Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: EDL2qkwlmhSf70S+89fdl9muIliVR2/iqHfIIBK13kU=
Subject key identifier: 54:8A:07:71:03:12:66:3C:D0:14:FA:C1:82:5C:EA:A9:40:D8:E5:01
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019CE47EAD338AF07DFDC5AF01FEEE7BBA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 17F6
Signing time: Fri 13 Mar 2026 00:00:32 +0000
Manifest this update: Fri 13 Mar 2026 00:00:32 +0000
Manifest next update: Sat 14 Mar 2026 00:00:32 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: e2OnGq0G7A5udFnHv8bNLe8rRTZUL8R4V7KCOS0AL4c=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:ad:33:8a:f0:7d:fd:c5:af:01:fe:ee:7b:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Mar 13 00:00:32 2026 GMT
Not After : Mar 14 00:00:32 2026 GMT
Subject: CN=548a07710312663cd014fac1825ceaa940d8e501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:97:6b:f8:27:da:bd:5c:6c:ff:24:2f:60:
18:54:7e:a2:00:c2:e3:d3:fe:46:8f:7f:94:cc:f9:
14:e8:50:f5:d8:42:54:de:b4:43:23:dc:ba:60:42:
28:e2:2a:23:d8:e8:63:e8:45:a6:57:df:b1:58:db:
1c:87:87:83:71:24:5a:a2:39:87:ba:41:bc:1a:0d:
82:f0:60:87:1b:bb:82:4e:1d:9e:c6:1c:96:58:0a:
20:6d:c5:fc:7d:42:ce:ec:d5:3c:23:c7:0e:c3:66:
8f:30:58:2a:2f:e5:c6:30:21:e2:e6:df:17:74:00:
03:60:56:6f:8b:27:91:e1:a0:a7:ad:87:dd:1a:3a:
bb:14:8a:a5:de:a0:5d:25:e4:27:35:a3:9b:0c:a5:
a7:bb:42:1d:92:23:3f:c3:a8:32:a7:d4:11:9b:d4:
4b:ad:71:04:bd:57:31:72:a7:71:7e:22:f8:23:df:
62:7e:0b:40:d5:5f:1b:5b:59:84:0a:80:3c:52:5e:
cd:c2:ce:67:81:fb:00:08:b2:d0:45:eb:c1:1f:57:
63:97:c5:ba:a2:2a:17:a2:38:37:9a:b5:e7:83:17:
7b:4f:71:21:7e:1c:30:e1:0b:29:f9:f3:d8:e4:9e:
2c:9e:df:74:db:c7:16:7c:59:0f:34:1f:94:d0:4a:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:07:71:03:12:66:3C:D0:14:FA:C1:82:5C:EA:A9:40:D8:E5:01
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b3:6e:17:f3:82:d1:eb:d0:cf:d2:59:29:09:fb:46:f0:4f:
f6:e3:50:01:2f:aa:4d:92:82:e5:51:7c:5d:0b:a6:6d:24:a7:
d6:14:05:d6:9a:61:c4:cb:21:61:85:6a:11:c9:76:c3:46:be:
9d:9b:cb:3c:e3:39:f8:7a:51:7d:7d:bb:98:6f:92:5f:47:da:
5c:93:1a:98:75:3e:b2:60:1c:43:43:86:72:32:ab:f4:19:3f:
c6:2e:69:99:fb:01:21:74:f7:90:9d:2f:2b:50:05:dc:24:20:
20:fb:3b:98:80:38:e9:e0:35:f3:68:ce:0f:71:10:af:9e:59:
eb:7c:ec:c7:29:d3:44:e6:54:4a:9d:ed:8d:39:c6:28:59:13:
f1:a6:62:5b:ba:de:6b:a6:8a:3b:af:a6:f2:d6:c4:37:ed:ce:
c8:98:a4:e1:93:10:6d:4d:48:3f:a3:9b:9d:ee:b5:09:f9:50:
09:fa:49:ce:46:e3:46:10:99:40:f0:ab:22:b8:c9:f8:cf:4d:
df:ff:08:f5:65:29:3f:c1:bb:59:1a:51:0a:ec:8d:5d:75:39:
7f:8c:09:12:bb:e9:15:96:2f:72:61:86:34:66:40:77:65:eb:
a1:fa:e8:f0:0b:4d:a1:2b:74:e3:c2:55:d2:19:66:11:ec:b5:
6b:40:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:24 2026 by rpki-client