Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: QoTyAvsY90330PjxKqvsgpUQbt9XRaPkThtmmaMRNQk=
Subject key identifier: AB:F7:FA:6C:C4:1F:28:E6:CB:63:EB:EE:E7:6C:E1:45:D2:55:18:8C
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019E3FAF083CFDA61632C1210D4283EA25A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 15DF
Signing time: Tue 19 May 2026 10:01:35 +0000
Manifest this update: Tue 19 May 2026 10:01:35 +0000
Manifest next update: Wed 20 May 2026 10:01:35 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: 2oDRYlruxeGxzzVtVvh9TDiUnytbgOwREDDC5HzN5lc=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:af:08:3c:fd:a6:16:32:c1:21:0d:42:83:ea:25:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: May 19 10:01:35 2026 GMT
Not After : May 20 10:01:35 2026 GMT
Subject: CN=abf7fa6cc41f28e6cb63ebeee76ce145d255188c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:35:60:bb:82:d4:83:ab:99:f1:f2:f9:25:
b3:3b:68:66:b4:0d:0f:dc:2b:45:15:d0:8b:44:60:
aa:92:6b:a9:23:71:be:0b:43:e2:95:10:e3:4f:d8:
9f:a2:9b:6a:00:5f:b0:1f:0c:5b:82:24:bc:61:37:
f1:e3:a2:3f:cb:6e:4c:fb:f0:fc:42:ed:9d:00:57:
c5:55:1e:ae:73:4f:85:35:af:4f:33:02:8a:63:42:
73:67:cc:2b:8d:ac:82:76:e2:d1:60:ad:93:b5:36:
7a:56:f4:3d:3a:c0:54:41:a4:9f:94:4b:4e:1e:1f:
22:77:33:65:43:4b:f8:4c:6e:c6:88:58:5b:fb:df:
b2:c5:fc:87:7f:95:83:d0:14:5e:7e:7d:0f:9c:4d:
50:ea:7c:4a:49:f6:e1:1e:80:8f:fc:6b:3b:0e:8d:
c7:b1:75:a5:c6:a2:a3:14:70:b4:66:2d:20:6e:e8:
cf:d4:e1:7b:95:a1:1d:e0:82:82:73:aa:28:03:f3:
27:82:8b:93:0e:11:30:16:81:2b:d6:d2:65:a5:97:
4e:6d:fd:0b:ac:58:a8:83:d3:09:ca:c6:19:ea:53:
38:6b:1a:7f:93:69:a9:5c:21:7e:df:94:f7:2e:bd:
f2:5a:75:46:de:22:58:a5:ce:0a:53:46:05:28:09:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F7:FA:6C:C4:1F:28:E6:CB:63:EB:EE:E7:6C:E1:45:D2:55:18:8C
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8a:16:77:91:05:91:c1:0c:dd:aa:ac:6b:ce:d8:0d:03:b6:
3f:08:19:e9:a1:eb:5e:78:85:13:67:4d:52:89:19:fa:95:3e:
92:e7:2b:2d:c9:ab:28:a4:f1:2b:d9:05:1c:53:bb:f5:94:0d:
38:42:bc:c5:98:32:c9:75:a3:c9:c7:80:2f:7c:6b:cc:6f:89:
15:44:15:61:b5:48:bc:4b:0c:7f:88:6f:bf:86:88:24:32:fa:
c8:5e:e2:30:ee:c5:a9:04:48:06:bc:34:7e:7b:ac:db:31:f4:
6c:f6:4b:6d:74:aa:16:4a:fa:d3:6e:bc:2c:ed:ac:89:bb:fd:
fd:b5:74:d6:ed:3b:13:c8:4e:46:e8:f9:24:78:00:b8:0c:51:
b4:05:6c:fc:43:2a:42:40:51:6f:a8:35:e7:bd:6b:c2:3f:18:
4e:93:f4:87:95:10:fe:22:8d:03:d1:43:e9:32:ce:79:2b:2c:
89:1d:0f:94:5f:af:4d:74:36:1f:0e:57:31:bb:23:5f:d5:dc:
30:e0:f5:53:65:2a:02:72:00:fb:5b:60:21:b6:96:47:ec:ac:
a9:91:8f:ec:75:ed:b4:4e:0d:cb:fc:03:dd:60:87:0d:85:a1:
13:64:11:44:39:cb:62:b7:f5:84:92:28:92:94:00:fe:00:6e:
70:8a:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:45:49 2026 by rpki-client