Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: F/fw3w/s2gJFdtgPhbv7dMJfF7Kyug1LkMn394Knn2g=
Subject key identifier: D1:A0:35:CF:98:9D:18:8E:EC:F5:1B:E8:78:60:30:28:3A:2C:35:81
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019EB9C66A137B28470D860EF62FB5384B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 18E9
Signing time: Fri 12 Jun 2026 03:00:48 +0000
Manifest this update: Fri 12 Jun 2026 03:00:48 +0000
Manifest next update: Sat 13 Jun 2026 03:00:48 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: pNWmOpoBBClVYOewyloJvvAccVsnJdooCNctWvrF0qw=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:6a:13:7b:28:47:0d:86:0e:f6:2f:b5:38:4b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jun 12 03:00:48 2026 GMT
Not After : Jun 13 03:00:48 2026 GMT
Subject: CN=d1a035cf989d188eecf51be8786030283a2c3581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:b5:bf:47:b1:0c:c7:52:0f:8e:b2:4a:ff:
b7:1b:f1:37:da:03:09:da:f0:ff:2c:e1:8a:b0:aa:
c0:15:a2:79:ea:06:72:26:92:1a:ae:7d:d8:71:b0:
5e:c8:72:c0:58:fd:63:9e:6c:fe:1a:0e:70:09:0f:
20:03:cf:23:ce:3f:ee:0f:74:b3:f0:93:5f:ce:42:
4d:42:91:18:e4:9a:95:95:2c:c3:4b:00:6d:43:b6:
ef:bd:92:88:32:1e:15:a3:4c:13:c1:48:6d:f3:28:
c6:97:55:72:cf:fb:63:1e:db:81:21:67:a4:c1:9a:
dd:19:08:5e:89:59:1c:d3:c2:10:5f:af:3d:d4:61:
22:d5:d7:f3:6b:39:2e:b8:82:de:e1:e0:6c:05:67:
06:16:91:e3:53:4c:18:bd:2d:f8:52:62:91:46:5b:
43:c8:0d:98:08:a8:32:b8:28:3f:5c:ce:6c:1d:5a:
61:ae:55:5d:06:a2:45:d9:b9:50:71:76:a8:fe:41:
ca:89:2e:12:dd:49:c2:aa:57:c2:47:9e:49:97:3c:
2d:8b:77:54:ac:81:9b:c6:66:8c:4f:58:c8:39:27:
59:1d:f1:ea:60:1a:23:35:cd:13:da:16:4a:7b:e7:
96:de:03:42:36:5d:9d:5f:e5:89:60:79:4f:27:da:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A0:35:CF:98:9D:18:8E:EC:F5:1B:E8:78:60:30:28:3A:2C:35:81
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:42:cd:c2:cf:4d:7e:84:18:03:e0:7a:e8:de:24:75:43:0b:
9f:6f:33:c5:a9:fd:d5:1e:8a:bd:08:89:12:88:e6:0b:89:dd:
42:78:3a:74:ad:80:ce:e5:23:4a:d2:81:0e:74:fd:17:7f:c6:
92:5c:32:a7:11:7e:ee:ac:6d:c4:01:fb:28:69:f9:0b:a4:df:
4c:9a:06:74:52:58:01:30:ba:28:36:bb:44:66:40:2a:fa:27:
d3:84:ce:15:d4:df:79:ee:83:24:b3:fa:94:c0:39:e0:38:9d:
bf:da:be:c9:fb:b4:4a:eb:db:00:34:bc:09:71:38:d1:b6:41:
0d:5e:94:a4:ac:30:89:41:1f:13:7f:04:6e:d0:af:45:58:18:
c4:1b:d5:42:5e:97:85:a4:a0:ad:c2:0d:2f:70:8c:2a:14:2f:
a5:77:5f:74:6e:23:13:6a:f0:58:16:c9:eb:25:4d:d5:12:4b:
b0:b4:77:0a:67:07:7e:ff:39:06:30:25:7c:ca:0f:a4:62:0a:
9a:ec:de:4d:17:65:a0:ee:21:c0:ec:92:b4:79:e8:f6:82:7d:
98:eb:51:e2:e8:f3:5e:32:96:6f:ac:44:97:f2:88:83:c4:79:
2f:0d:12:ce:5d:98:3a:b4:a7:c6:97:e9:b5:c4:a6:44:06:bf:
7b:27:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:47:54 2026 by rpki-client