Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: 1DMtbt5LJdfNHNAxr9Y7fUuK1ULMxqkOE1jE/n8Q2TQ=
Subject key identifier: 35:4D:74:E7:AF:1B:6B:D2:07:DC:21:0F:10:49:F8:E5:7F:8B:60:29
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 01A129567A833E716B5115CBD60E0D95DBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 1AA4
Signing time: Sun 11 Oct 2026 05:01:35 +0000
Manifest this update: Sun 11 Oct 2026 05:01:35 +0000
Manifest next update: Mon 12 Oct 2026 05:01:35 +0000
Files and hashes: 1: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: 5opYiNJlwSwDymFeQqZn4M++asOf4WropHrfE33R2uY=)
2: sviolDtkALX237AgHdJy3qGm9E8.roa (hash: UBbw3ecAl6K7Vc8agYWaL992jebVFcU3FnvRCH5/x3w=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:7a:83:3e:71:6b:51:15:cb:d6:0e:0d:95:db:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Oct 11 05:01:35 2026 GMT
Not After : Oct 12 05:01:35 2026 GMT
Subject: CN=354d74e7af1b6bd207dc210f1049f8e57f8b6029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:08:58:f7:3a:13:85:14:b9:6e:7a:64:ba:
4f:42:0d:ff:3d:e4:a2:6a:73:f0:0f:1d:27:c5:de:
c8:e0:dc:87:e3:20:72:6b:c4:b4:ee:18:bf:7b:08:
76:cb:b4:65:83:eb:41:fd:f8:1d:c4:67:cf:35:9a:
04:42:0c:c5:54:43:ad:92:33:b5:00:cb:e3:5d:ac:
99:a9:1e:a3:32:20:b2:16:4a:3c:f6:2e:5e:bb:d0:
aa:de:90:56:92:60:8d:95:aa:de:26:21:90:81:34:
25:c4:03:49:cd:e4:06:4d:ad:d2:df:0b:ad:10:34:
c0:29:7f:14:ea:e6:9c:bf:ab:85:42:93:01:df:0f:
f0:00:4c:ed:f7:4e:b6:44:60:ce:6e:b3:fe:a1:69:
53:b5:cb:7f:c3:d4:4f:4b:aa:db:35:84:c4:08:da:
f2:2b:99:b3:4c:a1:63:e3:25:63:a2:e2:f2:db:7b:
fd:8b:cc:a3:b5:ad:af:68:bc:85:16:25:e9:e1:87:
e9:8c:4e:ff:6b:2a:1f:14:aa:9a:74:50:aa:0f:b7:
b9:44:33:f5:04:2f:d4:7c:cd:00:b2:4f:40:36:2f:
c4:1a:80:44:f6:ab:b4:21:46:7b:84:3f:05:75:1d:
4a:5d:15:af:ad:21:ee:c2:db:32:90:df:7e:ac:5d:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:74:E7:AF:1B:6B:D2:07:DC:21:0F:10:49:F8:E5:7F:8B:60:29
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d5:d3:65:a0:a5:76:bb:06:d6:60:84:06:1e:90:68:32:36:
4a:ad:f4:af:db:f4:a8:0c:38:07:aa:9f:f4:6d:ac:f4:4d:6a:
57:be:d6:38:55:92:eb:06:c7:76:66:9e:9e:e2:a6:06:b3:d9:
dc:29:f1:bd:56:79:08:0d:54:e1:6a:85:bb:7c:a9:be:7b:fb:
ef:a4:f9:12:68:55:26:19:fb:d0:c9:df:86:49:e1:6c:f2:69:
e1:8a:da:4b:69:f6:26:eb:d5:02:f6:b0:68:ec:b6:47:9d:80:
ee:92:0c:d9:ee:43:ce:d4:a0:f5:ff:ac:9c:48:38:aa:7c:c4:
9a:5d:f5:33:4c:3e:b5:0e:dd:b9:c3:0d:18:63:4c:1d:8b:11:
b8:b3:5b:6b:27:76:f6:f7:d3:c0:9e:16:5e:5c:a7:c2:b7:0b:
a9:e1:8f:2c:6b:13:03:1f:d7:bc:6b:05:49:d7:4e:0c:de:c3:
65:4c:85:18:1f:fe:55:5a:b7:d5:bf:22:3e:f6:8b:ad:48:23:
2f:40:47:e6:78:89:b4:4d:db:28:a4:b8:68:f1:86:d6:e4:61:
91:d0:71:31:0e:6b:53:94:b2:b2:c1:b5:76:65:0c:28:2e:a2:
ba:78:36:44:a0:bb:00:e4:e4:ee:01:8f:47:44:9b:84:bc:8f:
7e:c0:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:04:19 2026 by rpki-client