Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: ndt+uBkitbyRBIS08bibYySUjacGBlRa2Fo42sAiPv0=
Subject key identifier: DC:16:69:9F:60:B9:DE:72:9B:3F:3D:39:AC:F0:09:2A:B6:76:D0:AD
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 01A178F13097C2D6E043CBA566194057B942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 0BCE
Signing time: Mon 26 Oct 2026 16:00:34 +0000
Manifest this update: Mon 26 Oct 2026 16:00:34 +0000
Manifest next update: Tue 27 Oct 2026 16:00:34 +0000
Files and hashes: 1: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: hT8zUNb/Z2qCVtDVCq3VzRbqdUDpYJUnb3nymYi3JD4=)
2: rTrNf2BtsL1vlw_R__r7UKcCZJk.roa (hash: lQAxfhbBIAhm99xgTizcCxmFSvD0y0yK3pththJkeEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:30:97:c2:d6:e0:43:cb:a5:66:19:40:57:b9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: Oct 26 16:00:34 2026 GMT
Not After : Oct 27 16:00:34 2026 GMT
Subject: CN=dc16699f60b9de729b3f3d39acf0092ab676d0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:a6:12:83:3e:62:e1:d6:4c:60:10:01:b9:
b8:18:58:94:5a:82:42:7d:5b:8e:b0:b9:17:2a:04:
92:00:16:68:6f:00:5d:2d:3d:c0:ae:f6:90:85:ae:
6b:4f:fe:42:dd:00:53:9e:ef:90:a3:12:f3:df:91:
03:d0:7f:85:f9:7e:98:13:94:fa:de:ed:03:7d:16:
c1:e3:2d:03:8b:6e:03:ba:d5:db:14:bf:d5:cc:9f:
81:f7:8a:03:6d:7f:30:d3:a3:d4:23:02:b2:56:d1:
9e:b3:62:e6:f6:fb:5e:ae:d1:86:03:f9:54:d5:35:
38:12:1f:16:a1:31:3a:46:89:7d:34:a8:a7:a3:36:
b8:af:fa:89:d3:02:c7:3d:77:00:77:da:bd:5a:fc:
6d:87:40:32:ad:94:bf:7d:1d:c7:b6:0a:33:72:96:
d9:a9:ff:40:f3:df:02:95:0c:42:1d:79:9a:af:e7:
dc:9b:21:d9:5a:df:a3:85:93:1d:f1:30:bd:0b:03:
26:54:65:09:60:05:c4:7e:0d:45:b1:d8:10:64:97:
5a:41:e1:98:56:fa:6b:86:46:4b:fb:20:6b:49:6c:
ee:80:c0:0d:d8:d2:df:d9:bd:2e:b7:71:37:16:c7:
4c:1c:56:ba:a7:00:5c:73:0a:50:d2:6d:bf:5a:9f:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:69:9F:60:B9:DE:72:9B:3F:3D:39:AC:F0:09:2A:B6:76:D0:AD
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:33:1e:5d:8f:17:ba:42:e9:de:97:07:fb:8d:41:ac:4a:db:
49:a9:cb:06:f2:c4:9b:72:2a:71:9e:64:46:8d:26:5f:2f:cc:
a2:81:64:bc:7e:93:4c:37:01:de:58:4d:e1:5c:61:df:0f:c7:
6c:02:d4:10:37:36:12:4d:50:65:e5:08:5a:e7:2f:7d:a7:bb:
61:b6:df:a1:ad:66:e3:0d:1f:cb:75:62:6f:be:16:4d:22:c1:
25:c3:a4:40:d8:99:26:f9:a0:9d:48:63:c0:c2:8b:08:8a:fe:
f4:37:ab:a5:d2:db:64:57:b6:8b:d3:0a:fa:20:78:73:33:0a:
06:78:d9:e0:1f:11:4c:69:f5:5e:c3:ed:b4:42:73:66:d7:4b:
f9:be:f2:36:db:13:a4:e5:37:77:65:d0:da:48:b4:91:ce:f7:
56:90:29:a1:fb:e7:41:22:51:9a:fc:f4:5a:58:0b:59:8c:3a:
73:fd:db:05:ed:0f:47:a6:dd:e4:f7:5b:99:97:95:b8:eb:fa:
14:8d:ac:23:03:b9:56:35:49:ee:b4:d9:d9:7b:e8:80:f5:07:
90:d3:69:24:cd:8c:17:76:9a:5c:01:aa:95:9e:72:50:f9:58:
01:d6:30:3a:96:4f:f3:18:c6:b4:27:f0:be:a8:f4:bb:32:d3:
f0:5c:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:54:50 2026 by rpki-client