Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: 7j8WeZJ3qGX66IVC5WZ30JlRuTEo60KCpt2hoBDkY24=
Subject key identifier: 60:F9:EE:2F:55:BB:D1:AC:92:53:B8:5F:47:59:8C:F6:DE:16:E3:29
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019DD01A18515490402F0255706AA38E3C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 18:01:04 +0000
Manifest this update: Mon 27 Apr 2026 18:01:04 +0000
Manifest next update: Tue 28 Apr 2026 18:01:04 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: jixsoBIybLAA1f/yszNrBaOg7brhus/eXe4OjYhYkws=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:18:51:54:90:40:2f:02:55:70:6a:a3:8e:3c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Apr 27 18:01:04 2026 GMT
Not After : Apr 28 18:01:04 2026 GMT
Subject: CN=60f9ee2f55bbd1ac9253b85f47598cf6de16e329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:67:bb:eb:99:a0:46:09:c8:2f:7f:b2:6b:
99:00:d0:ad:1e:75:84:e9:d2:6e:3e:2b:f2:c9:fc:
94:83:9a:db:81:d7:3e:4c:ed:3e:42:00:06:18:40:
5c:68:03:78:3a:18:04:98:28:c5:2d:c0:ba:7b:18:
68:64:f0:09:f1:28:f3:16:c7:03:aa:14:dc:74:49:
4d:23:71:67:58:ba:85:1f:02:82:7a:09:55:e8:2e:
7a:3e:5c:88:6f:80:d3:bd:1f:c2:ce:a7:28:e8:bc:
1f:6e:e6:7c:7b:39:b8:7e:12:0e:60:0a:03:21:27:
fe:50:87:ef:4b:69:91:64:46:04:43:15:69:52:97:
76:54:05:6a:c5:63:67:09:ab:a3:64:f7:3c:7a:2e:
ac:4c:d6:e2:1a:10:bf:db:da:aa:2f:9b:fc:db:98:
3d:f6:b6:f5:f9:a3:f7:eb:0c:dc:7b:1d:7a:65:61:
83:d2:aa:e2:84:9d:2f:8f:d2:7e:95:77:2b:da:6a:
b2:87:aa:aa:83:50:24:59:bc:3a:1c:83:0d:9c:96:
7d:77:55:32:c4:0c:75:6c:2f:63:42:31:6c:9b:cb:
41:e1:56:e6:39:3e:38:2d:6e:76:e0:cf:63:e9:48:
e5:81:47:bc:4c:ad:42:6e:af:2f:9d:66:d0:ee:61:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F9:EE:2F:55:BB:D1:AC:92:53:B8:5F:47:59:8C:F6:DE:16:E3:29
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:16:67:c7:a6:2e:2a:cb:77:19:19:33:ee:0c:a4:fe:c0:6f:
67:60:3c:5b:54:2f:4c:e0:48:4e:c1:52:01:a0:48:e2:64:31:
96:77:4c:09:ab:6a:cf:6f:09:55:1c:a3:6e:00:3b:b3:76:e1:
af:be:05:10:d6:de:e6:40:c5:0c:42:b0:46:57:3f:a1:b3:55:
c4:21:7b:3f:57:18:93:af:f0:54:e1:0f:ff:c1:d9:58:f5:a5:
1b:8b:73:2c:58:e1:e7:8f:05:a7:36:a4:73:c2:94:8a:1d:fe:
1c:5b:bf:88:3d:00:e2:7f:09:29:0b:88:6c:3b:1c:7f:d8:4f:
08:68:a8:9a:d7:1b:a0:27:50:07:6f:19:54:6f:91:e1:9c:5d:
b2:ef:8b:49:ca:d4:55:34:b4:39:c9:9e:d9:1d:75:62:b0:c3:
77:62:ea:80:f9:e3:3d:2e:69:d0:60:9f:1f:03:43:07:5a:22:
fa:42:eb:89:90:86:ae:84:2f:33:50:fe:cc:28:09:0c:22:c8:
6f:10:dd:0b:f3:d8:27:c2:f4:28:d8:06:2f:73:08:51:4d:dc:
94:56:7f:0b:7b:ce:98:c0:19:ae:ff:6e:b3:8e:d7:9d:2e:a4:
5b:50:ab:f2:1b:88:48:07:75:67:1e:3b:1f:16:15:9b:08:0a:
da:ca:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:06:32 2026 by rpki-client