed 28 Oct 2026 02:01:30 +0000
Manifest this update: Wed 28 Oct 2026 02:01:30 +0000
Manifest next update: Thu 29 Oct 2026 02:01:30 +0000
Files and hashes: 1: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: XFENBR0WwTwdNIrnR7egt/sBWoXUCOItIZC1T5p67Kc=)
2: sviolDtkALX237AgHdJy3qGm9E8.roa (hash: UBbw3ecAl6K7Vc8agYWaL992jebVFcU3FnvRCH5/x3w=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:b7:20:3d:4e:46:3f:c0:c4:f1:46:6b:43:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Oct 28 02:01:30 2026 GMT
Not After : Oct 29 02:01:30 2026 GMT
Subject: CN=b3ff1714d70d387d4af253b81dd79bd874834df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:75:6c:17:76:6f:04:68:f8:78:64:3e:4f:
7f:12:2e:ac:3a:00:6b:68:e4:b2:2d:c4:af:41:41:
cd:54:c2:fe:4f:2a:46:ad:93:2e:0a:99:14:b9:81:
c0:fd:c1:e0:7f:bb:20:b2:e4:29:b0:3e:75:da:43:
3c:e6:17:09:68:b7:95:a0:b9:32:32:11:f7:7c:88:
42:37:c4:5c:5a:84:ef:c1:1b:49:01:8a:0b:a4:6d:
73:67:55:d7:a8:d5:fe:fe:33:f5:79:fc:08:81:ad:
4b:a5:d4:de:81:b2:58:f0:4b:31:d0:f9:10:9f:9b:
1d:a1:07:f6:23:4b:f0:22:c8:d3:ee:23:32:2c:ca:
62:e7:06:b8:fb:97:d0:db:f6:84:85:76:f2:a8:fc:
f9:4c:82:c8:7d:c5:cd:48:fa:5e:6b:54:38:b5:8c:
14:d7:e3:ac:75:b9:32:18:42:47:69:ba:48:d1:ea:
09:16:af:83:d5:0d:a2:5d:3e:5e:4e:50:5f:bb:a6:
6d:88:4c:53:95:d3:00:4d:df:7a:a3:37:de:a2:72:
ee:13:95:fa:f4:13:63:ae:9e:16:47:ea:5e:40:02:
68:2a:d3:9f:90:75:77:5c:09:0d:4c:82:97:74:58:
f5:d1:d0:6c:95:ca:e0:70:2c:3c:2e:08:09:1c:ee:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FF:17:14:D7:0D:38:7D:4A:F2:53:B8:1D:D7:9B:D8:74:83:4D:F6
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1b:e8:a6:44:46:57:ce:7b:f6:68:c5:2f:e6:86:a5:3e:b5:
4e:a4:f1:75:07:6a:92:1c:53:4b:3f:6c:33:24:d4:95:64:6b:
f4:80:a2:1b:86:ee:6b:f6:f8:11:00:48:b3:b9:cc:18:fe:f7:
6d:27:51:c7:bf:a2:65:b0:80:5d:ff:bd:b7:2c:c8:ca:c6:0b:
01:7a:d7:45:5d:55:9a:c9:7f:9a:b5:19:85:23:60:5f:db:18:
e2:79:2f:c9:ef:71:20:46:68:8e:7f:f6:3a:e6:11:5a:75:b9:
1a:18:34:06:27:09:39:39:ef:ef:ff:b9:d5:c1:4d:d6:87:e7:
61:97:a2:fc:9e:b7:e0:65:aa:ed:9a:9f:8e:99:f1:7c:e7:c8:
63:ef:1d:80:dd:60:e2:b9:0d:f3:2a:9c:7b:5b:98:40:1f:89:
76:14:9e:25:b4:9d:d4:99:01:92:e8:76:ba:ee:ec:1d:66:55:
2c:ba:cd:78:bb:b1:c7:49:7a:24:95:fb:e0:6f:53:cd:67:4a:
3b:ec:20:69:bd:5c:5d:c1:b5:0c:95:59:2a:25:a2:95:b3:89:
3e:f8:48:32:38:e8:1e:af:76:7a:ef:df:82:27:25:6c:6d:13:
17:c4:40:16:18:a4:e8:de:62:fb:c5:85:67:40:4a:40:d3:cd:
1b:96:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:55:35 2026 by rpki-client