Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: aRXPMdayOfhREyxEFuIMlt6NlUSW9lvbxjHC/j9GLWc=
Subject key identifier: 45:6A:FD:D1:FB:F9:D1:2C:51:3C:DD:4E:EE:4F:C4:7E:0C:82:74:DF
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01A004028842CEDD395B63D42184D998F440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 1A5E
Signing time: Sat 15 Aug 2026 06:01:09 +0000
Manifest this update: Sat 15 Aug 2026 06:01:09 +0000
Manifest next update: Sun 16 Aug 2026 06:01:09 +0000
Files and hashes: 1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
3: ATnIbsnePKNaMQNlVZCM7IP2KaQ.roa (hash: wOURT7eJ1zzvXUnVWrop+Xtq40wMGTNV73AAUY+CZCE=)
4: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: ATbYk+Xzy+vXWs7OzyMalRfZzRn45KXcTgdwvcvDYXA=)
5: R7Lu4Y1fCyTXONuoklyDGrymZag.roa (hash: 5a8I6IIILgZSlU2ehvXhgeJfg0YzkicxbnbV++shmxM=)
6: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
8: jSnPKKGvikx0YeXmgH0K8iF0JTw.roa (hash: RwJA7bMjhXX4ua2Z/JnGiMlZLMTnVTQMeqIv/GuCRps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:88:42:ce:dd:39:5b:63:d4:21:84:d9:98:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Aug 15 06:01:09 2026 GMT
Not After : Aug 16 06:01:09 2026 GMT
Subject: CN=456afdd1fbf9d12c513cdd4eee4fc47e0c8274df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:4d:bf:01:12:68:98:8c:ca:cc:f1:2a:c7:
77:a9:97:00:d6:f8:8f:1f:db:4c:51:64:90:5e:c7:
f2:95:0e:a8:07:a6:49:12:c6:b1:fe:25:91:8b:78:
2a:82:fe:20:09:26:f7:5d:70:a4:f6:c7:a0:ca:ee:
84:ec:8c:0b:de:93:fc:66:95:7b:99:37:5d:d8:e9:
21:84:b8:65:51:a2:63:b5:2b:5c:27:a6:62:ec:76:
5b:10:4d:92:7f:af:a0:91:65:a3:e9:61:06:19:18:
85:0e:69:78:ef:08:f3:51:a5:b4:13:43:42:46:19:
e0:34:d2:31:f2:7b:60:98:f3:20:e2:8a:8e:d9:f8:
8b:c3:02:f4:34:d9:d3:49:d1:07:62:9f:09:06:ba:
57:ed:4e:04:07:49:16:1e:71:77:b3:52:0f:be:fd:
28:8c:79:07:74:ca:a6:58:9e:fc:70:07:dc:53:66:
f6:90:1d:92:3e:5a:94:6b:6d:83:e6:98:1e:5a:08:
dc:0b:c8:20:73:b3:c2:ff:9a:b8:1e:83:59:74:f5:
ea:ab:4e:2d:8b:7b:d1:fc:59:23:6a:cd:42:6c:fa:
17:26:30:c0:e0:3d:fd:0e:29:99:9b:1c:0b:9c:4b:
62:78:35:24:15:11:60:f7:48:73:41:83:92:75:24:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6A:FD:D1:FB:F9:D1:2C:51:3C:DD:4E:EE:4F:C4:7E:0C:82:74:DF
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:15:1c:db:bc:72:44:50:5d:8e:d8:8f:f4:cb:8e:2b:97:fd:
47:b1:cc:e4:07:64:bb:13:30:56:b0:68:4f:a4:70:eb:b8:74:
80:b2:e3:a8:90:a7:d9:c6:3d:31:9b:bd:91:c3:ca:27:d6:c3:
2b:9a:b3:99:be:1f:68:4a:89:04:03:e8:13:cb:5f:fa:e9:f3:
5b:1a:50:7b:f1:dd:28:a1:f6:d6:38:b5:97:b6:48:56:62:af:
2d:eb:e3:2c:c4:10:e1:74:78:d1:26:81:37:72:12:32:7a:4c:
0a:30:78:e5:c6:d4:c3:c1:c5:19:9a:c2:fc:17:89:a8:7b:7b:
36:94:ac:bb:d0:fe:9b:d1:cf:c4:22:82:09:51:ce:69:23:32:
e6:95:2f:e0:20:6e:6b:f2:6e:cb:8d:d5:a4:a0:ec:fc:e0:ad:
27:59:6e:26:90:4d:fe:d4:83:2a:5e:9c:19:4e:eb:20:ba:2d:
8c:01:9b:b0:49:e1:9f:62:d1:3c:2c:0b:ea:c6:ea:1a:8b:8a:
35:99:b2:04:21:11:a8:c7:ed:fe:17:95:3a:73:b0:d5:9c:7b:
ec:b4:02:0f:1c:82:54:b9:d1:ef:2e:71:7e:76:be:6a:d9:44:
dd:72:63:8e:e4:de:53:3a:4b:b5:c5:d2:b4:87:8f:01:cb:85:
37:ee:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:02:58 2026 by rpki-client