Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: EBwITayjVydNzu3DtGS6IjtofXqOj0en/OAv+U6BhDk=
Subject key identifier: 00:6A:47:32:0C:D8:A4:19:FD:86:4A:9E:BA:27:44:8F:49:43:DF:0E
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 01A0E852F525F54279C369A29D8FCF792C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: 01A0
Signing time: Mon 28 Sep 2026 14:02:25 +0000
Manifest this update: Mon 28 Sep 2026 14:02:25 +0000
Manifest next update: Tue 29 Sep 2026 14:02:25 +0000
Files and hashes: 1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: TFtPs2EnIjWU58puNrfithDH3s8ia0C20LNHjDbYzCo=)
3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:52:f5:25:f5:42:79:c3:69:a2:9d:8f:cf:79:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Sep 28 14:02:25 2026 GMT
Not After : Sep 29 14:02:25 2026 GMT
Subject: CN=006a47320cd8a419fd864a9eba27448f4943df0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:32:bd:7d:46:59:e5:cf:6a:2e:5c:04:64:
52:47:fb:a3:c0:1e:e1:ca:fc:16:f6:18:a3:51:67:
97:d2:c3:ef:e6:ba:64:b6:78:88:42:ac:de:62:4f:
b8:01:fa:18:7f:86:d9:3c:42:35:50:51:3c:7c:c1:
f8:93:c7:06:ca:1e:42:5a:91:3c:29:3d:48:70:9b:
53:f0:2f:74:84:18:2b:97:d1:4e:77:85:45:b3:a0:
33:34:ed:f0:70:0d:e3:e8:30:81:dd:42:cb:fa:bf:
15:a2:d2:e5:b4:3c:35:32:fc:ca:19:41:e9:78:73:
09:12:fe:2c:0d:b8:98:ae:0a:97:ea:79:bc:81:1a:
79:ee:b9:99:3c:0d:3f:97:6b:f7:43:dd:e6:99:44:
c6:f7:29:3d:c1:35:63:95:92:5b:1e:d3:96:9c:14:
37:36:66:bc:66:89:83:7c:30:34:48:52:68:13:26:
2c:be:17:11:d1:0a:03:b7:9f:23:af:42:a1:15:5a:
0d:36:6c:56:75:12:30:59:71:17:9c:44:f2:cc:99:
3a:c8:2c:3c:b0:0d:31:dd:9f:98:c3:fe:70:30:5e:
1c:f7:77:58:04:44:ab:e4:79:72:72:91:67:71:51:
1c:bf:31:b2:8a:15:48:b1:37:19:54:4a:77:d1:76:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6A:47:32:0C:D8:A4:19:FD:86:4A:9E:BA:27:44:8F:49:43:DF:0E
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:68:8d:af:e6:df:04:d9:a1:49:8d:b0:bf:cd:0a:06:fd:3b:
b9:cb:00:b6:f5:3b:0f:54:80:b7:da:7c:5a:92:13:c5:ef:9b:
39:a3:4f:62:1e:1e:fa:43:33:7a:8e:b1:4e:98:6e:cc:7b:b7:
7a:3e:d7:08:ee:09:5a:0e:dd:ed:4d:3c:a6:02:c0:f2:92:c8:
81:7e:91:b8:3c:8e:9f:10:b9:4b:19:04:ff:74:74:2c:4f:8f:
28:11:c7:9b:e4:f4:d0:09:5b:59:48:5b:6d:54:2a:cb:c4:3c:
ba:3c:cb:a1:a5:2f:c6:c4:20:83:b8:07:42:bc:c7:d0:86:b9:
2f:8c:50:d1:5a:0e:ec:68:5d:02:fd:c4:e6:77:d9:13:4d:75:
0c:eb:f9:a6:5b:96:e0:9c:ec:41:98:3d:ce:71:55:dd:80:db:
7f:ac:3d:fc:50:33:ca:ae:00:ae:be:58:d4:20:60:88:d9:ea:
0d:77:7a:15:d8:bc:d5:55:3f:62:43:79:a5:98:fb:d6:c0:da:
6a:14:dc:78:14:06:4f:4b:b8:06:f1:c8:db:35:6b:25:71:cb:
63:85:77:39:dc:8e:63:cb:28:22:f1:4b:fd:49:b8:87:8f:5f:
f5:1d:41:dc:71:dc:07:1b:a5:12:fd:09:f0:40:f9:45:04:c2:
9b:9f:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:32:12 2026 by rpki-client