Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: yB9GoQiw2FfWDlbrUlST3q644FYbh3Tnh3VjLmVBS5Q=
Subject key identifier: CC:A6:D3:C4:7F:A1:A9:3B:7C:40:03:4F:D3:35:F1:51:FA:DD:A9:AF
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 01A03E28B3A8172B36575DF6A307895F4357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 0B2B
Signing time: Wed 26 Aug 2026 13:00:49 +0000
Manifest this update: Wed 26 Aug 2026 13:00:49 +0000
Manifest next update: Thu 27 Aug 2026 13:00:49 +0000
Files and hashes: 1: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: YSXQy2oXIsan0mhfS95XsMfm7TfVgHqBz78gMTe+LZY=)
2: rTrNf2BtsL1vlw_R__r7UKcCZJk.roa (hash: lQAxfhbBIAhm99xgTizcCxmFSvD0y0yK3pththJkeEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:28:b3:a8:17:2b:36:57:5d:f6:a3:07:89:5f:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: Aug 26 13:00:49 2026 GMT
Not After : Aug 27 13:00:49 2026 GMT
Subject: CN=cca6d3c47fa1a93b7c40034fd335f151fadda9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:74:72:92:6a:a3:b4:20:9f:db:91:35:e1:
9d:36:64:fb:e7:51:d0:0c:7b:d6:ef:5f:48:83:52:
5c:85:53:c0:4d:00:a5:10:ea:58:1c:6f:4e:8a:5a:
31:9b:30:c7:5c:4c:1b:ba:ab:0f:bc:61:ac:21:f7:
91:7e:04:be:6e:c0:50:08:06:b2:95:5b:b6:bb:68:
6e:c6:2f:96:3d:fb:1b:77:3c:99:d0:a8:1e:f3:ab:
75:15:d9:aa:14:87:d1:2a:a4:b6:50:9f:2b:8f:d9:
2d:e7:9a:5d:3a:92:c7:07:c9:72:ce:7d:58:6a:2e:
7a:7b:6c:09:e4:4e:c6:26:fe:90:a3:0c:78:46:20:
72:57:bd:2c:c6:5f:a4:46:6c:ce:ef:ea:fb:19:cf:
81:71:1c:af:34:18:76:ef:87:63:bb:43:9f:83:a0:
19:10:bd:38:0b:ab:d1:34:86:33:12:52:4a:92:c3:
39:4d:2f:d7:c4:e0:29:43:b7:fa:4d:31:80:f9:5f:
ec:2c:9e:b7:2c:83:94:d2:b1:39:16:c7:8c:3d:52:
71:ed:a4:85:f1:67:97:79:2c:cc:32:c7:22:0f:62:
42:16:39:bb:8d:bd:98:0e:5f:4f:25:9a:56:e6:b5:
47:fb:d4:c7:e4:93:3b:d1:de:79:b6:2f:6c:19:fa:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A6:D3:C4:7F:A1:A9:3B:7C:40:03:4F:D3:35:F1:51:FA:DD:A9:AF
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2d:27:2d:4b:55:66:93:c0:6f:53:42:38:fc:0f:3b:d9:79:
30:e1:df:4b:ec:fa:42:eb:09:62:95:e4:f1:28:51:56:d2:f8:
cb:49:75:39:2c:0f:4d:89:60:48:53:05:69:7c:30:76:7c:d3:
41:11:65:8e:b8:af:4c:7e:ca:88:2f:b3:7a:79:eb:7e:c6:81:
9d:08:81:ce:86:26:bc:cf:33:31:47:e0:5b:7b:10:60:c1:70:
3a:2f:54:1b:07:39:b0:c9:f4:54:c3:c6:99:44:04:dc:3b:4f:
f5:5b:1c:40:e7:74:e1:7c:53:ea:b5:b7:82:76:66:90:fc:d4:
46:a8:cb:4f:07:fd:18:c8:40:ae:2d:6a:d3:e0:58:58:bd:d3:
71:26:f4:31:f0:d3:5d:7f:d6:02:a6:20:3a:4a:9b:39:50:2b:
da:56:24:db:9b:a3:3f:87:9e:52:a6:f4:28:bd:38:0d:ce:3e:
ca:d3:ab:cc:c8:96:5e:12:95:f0:ab:0c:12:3f:cd:11:0a:d1:
60:36:7a:28:f6:85:66:c1:2d:6d:0e:18:7f:53:67:96:5b:0e:
eb:ca:67:1c:62:91:fd:71:8c:fc:3f:b1:b6:0c:86:8b:47:eb:
15:d2:2a:07:5e:ee:24:b0:3e:1c:58:06:6a:5d:4f:e4:ab:c7:
92:e1:51:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:01:44 2026 by rpki-client