Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: 8CdTiYgo+R+JezoLumykcCwoHeNT7TDwo2XoHGZWuUA=
Subject key identifier: 1A:EF:DD:76:07:4E:DF:D8:87:47:5A:E7:5C:32:D8:64:EC:23:37:B3
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019FA1849371D15AB9B83B3B710BBE556DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 03:00:48 +0000
Manifest this update: Mon 27 Jul 2026 03:00:48 +0000
Manifest next update: Tue 28 Jul 2026 03:00:48 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: y1wV5OCIWWGQZpNI7AZg27s8+DdmE573GDF7eXbSmqw=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:93:71:d1:5a:b9:b8:3b:3b:71:0b:be:55:6d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jul 27 03:00:48 2026 GMT
Not After : Jul 28 03:00:48 2026 GMT
Subject: CN=1aefdd76074edfd887475ae75c32d864ec2337b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:cc:15:74:17:17:8b:f2:86:c6:25:33:56:
4b:de:58:23:05:6a:e0:29:64:f7:9b:d7:bc:ed:d4:
54:9b:a1:e2:ed:c1:c1:2e:b7:d6:14:49:ad:f2:6f:
0e:9b:85:d3:c9:79:61:aa:4c:37:8a:67:a8:d8:8b:
53:af:4a:17:0c:7b:f9:aa:84:bc:4d:31:1a:ae:c7:
d0:d7:5a:dc:77:7e:5d:61:89:36:6e:83:99:c3:c0:
a2:b6:63:94:ee:13:e4:20:83:a9:78:5d:23:96:45:
a5:31:5f:47:41:28:02:bb:21:80:d9:cd:b1:27:86:
e7:69:22:d5:b0:ce:55:25:df:23:6d:5a:3e:50:f6:
60:73:e4:6a:fc:9a:95:7e:07:d8:44:95:04:62:0d:
4d:12:61:eb:aa:2d:30:09:1f:e5:4a:09:6d:a9:40:
a6:c1:6f:f5:c1:57:69:b8:23:83:ac:09:87:37:b3:
96:9e:31:5b:69:90:da:ed:ca:5a:93:a1:44:19:80:
ef:91:32:4e:94:37:b7:c1:ec:54:43:43:df:75:af:
3a:e4:77:11:3c:cf:5b:de:06:2b:0d:5d:23:c6:1d:
a3:91:24:d2:1a:a2:cc:38:e2:98:50:70:99:cc:20:
f0:37:29:e5:1f:86:85:77:e2:f5:6c:20:01:25:7e:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EF:DD:76:07:4E:DF:D8:87:47:5A:E7:5C:32:D8:64:EC:23:37:B3
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:72:59:db:69:cb:a3:57:a9:ae:54:ec:65:6a:31:0f:b8:29:
44:ee:7e:c1:52:db:81:94:5a:98:be:52:87:37:ba:af:2e:0c:
37:91:99:20:e4:12:06:d9:1c:a9:0a:82:e7:70:90:5b:c0:4d:
d7:d1:5e:1a:15:11:8f:8a:83:c7:fa:eb:3f:22:ae:7c:3a:89:
af:de:84:6c:e0:9b:b9:39:9b:8a:21:2d:0e:be:2c:b1:4f:49:
f8:13:b3:80:55:aa:d3:46:56:d0:62:2e:8f:38:49:df:9e:23:
57:b3:1e:93:fe:99:e1:80:dd:d7:65:20:6d:d7:36:60:6f:df:
48:cb:2b:26:f6:f1:ae:56:e9:bd:9b:fd:6f:c1:6d:9c:cc:6f:
8a:49:5c:fc:91:b3:7e:e5:52:ee:80:7f:8e:37:78:61:fe:98:
88:c9:85:83:59:5f:60:dc:1e:1d:3e:00:82:01:84:c3:1d:48:
98:67:07:b0:92:a2:86:a0:12:ec:49:21:a2:80:91:5c:86:64:
5c:e6:4b:62:07:42:34:6a:2c:b2:f6:6e:e4:e0:b4:a3:d1:3d:
f1:16:bb:fa:cf:75:d6:01:58:7e:1a:98:88:97:a7:4f:7d:56:
8b:d9:d4:d1:ed:d9:14:4e:88:eb:b3:31:dc:0e:1f:df:69:7a:
01:ce:4e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:07:53 2026 by rpki-client