Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: K4VVGuAiWU4N45to+sQkGPSUQJEIKRGRZlLX2n9bQYY=
Subject key identifier: F1:A1:6C:45:57:78:89:9E:9B:43:CA:90:92:06:C6:C0:BB:A9:06:FD
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 019FF8DABA62096BBB2D924C36F4E297EC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: 0124
Signing time: Thu 13 Aug 2026 02:01:51 +0000
Manifest this update: Thu 13 Aug 2026 02:01:51 +0000
Manifest next update: Fri 14 Aug 2026 02:01:51 +0000
Files and hashes: 1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: wIvFq2s1+jP7WWliftyI1we8tnaB3GmFIJI5w1w4ROE=)
3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:ba:62:09:6b:bb:2d:92:4c:36:f4:e2:97:ec:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Aug 13 02:01:51 2026 GMT
Not After : Aug 14 02:01:51 2026 GMT
Subject: CN=f1a16c455778899e9b43ca909206c6c0bba906fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:b5:fe:85:b4:9a:ec:95:2d:70:24:33:60:
31:f8:fd:75:33:59:70:0a:62:bb:06:0a:cf:70:22:
e7:e4:69:76:44:39:b8:15:43:40:e6:60:e6:f5:67:
5a:bb:27:b5:e6:6e:98:82:26:b9:06:6e:25:a2:f4:
e7:08:67:92:27:ae:68:4f:08:77:2b:1a:13:ce:e6:
35:c8:15:31:a5:a0:76:c0:7e:8c:fe:c1:ba:7c:3a:
71:fd:63:99:24:f7:c2:5e:c8:a9:e5:c5:74:c8:4a:
0b:84:61:1f:d7:4e:b5:b4:12:fb:33:cb:a1:3b:51:
34:63:e5:9d:b6:11:05:0f:d5:e6:b9:9a:61:c9:09:
8a:8b:e0:03:e7:b1:6b:5e:82:46:4b:1d:05:69:5d:
89:54:8e:2f:fa:13:7f:3a:a8:24:52:99:f9:92:ea:
7c:a4:34:e0:2e:29:ea:a8:27:61:7b:33:c4:ab:da:
4b:eb:d1:71:00:cf:af:e4:07:eb:46:56:9b:ce:26:
c1:9a:21:8d:30:d2:c5:66:88:10:62:00:c0:99:0b:
8f:7a:47:87:f9:53:7e:6a:aa:3a:ca:9c:d1:b8:f6:
2e:49:0e:fb:dd:12:6c:dc:83:fa:df:35:51:51:64:
0c:ff:bb:d9:61:66:df:84:cb:a1:60:e9:37:a1:e1:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:6C:45:57:78:89:9E:9B:43:CA:90:92:06:C6:C0:BB:A9:06:FD
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:73:59:7b:7d:23:e5:dd:6f:e9:82:08:8f:fe:31:5a:de:a2:
4e:5d:53:8f:9f:e1:49:c8:ac:73:e5:43:23:c4:71:c6:bb:74:
31:32:45:0f:f6:55:5f:6a:e8:3c:52:b2:30:d0:7f:82:21:0b:
a3:21:6c:bb:b2:e3:25:f3:a6:3c:92:24:72:22:4e:32:0a:c9:
3e:d3:3d:c0:c0:38:f1:fe:ac:3c:c7:02:65:5f:3b:9c:6d:45:
bf:46:97:e9:3f:45:91:69:89:33:34:1b:d4:6d:df:11:d7:0f:
9b:a2:9b:85:8f:ce:52:0b:33:e0:43:53:67:4c:2c:f2:2e:61:
f1:dc:04:37:1a:1a:1e:1c:04:4c:a1:5c:4d:40:24:62:5e:f8:
b2:b2:d0:49:d6:87:e5:aa:9a:51:e6:a6:b0:85:e8:dd:bf:6f:
c6:0f:96:b9:81:f0:b8:56:56:be:1d:1c:59:f9:0c:be:d1:4f:
8b:04:76:fe:c4:e1:9f:ba:15:79:14:9c:f1:30:7e:c0:a3:2b:
0a:8b:56:f1:38:7c:b2:3b:54:dd:06:b3:44:ec:09:78:c3:41:
fb:5c:81:89:71:63:fa:6c:fd:fa:03:83:ba:23:01:31:24:39:
24:23:ae:18:c0:f7:38:11:0e:c1:13:e7:83:be:26:53:bc:3d:
79:0b:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:57 2026 by rpki-client