Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File: iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier: XIDE3icPZx/lRBwFzlKovrKk2eXYGDKnoYw+NAYIwJw=
Subject key identifier: 8E:C4:23:9A:95:2A:66:B2:18:6B:18:CA:F0:6B:5F:5D:A4:E6:1D:33
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 019D37528EBADD12CC7D18BBDD3C1F5CC754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number: 160F
Signing time: Sun 29 Mar 2026 02:00:50 +0000
Manifest this update: Sun 29 Mar 2026 02:00:50 +0000
Manifest next update: Mon 30 Mar 2026 02:00:50 +0000
Files and hashes: 1: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: A//z2ef/T5vFZIpuMGham7s0G/VEtLw7aegT2VHNUj0=)
2: iz-s1SV_V4AaMH-6-vZcdBe9_28.roa (hash: AFIMSomYZRZ7dduGJLch69mRqRFbHaPPEtg9WN6niUo=)
3: m9EXLhYWcdpBDX-fRVjeJwFcks4.roa (hash: hO49V1SsoRH71HYWYcEzmHsz7GxUTsYMMr0hhLYqiYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:8e:ba:dd:12:cc:7d:18:bb:dd:3c:1f:5c:c7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Mar 29 02:00:50 2026 GMT
Not After : Mar 30 02:00:50 2026 GMT
Subject: CN=8ec4239a952a66b2186b18caf06b5f5da4e61d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:2f:b4:ba:57:d7:a3:9c:6d:99:73:e1:10:
03:b7:93:77:09:85:d5:42:25:89:13:6e:19:9b:18:
f9:dd:b3:b2:44:60:0d:0c:f0:ca:05:35:51:16:56:
44:bb:26:5d:02:37:6f:d1:c2:9c:93:14:56:6b:1b:
49:6b:f6:3d:83:14:b2:d7:b8:90:f2:28:5b:f5:a5:
43:58:8f:76:d5:8a:8f:a7:bc:3d:28:4e:fc:22:25:
e7:3f:68:d0:4a:d3:e2:e9:31:69:d5:72:14:fe:13:
58:27:40:3f:d3:12:c5:11:7a:9c:67:89:48:5f:ea:
e6:68:ff:bc:8f:cb:57:fe:93:2f:1f:ff:63:54:70:
a2:21:3e:8c:55:73:31:b5:44:17:03:91:18:f0:2c:
f2:75:66:73:c9:a1:ca:2e:2e:56:0c:13:52:97:71:
ea:1b:2d:76:a4:07:9a:ff:f9:a8:bd:4d:df:4b:ce:
15:fb:0e:55:c6:34:17:98:db:10:80:95:fe:8d:e6:
66:61:e7:6b:f6:20:12:d8:9a:16:61:cd:0d:de:22:
ce:7c:e8:fc:22:89:2c:31:5e:d8:4e:b5:d4:a8:5d:
af:c3:6b:9b:c9:b6:84:f3:1c:5a:37:88:07:a5:65:
ae:d7:71:79:fe:17:d2:1c:0c:b2:d3:22:6b:a2:e7:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C4:23:9A:95:2A:66:B2:18:6B:18:CA:F0:6B:5F:5D:A4:E6:1D:33
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:54:0a:fd:2e:40:0b:6d:b8:df:1c:4f:5c:4f:1c:09:eb:ea:
28:73:56:39:85:ff:4c:7e:c4:9b:9a:e9:93:cb:f2:15:96:f0:
25:c4:5d:2f:6b:88:8c:af:22:bc:9c:47:25:7c:de:54:a3:60:
36:29:90:8c:eb:f6:aa:04:a3:c4:33:28:45:1a:dc:19:a5:e4:
ee:51:e2:bd:5b:09:f7:4b:5d:b6:6a:b7:06:99:92:62:2a:32:
8b:6f:49:ae:bb:fd:c7:03:99:f4:48:02:4b:f0:6e:52:d8:8c:
c0:54:ed:73:bb:38:89:b6:75:69:5a:56:ce:b1:f0:84:60:59:
80:80:51:39:32:c9:07:bc:07:34:dd:69:67:8f:5f:f5:1b:c8:
2c:20:7e:39:56:95:b9:fd:f3:1d:a7:3e:8f:89:9e:05:95:42:
e9:15:34:3f:b6:3c:0e:b1:22:8e:a9:4d:10:10:d5:1f:ae:91:
9c:65:c2:d3:e1:71:6c:74:d5:82:7e:fe:44:ba:cf:a3:59:be:
13:27:86:4d:00:01:ec:26:ab:b2:11:1a:89:6b:e0:23:9b:39:
a4:eb:92:5b:55:76:fe:65:1c:2a:09:bf:bc:33:e3:eb:1a:b2:
75:ee:4a:ca:e2:87:f5:fe:d1:3a:70:8d:1e:7f:d1:ac:10:6e:
57:f4:e3:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uo663RLMfRi73TwfXMdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGQ4MWYzZTBmMmQxOGYzYjU5MGRjYzUzNmQ1ZTk0Y2Zl
MDcwMTIwHhcNMjYwMzI5MDIwMDUwWhcNMjYwMzMwMDIwMDUwWjAzMTEwLwYDVQQD
Eyg4ZWM0MjM5YTk1MmE2NmIyMTg2YjE4Y2FmMDZiNWY1ZGE0ZTYxZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKYvtLpX16OcbZlz4RADt5N3CYXV
QiWJE24Zmxj53bOyRGANDPDKBTVRFlZEuyZdAjdv0cKckxRWaxtJa/Y9gxSy17iQ
8ihb9aVDWI921YqPp7w9KE78IiXnP2jQStPi6TFp1XIU/hNYJ0A/0xLFEXqcZ4lI
X+rmaP+8j8tX/pMvH/9jVHCiIT6MVXMxtUQXA5EY8CzydWZzyaHKLi5WDBNSl3Hq
Gy12pAea//movU3fS84V+w5VxjQXmNsQgJX+jeZmYedr9iAS2JoWYc0N3iLOfOj8
IoksMV7YTrXUqF2vw2ubybaE8xxaN4gHpWWu13F5/hfSHAyy0yJrouczdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7EI5qVKmayGGsYyvBrX12k5h0zMB8GA1UdIwQY
MBaAFIsNgfPg8tGPO1kNzFNtXpTP4HASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMt
ZjY1NDFmNzc4NTg1LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMtZjY1NDFmNzc4NTg1
LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1QK/S5A
C2243xxPXE8cCevqKHNWOYX/TH7Em5rpk8vyFZbwJcRdL2uIjK8ivJxHJXzeVKNg
NimQjOv2qgSjxDMoRRrcGaXk7lHivVsJ90tdtmq3BpmSYioyi29Jrrv9xwOZ9EgC
S/BuUtiMwFTtc7s4ibZ1aVpWzrHwhGBZgIBROTLJB7wHNN1pZ49f9RvILCB+OVaV
uf3zHac+j4meBZVC6RU0P7Y8DrEijqlNEBDVH66RnGXC0+FxbHTVgn7+RLrPo1m+
EyeGTQAB7CarshEaiWvgI5s5pOuSW1V2/mUcKgm/vDPj6xqyde5KyuKH9f7ROnCN
Hn/RrBBuV/Tj2A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:29 2026 by rpki-client