Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: 9L6MwrMZV0BJf4W3uxoJDa8WDbwjuwfWVsqibhMLhS8=
Subject key identifier: F6:87:77:FD:25:E3:F1:22:70:60:CE:F9:B1:CA:65:02:42:6C:12:BE
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019FA33CAA738B20B3B34ADDBA68B25B960D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 19DA
Signing time: Mon 27 Jul 2026 11:01:29 +0000
Manifest this update: Mon 27 Jul 2026 11:01:29 +0000
Manifest next update: Tue 28 Jul 2026 11:01:29 +0000
Files and hashes: 1: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: +A1Tu1SdxtacsXmmIBLTa6yy3WgfHr2nzNlyugZzDkY=)
2: sviolDtkALX237AgHdJy3qGm9E8.roa (hash: UBbw3ecAl6K7Vc8agYWaL992jebVFcU3FnvRCH5/x3w=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:aa:73:8b:20:b3:b3:4a:dd:ba:68:b2:5b:96:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jul 27 11:01:29 2026 GMT
Not After : Jul 28 11:01:29 2026 GMT
Subject: CN=f68777fd25e3f1227060cef9b1ca6502426c12be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:8b:57:96:f2:7e:51:8b:3f:5c:3e:2e:a1:
70:30:74:89:1a:57:73:bb:a8:fe:50:09:77:88:f3:
a2:7f:6c:b1:a7:78:91:61:23:0c:2f:7d:1a:0c:43:
8e:27:88:28:c6:35:3d:61:13:fb:cf:7d:36:e6:bb:
d7:18:71:42:13:e8:5b:7b:3c:29:5c:4b:57:21:b7:
d8:0d:9f:8d:dc:44:6c:b9:8a:12:e0:e9:ca:cd:0a:
09:e5:2f:c2:cc:62:58:95:7a:dd:d1:35:f7:d6:a9:
c0:c3:f9:95:29:9e:53:ed:25:18:e5:10:7c:57:7e:
97:c7:2f:7f:25:cc:61:44:0b:9d:e0:e3:ce:da:4b:
48:0b:fd:98:46:05:41:84:d6:c0:ae:62:9d:f2:61:
91:0d:03:64:4e:ad:f6:5a:02:cd:5b:7a:a0:02:6e:
6a:b2:40:56:03:ce:d7:e3:93:17:a9:36:88:1f:a5:
e3:58:d4:88:57:6c:28:22:29:0e:cb:52:e4:e8:03:
59:87:d8:1b:35:3f:31:9d:1b:ce:7a:58:f8:95:1f:
32:e1:17:59:ee:07:db:5d:f9:b7:53:b8:55:ad:51:
35:54:2f:7b:64:27:a5:a2:f1:cc:d2:ac:3c:55:12:
9a:77:55:1e:f9:bd:e2:e0:3e:3f:fa:27:a3:2c:68:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:87:77:FD:25:E3:F1:22:70:60:CE:F9:B1:CA:65:02:42:6C:12:BE
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4b:91:05:09:d1:e0:f3:78:a8:f7:3a:49:b6:bc:bd:f6:03:
bb:44:03:45:20:dc:f2:30:d4:7a:c0:15:4a:e4:73:39:43:42:
af:12:2e:01:e8:25:4a:af:93:06:57:ce:bc:79:12:87:03:49:
01:7b:12:aa:d2:e8:17:1a:50:a5:a4:f7:d7:c0:80:16:61:c8:
d7:c1:97:8a:32:80:1b:a3:bc:56:55:7d:21:15:d4:56:0b:73:
50:2c:8c:8f:af:a6:61:a4:d8:02:72:e3:a1:48:04:e3:15:1b:
7e:20:e3:f6:3c:25:5e:af:1c:19:79:98:fb:87:26:e1:41:64:
b0:53:ce:c3:05:7e:da:c1:61:54:47:b7:2c:41:cc:1c:b8:c9:
6f:e4:f9:f7:52:23:fd:93:51:5c:e1:17:91:fa:f1:7d:a9:1c:
d7:24:6a:85:11:7a:be:76:0f:f9:33:e5:eb:41:c2:f1:93:3e:
34:c9:4c:a2:3d:db:3d:e8:de:63:9a:79:10:e2:fd:ef:36:db:
fc:f8:b7:24:05:59:d6:27:16:10:dc:3b:96:30:18:7c:d0:52:
16:f1:c8:30:ef:de:73:a6:be:fc:f2:02:30:41:76:22:cc:8a:
5c:90:d1:07:ce:5c:5d:48:93:47:84:05:22:b9:3b:af:5f:37:
b7:8c:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:09:33 2026 by rpki-client