Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
File: iWsznbz4QR1YQAjPAptHyIqzedU.mft (raw, json)
Hash identifier: NyNJU2tYseYgluay87tqXiehNHLRdFaTztp2JvAXTo4=
Subject key identifier: 8A:14:90:F1:BB:BA:46:ED:F1:28:E7:18:67:6F:F4:91:C7:5B:B2:7E
Authority key identifier: 89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
Certificate issuer: /CN=896b339dbcf8411d584008cf029b47c88ab379d5
Certificate serial: 01A14FF634C8EE97C3426444B2F0EF70CA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
Manifest number: 028A
Signing time: Sun 18 Oct 2026 17:01:37 +0000
Manifest this update: Sun 18 Oct 2026 17:01:37 +0000
Manifest next update: Mon 19 Oct 2026 17:01:37 +0000
Files and hashes: 1: _01xdN9b6VGiDq8TdVfHkv4nsNA.roa (hash: cof+3EhtbeAEqNmK/OvBSq8ShRaGyYdb9JejvgRl8nA=)
2: iWsznbz4QR1YQAjPAptHyIqzedU.crl (hash: DzNyrfsPK9H+GcDqeOO3mmzvEL2x43fybRzksDRIGB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:f6:34:c8:ee:97:c3:42:64:44:b2:f0:ef:70:ca:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896b339dbcf8411d584008cf029b47c88ab379d5
Validity
Not Before: Oct 18 17:01:37 2026 GMT
Not After : Oct 19 17:01:37 2026 GMT
Subject: CN=8a1490f1bbba46edf128e718676ff491c75bb27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:7a:36:97:c6:1a:b5:fc:57:6e:cf:1f:31:
3d:b8:4f:12:54:d9:85:4c:64:74:0e:a8:7c:02:3b:
15:ff:08:c3:53:e8:b2:a0:e0:e3:b6:88:fa:b4:d0:
85:b8:b6:2c:64:47:7a:f7:d6:77:d4:91:0a:10:5c:
79:68:34:54:b8:66:11:81:c3:f1:13:83:1c:a6:37:
72:ba:c4:22:3a:4b:c3:39:99:f0:da:e2:3d:50:74:
9d:bb:96:67:fd:a3:fb:af:97:02:13:35:81:4d:ef:
30:6d:db:4f:ef:d7:26:14:ff:d3:b8:a4:ae:8f:c5:
44:10:49:00:20:96:86:f3:2f:2b:ad:98:80:96:5f:
5c:26:63:e7:4c:ac:a7:ae:4d:64:f9:e9:d9:9e:ab:
30:54:80:7c:83:9f:2a:fc:91:eb:28:f0:49:6d:64:
0b:1d:1d:99:92:8a:7e:18:0e:3c:1c:96:0f:d5:2d:
ac:6b:bd:6b:e7:f9:64:61:e2:65:36:f0:4e:64:bc:
18:61:f2:bc:1b:e0:19:ae:48:21:ce:6f:81:a5:36:
96:45:27:7f:d6:ca:51:50:79:75:10:6c:d2:0e:f6:
a8:0c:e6:dd:15:1c:b8:78:0f:79:89:70:cf:e0:91:
35:e3:64:03:6c:58:1f:79:3b:e4:d8:66:fe:03:fd:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:90:F1:BB:BA:46:ED:F1:28:E7:18:67:6F:F4:91:C7:5B:B2:7E
X509v3 Authority Key Identifier:
keyid:89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:32:6e:3b:2d:83:a9:30:7d:50:cb:62:85:2e:7c:93:e1:71:
7b:0f:9a:9f:f1:55:67:55:a3:81:13:df:77:d3:37:f4:fd:71:
89:dc:1c:48:73:07:96:f9:20:9f:a9:22:e2:a1:a5:20:8a:39:
3f:bb:5a:b5:70:77:cd:40:c7:bc:e7:77:be:86:21:f3:ae:1a:
c4:05:f9:c3:e9:99:2e:ec:d7:cb:f4:49:7c:36:e1:87:2e:06:
9e:99:98:1b:2c:98:21:6c:a5:24:8d:98:02:cc:8f:a8:cd:64:
1f:45:3d:a5:b9:bd:58:af:73:33:fc:99:18:79:7d:18:b3:17:
dc:5c:22:98:d5:19:f6:80:e8:dd:5c:b0:fd:fd:3a:96:be:2b:
1a:32:3b:17:77:67:81:d9:c2:99:a9:6c:83:dd:3e:18:37:d1:
34:ad:a4:d2:25:69:70:66:1f:2a:80:e0:d0:74:c0:63:77:3b:
90:42:65:b7:5d:29:f4:d3:ba:d8:e6:f6:83:1f:a1:1a:b6:dd:
b9:28:d5:35:de:e5:81:81:f2:72:e8:b4:4b:52:27:0a:d6:17:
1e:97:b6:3d:e9:8b:90:7b:36:24:cb:98:13:27:06:07:3a:36:
a8:3a:de:7f:44:b2:b0:c4:e0:91:74:9b:b5:ad:68:17:94:a2:
37:f8:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:16:11 2026 by rpki-client