Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: Nxh6A02raidTm/CdUwv5n59owDoV+sxp93ramcQhfTo=
Subject key identifier: 95:3C:B9:98:F0:57:2A:5D:07:BE:B3:F1:FD:FC:BD:64:44:DB:13:BF
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 019DDC8C94AC58AAD22884DAC227F722F39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: 0C
Signing time: Thu 30 Apr 2026 04:01:33 +0000
Manifest this update: Thu 30 Apr 2026 04:01:33 +0000
Manifest next update: Fri 01 May 2026 04:01:33 +0000
Files and hashes: 1: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: TSv7So/XvWkg8RH+1vL5ESQvyKlbhIQ4T3BsrNJiJSY=)
2: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
3: nLWm0CbXdBV541qYW-ZaDjrd_no.asa (hash: OBg7VUIs9BfAiop8yHgkNoK9pQt1BuMEqFMoPY6kqRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8c:94:ac:58:aa:d2:28:84:da:c2:27:f7:22:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Apr 30 04:01:33 2026 GMT
Not After : May 1 04:01:33 2026 GMT
Subject: CN=953cb998f0572a5d07beb3f1fdfcbd6444db13bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:c6:11:ee:fe:7d:44:b2:6c:30:2b:81:57:
b0:35:00:22:16:8d:ce:21:21:52:25:36:89:f3:0d:
35:cd:fc:53:28:9c:ea:3a:91:62:85:f7:6a:2c:55:
22:22:b6:0c:6f:21:4b:a4:0f:b2:e4:c7:f1:c4:77:
bd:cb:94:50:f2:e3:46:0b:86:77:41:fc:32:4d:41:
fc:65:51:9a:37:a8:15:bf:90:cd:e2:09:f1:07:f2:
b9:ac:fa:cd:b0:ed:62:ac:3e:9c:7f:dc:a0:33:4a:
3d:ab:3a:22:60:12:7b:40:09:6f:fb:2f:d4:cc:c6:
9b:42:ae:92:b0:bf:5f:2d:37:64:f1:28:e8:40:24:
e5:2b:3e:7a:96:b0:21:77:49:36:4e:3b:74:ed:e7:
8f:b6:19:0d:64:bf:32:7d:8b:ab:50:d0:07:b3:40:
1e:92:46:df:d6:91:75:a2:92:59:95:1c:69:f0:7e:
c8:f5:28:e0:66:87:1d:ee:f3:5a:1f:c5:a1:4d:b7:
51:11:10:e4:30:c4:3e:ac:71:bb:12:48:c5:97:dc:
0b:08:3d:56:9b:5b:b0:74:80:e9:6f:72:b9:7d:14:
58:93:77:2c:12:b7:9c:ac:8f:98:a7:28:e4:1f:2e:
38:5c:63:b6:11:50:93:ae:b8:d2:05:85:2b:75:bd:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:B9:98:F0:57:2A:5D:07:BE:B3:F1:FD:FC:BD:64:44:DB:13:BF
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:55:3a:7a:ae:6f:38:8f:36:cb:da:a5:98:76:82:e0:c2:f0:
b1:57:d7:bb:2b:13:80:18:64:d2:56:e3:f1:d1:53:a2:80:b7:
fa:10:1b:91:68:7b:82:9a:f0:5d:b8:bb:3b:61:2b:4a:a1:d1:
16:ef:dc:b7:e0:bc:14:df:2c:21:d6:7b:fb:61:c7:7c:a2:fe:
c5:26:64:2d:8e:54:61:91:f9:1b:64:77:50:ab:b7:a5:ba:f3:
98:91:d9:e5:09:74:bd:2b:8d:77:1f:a2:95:bf:61:2d:01:a1:
e1:f9:a7:39:48:79:c3:14:17:c1:7b:cf:ef:81:69:12:c3:ca:
06:aa:15:f8:fc:ea:e4:42:4f:71:3e:16:46:cb:f1:e6:db:27:
fe:c5:7a:7d:f7:2c:48:b0:90:7f:8e:b5:cf:74:06:f2:8f:30:
d6:74:2f:04:88:f1:c9:b3:73:db:a0:61:66:cd:cb:58:55:c2:
4b:5e:59:30:ff:b2:60:94:dc:d7:32:d5:fe:b5:6f:dd:19:5d:
77:cc:ae:4b:08:51:56:1f:64:be:98:5c:8a:bf:9b:62:97:fc:
07:27:10:b5:59:aa:a4:0d:db:34:e4:65:c1:52:9b:48:b1:cb:
f3:59:f9:59:49:4b:09:7c:b3:6d:79:e0:2f:d6:7e:3f:59:8f:
1d:4b:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:21 2026 by rpki-client