Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: +9k9Ym2X4Rs5l4Vy1cN5ptmTTg+GRW+hkZjQ9uZ1K/A=
Subject key identifier: 60:E0:14:E7:CB:75:4E:BE:5A:5C:E2:C1:90:9D:E1:BF:77:15:89:CA
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 01A1DD95160C0CDBCC3E49A8F6CF194C3A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: 021F
Signing time: Sun 15 Nov 2026 05:01:37 +0000
Manifest this update: Sun 15 Nov 2026 05:01:37 +0000
Manifest next update: Mon 16 Nov 2026 05:01:37 +0000
Files and hashes: 1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: muNEbVqYiYzWcBYS8eUk2T6Wu5IFERUkVWq7FJqUpDM=)
3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:16:0c:0c:db:cc:3e:49:a8:f6:cf:19:4c:3a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Nov 15 05:01:37 2026 GMT
Not After : Nov 16 05:01:37 2026 GMT
Subject: CN=60e014e7cb754ebe5a5ce2c1909de1bf771589ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:fb:7f:69:e4:a8:e3:a1:81:c5:09:e2:a4:
1e:2e:f2:ff:7d:4d:72:a0:65:30:7b:7f:1b:1a:d6:
6d:ce:d4:fa:83:72:4d:d8:05:60:de:ed:b8:e0:19:
e3:a1:d2:58:37:a5:ee:2f:20:6d:a7:39:d3:c3:f2:
89:2c:04:57:8f:00:51:58:84:90:0c:51:5a:db:4b:
a3:a7:18:c0:95:b6:d5:2e:c8:1c:aa:3f:ef:67:85:
b9:5e:9f:f9:c0:41:01:a7:49:cb:59:c5:4b:8f:1a:
75:61:de:ae:f0:ba:23:12:77:de:45:17:f7:ff:a7:
8b:c4:28:39:39:67:39:6e:b5:1d:9b:fd:9e:40:8d:
95:f3:36:5a:fd:5c:c1:0a:b1:f6:60:30:26:8d:ce:
a6:58:a4:9e:43:d9:e5:18:2f:9c:1b:b4:06:39:9b:
83:db:ae:45:d3:04:ce:38:ae:05:38:3f:82:97:17:
17:d2:33:7d:a0:47:ab:d3:4f:27:fe:a8:2d:bd:ad:
b8:9d:b4:37:9e:01:5a:81:92:d5:79:3c:a7:ba:70:
6a:82:a4:76:01:b2:8e:4f:f0:55:35:f6:f3:f8:0a:
d0:ba:99:0b:c9:f1:45:6e:d5:11:59:51:9b:d1:6a:
4e:9e:6a:d6:54:f4:d8:27:ce:07:71:ba:cd:56:41:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:14:E7:CB:75:4E:BE:5A:5C:E2:C1:90:9D:E1:BF:77:15:89:CA
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:07:e6:d8:cd:bb:4e:49:5c:ab:fb:c2:cf:eb:d8:3e:19:2e:
ee:ae:68:b0:b6:2d:6f:6c:88:9b:e4:ec:6b:81:d6:e2:8b:8d:
c6:92:a0:ba:b5:1d:28:de:32:7c:19:2b:5f:88:1b:73:e4:cc:
8e:28:b6:e2:c6:93:67:93:8a:e2:e6:44:36:10:76:db:5b:e2:
c8:b5:70:cc:a5:fd:da:2f:33:9a:8e:16:92:74:52:0f:32:3a:
5e:a5:7c:e4:04:e7:b6:54:c4:23:4c:70:0b:f8:2f:a5:45:54:
e7:ee:4a:30:58:a5:4f:30:56:78:04:56:60:af:5e:ca:e8:8f:
98:79:09:24:cd:0e:94:47:a8:31:42:f1:8a:fa:51:49:f5:4c:
cf:9a:59:c9:e4:f8:18:3f:e6:4c:98:3c:03:ca:63:33:c4:a4:
85:41:0f:c9:38:04:12:44:ad:37:5f:ef:7b:b5:c5:8a:c4:f4:
b0:01:49:37:14:ca:e9:87:48:fc:a6:02:69:4a:87:65:d7:5f:
56:bf:62:a5:5a:d2:ed:60:c1:a1:c4:ac:ee:23:fb:e9:b5:89:
c9:f3:1a:26:b8:9f:28:50:a6:31:b2:9c:1a:3a:a6:6d:29:71:
93:0c:db:3f:6b:52:ef:fc:70:0a:6d:9c:2f:43:7e:13:7a:29:
d3:4f:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:24 2026 by rpki-client