Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: jVExE+wjgmtuW56u1x3QLTVTcU3/g45zXbwqM9A7z6M=
Subject key identifier: AF:AF:AE:D6:2D:54:35:1F:0C:C5:5A:90:87:45:2E:01:1A:6A:41:9A
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 01A011196E50436238F4AC8E4345D7E4ECAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 16D0
Signing time: Mon 17 Aug 2026 19:01:14 +0000
Manifest this update: Mon 17 Aug 2026 19:01:14 +0000
Manifest next update: Tue 18 Aug 2026 19:01:14 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: m7xSddDGTB49Vc6n4z6yqWYAHSWBNluAq3/E1pscgTE=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:19:6e:50:43:62:38:f4:ac:8e:43:45:d7:e4:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Aug 17 19:01:14 2026 GMT
Not After : Aug 18 19:01:14 2026 GMT
Subject: CN=afafaed62d54351f0cc55a9087452e011a6a419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:6d:aa:6b:9d:05:c4:93:51:24:b1:1c:f4:
c0:53:9b:1d:cf:79:21:35:be:6e:55:1e:48:d3:95:
d7:6c:e9:b0:25:bb:01:24:bc:3f:16:7d:87:5d:01:
d7:07:47:6b:2c:27:8e:28:9c:54:6e:18:60:0f:3d:
d9:df:34:fa:35:56:cd:e2:9c:49:7e:55:49:be:d6:
71:b1:38:05:87:8d:a9:dd:6c:fb:46:de:6e:15:c6:
11:98:53:69:ca:6f:13:8d:ad:a4:c2:01:35:a9:7c:
9c:90:c2:61:20:67:03:b6:d5:da:76:83:b2:43:d3:
8e:9b:55:34:ba:90:96:88:7a:98:0d:73:59:a7:49:
d1:55:c4:73:1d:a6:4d:b2:46:da:dd:71:de:a6:ab:
8f:3e:3e:11:9b:ca:fb:d6:88:13:91:d9:62:04:ca:
56:96:20:f2:d5:ec:3f:10:e6:6d:de:c2:da:1f:71:
91:63:95:c2:4a:e0:19:3f:92:74:04:c2:7b:ea:63:
b9:ba:eb:51:67:91:f9:75:2b:ff:10:86:6e:34:a1:
79:90:06:a4:52:82:f2:9d:20:19:88:bb:a2:3f:3f:
a4:26:74:c9:e8:0c:23:09:97:30:0e:c8:9e:ce:bf:
94:15:0d:f0:dd:f5:15:a8:7c:5a:48:48:8d:75:d9:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AF:AE:D6:2D:54:35:1F:0C:C5:5A:90:87:45:2E:01:1A:6A:41:9A
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:14:71:22:b2:38:1e:02:27:93:e4:b6:86:47:11:58:eb:87:
b6:54:6e:ad:7c:4c:b1:0d:de:bd:95:fc:c0:b0:7b:46:a4:89:
b1:c7:e7:fe:42:cc:3d:b6:f7:2f:3a:5d:7d:7c:a9:b1:e6:1e:
16:c6:55:e8:2e:5b:00:59:28:0c:44:9c:d6:8f:a1:b9:a0:01:
d3:82:4c:75:87:eb:0f:3e:85:cd:30:18:5b:07:ba:c8:5c:f4:
3d:34:80:f8:2c:f0:34:2f:2c:6f:c0:45:54:e0:31:d5:3c:a0:
5f:20:75:6d:c8:b8:4e:53:e1:da:ff:31:18:d4:fa:8e:e8:23:
7d:0a:d7:fb:d2:d9:20:46:b2:df:5b:5e:74:71:f2:17:dc:30:
72:4e:e0:10:da:a5:55:da:8b:9c:a9:0d:21:d6:81:05:9b:1d:
39:f2:cf:36:9e:1e:57:e7:b9:90:90:0b:07:31:70:91:4d:55:
81:55:74:3d:3d:4e:4f:ee:4b:2d:32:ab:a1:0b:89:57:6d:36:
b3:3a:18:37:73:da:0b:d0:1f:d4:a2:9b:1d:13:9d:f1:40:9b:
03:b7:b6:62:51:51:02:62:ca:82:fe:1a:65:b7:b1:65:e8:df:
57:3f:f3:f8:06:1e:48:84:d8:66:fe:ea:f0:3e:f4:4f:d6:f7:
99:49:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:16:59 2026 by rpki-client