Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: oyrTm7QnIXoaj0zCWx5shu1k5UdIaOSeSrOPPyPRaCQ=
Subject key identifier: 88:14:17:D5:12:48:08:66:37:05:4A:AB:69:11:00:FB:39:67:E9:64
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 01A178BA099AB004023A813C15BC6EDE0686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1A55
Signing time: Mon 26 Oct 2026 15:00:20 +0000
Manifest this update: Mon 26 Oct 2026 15:00:20 +0000
Manifest next update: Tue 27 Oct 2026 15:00:20 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: mf8SbFXls1xseIp5uqaiqfPQ9hXYzbRflo02uQDF/Bc=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:09:9a:b0:04:02:3a:81:3c:15:bc:6e:de:06:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Oct 26 15:00:20 2026 GMT
Not After : Oct 27 15:00:20 2026 GMT
Subject: CN=881417d51248086637054aab691100fb3967e964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:cc:07:76:79:eb:41:19:86:a1:df:d1:a9:
95:75:25:7a:5d:27:e9:0f:bf:8d:b0:b7:72:dd:3c:
ed:8a:96:d9:23:12:a7:d0:af:4d:ab:c3:02:9a:ff:
13:8b:44:5d:53:80:b9:5a:8e:ab:f6:92:5f:48:16:
73:e0:8e:41:a2:83:3f:b7:b7:48:4c:50:65:47:93:
66:b2:c8:c9:8d:fc:ca:c8:c8:2e:19:84:9c:a4:71:
33:0b:56:8f:fb:f4:5b:ef:cc:16:54:5d:e0:32:c8:
1e:ca:16:2f:8c:90:21:3b:3e:1e:3c:e0:f7:d5:9c:
a8:99:e3:0b:84:7b:7d:1f:83:f9:cd:80:1b:c9:48:
e5:29:04:91:31:8b:8c:57:ed:67:31:e2:d9:6d:b2:
18:d4:b2:df:6e:aa:e1:dd:f2:fa:3d:cb:ee:27:65:
95:58:45:3c:8a:13:4a:c5:88:25:02:42:2a:21:93:
fa:6c:ec:24:f1:47:f9:7c:8a:47:8f:54:c5:db:22:
87:b6:78:a0:88:c0:ac:fa:cd:ec:37:9f:19:36:a6:
fa:fa:71:72:17:1f:ac:aa:d2:23:76:d1:af:56:2b:
82:a6:da:f7:74:72:4d:5d:fe:42:e9:d0:b4:ce:4f:
93:4f:2e:79:8e:6d:f2:a5:c7:42:c1:0b:a4:6c:52:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:17:D5:12:48:08:66:37:05:4A:AB:69:11:00:FB:39:67:E9:64
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e3:50:61:35:c8:4f:a9:60:79:4c:f3:1a:52:0b:0e:f8:f2:
4d:eb:e1:9b:49:c2:d1:3f:4a:2c:79:d1:e3:aa:b9:29:8d:30:
fc:3b:6b:09:b1:23:3d:65:87:fd:06:6d:0f:e6:2c:a0:d4:53:
5b:43:fc:83:48:ee:f8:4a:8c:41:d7:b6:87:9f:3d:42:f0:1c:
3d:73:a8:3b:e4:d9:99:50:fd:47:90:44:df:4d:88:dd:1d:cd:
af:a8:e9:ba:1d:d0:d3:a7:01:36:0a:94:44:d7:bd:8d:32:85:
cd:50:b2:f8:09:3c:34:19:2b:b8:37:67:54:dc:1b:da:b9:81:
28:03:71:dc:b5:46:dc:85:5d:44:cc:d8:ba:5f:86:fe:52:95:
5d:8b:12:2f:84:f9:f8:16:86:d4:86:0b:c7:e6:48:69:45:7c:
a1:58:9f:86:23:1e:bb:d2:51:93:ad:5e:33:af:8f:84:09:ee:
f6:80:e8:e3:b6:e3:1c:a7:dd:cf:60:08:d4:6f:8d:28:ba:fb:
0c:b4:53:2c:72:17:15:34:45:6c:d2:e6:81:c3:56:17:41:97:
75:bf:db:93:e7:a0:90:ae:ee:16:5e:f0:37:7c:18:1d:66:30:
05:92:bf:f6:be:79:23:53:c1:39:d3:21:2a:92:23:01:dd:35:
47:78:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:40:57 2026 by rpki-client