Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: aD0IhAXqgs8r9Q+yQKtkZgUfgSdIlWzYfIeE99BomWo=
Subject key identifier: 41:E8:9E:90:73:15:32:15:08:3F:4B:DD:5A:F1:5A:6D:6D:50:70:4E
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 019EFBDE3C1C6CB582432F27D54875124C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: A1
Signing time: Wed 24 Jun 2026 23:01:45 +0000
Manifest this update: Wed 24 Jun 2026 23:01:45 +0000
Manifest next update: Thu 25 Jun 2026 23:01:45 +0000
Files and hashes: 1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: dlVuB4ChP6BhwQWqmZgIlmZ+DF21L9Iw2M2pCry97tA=)
3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:de:3c:1c:6c:b5:82:43:2f:27:d5:48:75:12:4c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Jun 24 23:01:45 2026 GMT
Not After : Jun 25 23:01:45 2026 GMT
Subject: CN=41e89e9073153215083f4bdd5af15a6d6d50704e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:1f:3d:27:2f:d8:e6:ef:cb:5b:8f:7b:01:
bd:db:55:fd:8c:ea:66:c0:0c:e1:a5:8b:66:47:e8:
20:da:6b:e9:da:b9:a1:a0:95:cf:fc:30:05:d1:ee:
c1:3a:27:56:f1:ec:92:d8:69:b0:05:dc:5a:06:6e:
0a:1a:a9:f9:fe:c1:c7:b9:14:ff:b7:f8:f9:55:ed:
c5:b9:ca:a8:35:e2:60:6c:a9:44:25:b7:0a:3c:55:
2a:de:af:ea:b5:00:be:97:ff:8d:8d:f3:ee:94:8d:
61:45:76:30:c1:93:f7:51:22:0c:47:ad:6c:d7:86:
90:00:48:f2:54:ea:7b:3c:53:2a:43:be:37:ae:90:
6a:02:25:5d:1e:83:bd:5b:37:e0:96:e0:f8:a3:26:
dc:24:90:35:7e:3a:91:3f:5e:89:05:de:cc:e4:96:
3f:fa:a2:1d:78:8c:a4:9b:80:86:bf:7b:2b:76:ad:
d7:f0:ce:cd:2d:9f:05:62:e8:fc:e3:ff:23:91:c0:
0f:f7:e5:54:50:65:5b:4b:97:a4:91:8d:2b:01:44:
0e:a2:fd:98:a2:bb:66:f1:fa:6f:da:5f:94:fd:c7:
93:46:6c:69:1d:3d:8b:11:5e:08:3a:12:b4:db:e9:
c5:8d:80:1b:43:0c:7e:03:bb:30:3f:83:e0:2f:ae:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:9E:90:73:15:32:15:08:3F:4B:DD:5A:F1:5A:6D:6D:50:70:4E
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:17:15:93:e3:ce:d6:25:14:02:22:78:88:f5:c7:19:d9:93:
ad:79:a5:f8:39:1f:bf:0c:20:9e:5f:95:08:ba:c9:5a:f9:9c:
70:9f:2b:e5:e9:e7:82:47:60:2c:a4:0d:17:b7:88:71:0e:b8:
74:7c:8c:da:7d:91:e6:e7:94:10:de:f6:6e:4f:81:46:c3:bc:
a9:14:da:7e:df:1e:6c:b4:08:9f:e3:af:2a:46:b5:6c:ce:bb:
cb:a8:4c:19:f0:0a:aa:a7:7e:9c:66:ae:13:73:af:cd:74:5e:
86:74:31:52:78:72:1d:b0:d0:e1:9d:a9:ff:5a:f6:7c:01:7a:
d7:89:65:c9:37:d5:32:ca:b1:85:ba:99:1c:b6:5b:b6:84:4f:
43:8d:1a:fa:4a:eb:f8:39:d8:16:42:07:22:a8:72:b2:71:c5:
a6:9d:8c:7b:54:be:6a:09:81:30:b4:a0:7b:1d:05:ff:b4:b2:
40:84:d9:a7:63:1c:b5:6c:80:30:92:5c:86:2b:57:1d:fe:11:
d0:6a:63:15:47:48:cc:12:e8:18:eb:e5:55:ad:0a:6c:c4:e1:
3e:14:9e:fd:a4:d0:bd:e1:27:9c:5b:f1:77:1a:b9:f4:16:f2:
e1:81:91:86:79:41:73:42:6f:8f:fd:c3:ce:b2:d8:96:6e:77:
f3:3f:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:15 2026 by rpki-client