Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File: iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier: ErJm25a2VK41nEerjqd97nmimw5Zy2AEQYkKxvvFHe4=
Subject key identifier: 82:B2:16:C4:B2:44:3F:9D:A7:DB:D5:0E:0A:FD:CC:14:58:FE:9F:7C
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial: 01A0B7D29F8EFC6DADC9691B1F8765CE821A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number: 1A62
Signing time: Sat 19 Sep 2026 04:00:28 +0000
Manifest this update: Sat 19 Sep 2026 04:00:28 +0000
Manifest next update: Sun 20 Sep 2026 04:00:28 +0000
Files and hashes: 1: 1PQLqhoScjfBFsnVHNm0k3bCNFk.roa (hash: Vk0i8JggRVRyN9gNhJOmPHfRFdxGWfDcvajCmQ4/kDs=)
2: TWbCTwDnys208grtWi4L9d1lq6s.roa (hash: +ftR3wfvVv49VPzjWv+X3HJTgQfHYyU1PAP5N6+M9DY=)
3: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: Lh/ofmMWwVJuOc+qq4JvUVmZ8Nb1ebrKO06Oxlj+EXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:d2:9f:8e:fc:6d:ad:c9:69:1b:1f:87:65:ce:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Validity
Not Before: Sep 19 04:00:28 2026 GMT
Not After : Sep 20 04:00:28 2026 GMT
Subject: CN=82b216c4b2443f9da7dbd50e0afdcc1458fe9f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:9b:41:89:b9:b6:de:43:fb:38:70:a1:28:
98:44:1a:c9:93:48:a1:54:16:0f:07:79:91:80:5d:
b2:ac:eb:15:35:b9:20:ac:ff:f8:18:50:43:d8:7b:
6f:eb:9a:43:38:d8:b6:59:ec:39:71:50:79:9a:ae:
05:8d:1a:ed:dd:ea:4f:13:77:ad:14:d1:fc:86:60:
3b:75:23:dd:09:e9:72:8a:7b:a4:54:32:3e:bd:17:
6f:ba:da:7c:90:9e:e5:37:85:9d:43:a7:4d:ce:c9:
91:15:68:28:19:bb:f6:0f:78:d9:37:f0:af:31:52:
bc:2d:db:ba:47:7b:80:41:aa:ff:ec:c8:96:90:53:
f3:04:f2:51:b8:b2:f3:d7:43:10:5e:63:6a:24:02:
85:ab:89:f5:ce:22:2a:ae:db:31:2a:71:28:3b:11:
f8:64:10:bb:2a:56:0b:a6:e0:c8:e9:b8:c5:67:40:
bb:3e:ca:cd:8f:3f:e0:df:b3:5a:26:d6:88:ee:63:
4c:86:b6:51:a0:3c:ec:85:73:0b:69:7c:4f:e0:53:
1d:72:b5:39:bf:8c:36:e5:16:41:b9:cf:d3:92:8c:
50:e5:9e:d3:3b:a8:ee:6c:4e:6a:c1:99:44:4e:d7:
51:43:8b:a4:f8:5c:19:6f:ac:b3:b8:da:11:12:70:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:16:C4:B2:44:3F:9D:A7:DB:D5:0E:0A:FD:CC:14:58:FE:9F:7C
X509v3 Authority Key Identifier:
keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:70:9a:86:49:ef:f9:67:96:5f:87:a7:85:fe:5f:04:f1:0b:
f0:02:fa:35:a0:07:7b:57:b1:fe:9c:5b:2f:c9:77:3d:ff:87:
be:8b:47:b2:3b:1f:5f:8a:6c:23:7c:f0:da:2f:fd:36:1d:19:
42:8a:16:10:50:24:40:dd:6c:98:22:94:10:4a:83:16:84:80:
56:3d:56:e4:f6:fc:c0:ff:bf:32:81:12:23:b3:f5:d5:61:6f:
1c:76:30:85:2c:b6:7f:05:17:09:a1:33:6d:56:cd:62:de:40:
dc:37:27:d0:09:f4:df:dc:61:5e:13:2b:93:4d:83:23:d7:d5:
20:ff:5f:f0:9d:a6:d7:4b:51:02:a8:85:b9:4e:03:32:f5:28:
e7:48:a9:b0:08:f2:31:b0:a2:42:a7:5a:04:ec:ba:09:af:42:
9d:d1:da:8c:d7:f1:4f:75:16:60:93:6f:17:8e:0e:65:b2:1c:
34:29:e7:73:73:78:fd:4a:05:0d:81:97:66:2a:67:cd:1b:82:
14:73:35:a1:60:a7:30:e1:5b:7e:af:db:a7:d2:59:b6:69:0e:
42:e6:c1:ae:7f:34:63:95:28:9b:68:42:67:2b:84:c6:c9:92:
f5:bb:bb:f0:9f:7e:99:7d:78:07:4f:f5:d3:af:34:b0:ed:6c:
f4:c5:84:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC30p+O/G2tyWkbH4dlzoIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MjVhZTMyMzRhMmM5N2MyN2Y3NWVmNTFkM2ZmMzI2YmUw
NjBlMmMwHhcNMjYwOTE5MDQwMDI4WhcNMjYwOTIwMDQwMDI4WjAzMTEwLwYDVQQD
Eyg4MmIyMTZjNGIyNDQzZjlkYTdkYmQ1MGUwYWZkY2MxNDU4ZmU5ZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VubQYm5tt5D+zhwoSiYRBrJk0ih
VBYPB3mRgF2yrOsVNbkgrP/4GFBD2Htv65pDONi2Wew5cVB5mq4FjRrt3epPE3et
FNH8hmA7dSPdCelyinukVDI+vRdvutp8kJ7lN4WdQ6dNzsmRFWgoGbv2D3jZN/Cv
MVK8Ldu6R3uAQar/7MiWkFPzBPJRuLLz10MQXmNqJAKFq4n1ziIqrtsxKnEoOxH4
ZBC7KlYLpuDI6bjFZ0C7PsrNjz/g37NaJtaI7mNMhrZRoDzshXMLaXxP4FMdcrU5
v4w25RZBuc/TkoxQ5Z7TO6jubE5qwZlETtdRQ4uk+FwZb6yzuNoREnCjqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKyFsSyRD+dp9vVDgr9zBRY/p98MB8GA1UdIwQY
MBaAFIklrjI0osl8J/de9R0/8ya+Bg4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUt
N2U4ZTZlODg4ZGFjLzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUtN2U4ZTZlODg4ZGFj
LzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnCahknv
+WeWX4enhf5fBPEL8AL6NaAHe1ex/pxbL8l3Pf+HvotHsjsfX4psI3zw2i/9Nh0Z
QooWEFAkQN1smCKUEEqDFoSAVj1W5Pb8wP+/MoESI7P11WFvHHYwhSy2fwUXCaEz
bVbNYt5A3Dcn0An039xhXhMrk02DI9fVIP9f8J2m10tRAqiFuU4DMvUo50ipsAjy
MbCiQqdaBOy6Ca9CndHajNfxT3UWYJNvF44OZbIcNCnnc3N4/UoFDYGXZipnzRuC
FHM1oWCnMOFbfq/bp9JZtmkOQubBrn80Y5Uom2hCZyuExsmS9bu78J9+mX14B0/1
0680sO1s9MWEEQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:46:25 2026 by rpki-client