Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier: W/b4uk4xPXMF85swhg1A70yr6PGTQtaGNa6/QHkr8Rs=
Subject key identifier: 2E:65:4A:29:61:C1:86:6E:F7:F5:A8:45:79:41:DF:17:43:A7:A7:AB
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial: 019D37C0B78D2A428EA43DD3EA1433916117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:09 +0000
Manifest this update: Sun 29 Mar 2026 04:01:09 +0000
Manifest next update: Mon 30 Mar 2026 04:01:09 +0000
Files and hashes: 1: NDwNFZEXkfQJUDkRKdNYGoT-CYs.roa (hash: MgEstRhz+rsVJ145O8dZD+Rboj459K59VW57okQlLvE=)
2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: rAMXRE72KG6cJjQUSWLWk3XzJcD7WQvvA1DZbco2yPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b7:8d:2a:42:8e:a4:3d:d3:ea:14:33:91:61:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89693344638acb0536582fab089876578ef6bc56
Validity
Not Before: Mar 29 04:01:09 2026 GMT
Not After : Mar 30 04:01:09 2026 GMT
Subject: CN=2e654a2961c1866ef7f5a8457941df1743a7a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:bb:4d:d3:d5:55:a8:cb:7a:db:04:7e:50:
fe:98:9c:a5:dd:c8:07:64:e7:7d:ad:4b:ce:98:78:
f6:16:ef:0c:52:b5:3f:aa:88:9d:6c:cf:11:17:ce:
15:60:39:12:85:5d:eb:68:94:0f:d1:94:b8:c5:3d:
d0:ed:bb:6f:c2:d0:60:ab:29:6c:a0:8a:01:ad:87:
a5:b8:20:d6:cb:d9:20:fa:07:de:0e:aa:07:86:0f:
de:a5:7b:19:86:da:25:ff:04:0f:b4:c1:0c:78:b8:
00:a7:3d:eb:29:cb:c2:53:74:d0:f7:8e:b8:a1:35:
f6:bd:54:83:b3:67:dd:9b:4a:f8:73:42:68:c8:ae:
87:f8:fa:ff:83:8a:b0:99:ab:57:01:7a:00:e3:da:
13:0d:c2:66:89:e0:ca:c6:6f:ef:0b:bc:6f:3a:a5:
e8:b3:c3:55:a2:92:97:01:12:e3:e8:6d:28:38:6b:
95:95:09:ad:a6:45:d5:56:e0:2a:64:b8:da:cc:d8:
76:e2:20:81:d5:6a:a1:ce:78:b5:a2:c0:58:ce:8f:
52:e0:7c:35:c9:33:51:d4:89:cf:91:06:17:f5:8e:
16:4f:0c:95:e2:6a:c5:23:ea:d4:fe:07:37:19:e8:
01:f1:7e:76:08:ae:60:ee:46:4f:43:bb:56:7d:69:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:65:4A:29:61:C1:86:6E:F7:F5:A8:45:79:41:DF:17:43:A7:A7:AB
X509v3 Authority Key Identifier:
keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:42:53:e6:2f:bd:37:af:f6:44:88:8a:52:11:89:a8:64:d0:
e9:32:d7:da:e2:53:fc:c3:4e:b4:2b:76:b8:27:8d:5b:ac:82:
df:8b:fe:bd:08:e6:6d:06:53:24:ba:6b:a1:7b:6c:c6:0f:64:
60:a3:13:ab:ec:1d:3f:37:28:38:f2:75:b0:17:53:24:fd:57:
83:0d:c5:f5:82:a4:fb:48:83:34:48:f8:c0:91:2c:69:00:a8:
54:83:af:8b:a1:07:65:8f:18:e9:46:3b:e8:b5:f7:3b:57:88:
1e:a1:0a:fa:53:1b:4f:a5:11:fa:14:1a:ba:50:9c:60:b8:0f:
a5:0c:54:69:71:e1:37:83:c4:6d:cb:0f:11:96:d3:4e:d2:2b:
48:72:66:5c:1e:e9:1a:c3:7a:15:1a:1b:71:f6:07:cc:be:30:
3c:b0:59:d1:b1:c3:00:69:7c:fc:f0:aa:87:3b:a3:ea:b6:17:
8f:28:ee:c8:d5:83:10:33:de:f9:fd:71:14:bb:ef:87:1d:90:
6d:61:94:63:0c:81:01:60:3b:37:c3:f8:e8:e9:42:20:0c:14:
96:1e:dc:b3:fd:3f:36:8e:19:a5:75:10:14:ea:57:20:2d:3b:
67:9c:a0:54:25:7f:54:00:6d:14:f8:ab:47:73:45:00:c0:b6:
70:81:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:27 2026 by rpki-client