Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: fpizNTOq4gEV8Fi/Zt4OHYQ7DXs6vbzg7dSvB394Um8=
Subject key identifier: 55:A0:CE:18:A8:50:88:E2:2A:6E:D7:96:D4:22:81:67:08:54:A6:9B
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 01A117BD0D54977989702095272B5D4F1214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 1758
Signing time: Wed 07 Oct 2026 19:00:28 +0000
Manifest this update: Wed 07 Oct 2026 19:00:28 +0000
Manifest next update: Thu 08 Oct 2026 19:00:28 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: COwGk3yAY6nWyxgQ6SLy8DGiz292Z+rI1hDWvOUfhoA=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:0d:54:97:79:89:70:20:95:27:2b:5d:4f:12:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Oct 7 19:00:28 2026 GMT
Not After : Oct 8 19:00:28 2026 GMT
Subject: CN=55a0ce18a85088e22a6ed796d42281670854a69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:43:b2:9b:da:35:5f:aa:2e:42:8d:e3:ff:
4e:bc:27:96:e7:b3:6c:e1:c5:2b:8c:9d:41:a7:db:
e5:1b:9b:82:f5:ea:42:1a:88:dc:e6:ac:72:81:6f:
33:29:6f:f9:dc:e9:23:27:93:89:aa:a8:70:71:5c:
16:78:d1:30:f4:84:11:a6:00:9d:a1:40:8b:74:71:
46:96:95:70:64:3d:d0:e7:8e:36:15:47:92:c8:08:
b8:93:99:d8:92:df:49:94:df:e0:5a:d2:d6:a9:bb:
62:1f:ca:eb:96:88:cf:e4:94:09:dd:0d:b7:e5:7d:
8d:ef:6d:85:b9:04:8e:e9:33:96:00:66:59:f7:f4:
75:aa:2e:28:f6:49:d0:b8:30:58:af:dc:15:a4:b0:
56:71:d6:6f:e3:32:97:a0:8d:14:22:ce:c7:f4:e7:
ea:76:1c:0c:57:88:c6:40:7f:17:61:e4:ad:77:c7:
2b:15:dc:4d:3f:c5:04:a1:10:a6:64:50:f2:75:67:
f4:19:62:9d:76:56:b7:a9:a4:e5:76:1d:57:8a:46:
d1:a0:2c:78:25:b5:d8:d9:10:69:04:50:c1:79:c5:
34:b5:e3:22:d5:d5:93:01:dc:76:f2:c1:5d:d5:68:
22:b9:63:0f:52:0f:0a:d0:a4:54:21:0f:8b:77:0b:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:CE:18:A8:50:88:E2:2A:6E:D7:96:D4:22:81:67:08:54:A6:9B
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dc:7a:95:cf:b5:7c:d0:69:59:48:f3:74:04:d1:30:dc:1e:
a6:39:82:2d:12:55:d2:55:17:01:0d:22:50:8c:d0:82:7d:98:
a5:0e:57:69:ed:8b:bb:1d:8f:43:f8:1f:74:fe:71:be:39:36:
c7:e9:e9:37:fd:2d:ab:7b:5a:28:8c:bd:dd:20:c0:d8:28:28:
c1:dd:17:3e:51:a7:40:d6:e3:64:98:65:83:a5:17:c7:d1:f6:
17:a4:d1:3a:9e:f3:3d:1f:47:6e:f2:f9:74:8a:76:36:e1:f7:
44:37:70:e1:19:8a:05:cb:e5:71:01:60:87:41:fa:7f:4b:e4:
93:bb:65:1e:73:6d:cf:40:cc:9a:af:3b:94:d6:c1:93:a1:97:
f0:12:73:13:f4:f1:d2:19:56:7b:16:74:bb:fc:6c:03:6d:28:
08:83:b6:01:ca:fe:7f:62:d0:df:67:5d:ea:6a:a9:d8:2d:f0:
c4:a9:eb:38:c7:83:f6:a4:45:35:89:6c:3a:29:06:4b:a9:ef:
27:5d:fd:0c:7c:54:b4:e3:5f:96:99:2d:a8:f8:f8:f3:49:12:
40:06:c3:8a:99:4f:c2:8c:52:9c:2e:5a:b8:40:82:d5:27:65:
95:10:f2:4f:c0:62:1f:87:27:bc:88:8c:fe:d4:32:fb:fe:9d:
74:c3:39:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:54:52 2026 by rpki-client