Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: N3Tn/nUGLNtfE5OK2mxN80xNnhxqIiq6eQy9abw2tow=
Subject key identifier: AB:6E:D5:26:33:42:F0:BC:9D:0B:01:0C:B2:33:C5:86:9C:3F:8E:4A
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019CACB4C669D1DA2188AB6AC6FF03234C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 04:00:54 +0000
Manifest this update: Mon 02 Mar 2026 04:00:54 +0000
Manifest next update: Tue 03 Mar 2026 04:00:54 +0000
Files and hashes: 1: 1AAfNkOtoDPkV923JU6uKxUBzig.roa (hash: m+bM/ZO45nJYI69NyHTcglKt6eRpdsvdb8DCz1bIBG0=)
2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: 7i4ELaKTaQOX8ayQmrppm+tFxcz7JjrXY1FPLruHPkA=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c6:69:d1:da:21:88:ab:6a:c6:ff:03:23:4c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Mar 2 04:00:54 2026 GMT
Not After : Mar 3 04:00:54 2026 GMT
Subject: CN=ab6ed5263342f0bc9d0b010cb233c5869c3f8e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:fe:3b:4d:78:99:f2:9b:c8:e6:27:2b:85:
b2:e1:37:26:cd:2a:ad:5f:1f:37:ed:61:0a:84:1d:
ed:ba:5b:ee:2d:9e:eb:9b:34:7c:76:b1:3b:58:3b:
de:1f:eb:74:d9:56:bc:ae:1e:7b:79:15:30:b7:91:
7e:85:a6:9d:16:01:0f:79:3b:e4:83:eb:da:18:e2:
0f:05:30:4e:61:10:02:09:7b:0e:50:80:99:64:92:
27:ef:fc:b9:e3:6d:ba:be:41:f6:19:7a:5a:42:14:
db:cd:a7:53:32:aa:22:ed:15:9c:3d:39:9b:74:ac:
6f:85:52:e7:d5:73:5a:a8:2e:8c:8f:ff:f5:5c:6e:
83:cc:f7:f1:5a:7f:c9:e7:5d:34:de:e2:eb:94:d2:
64:be:66:a2:55:63:fc:ac:20:85:90:cd:91:ac:b6:
82:8c:10:68:f3:2e:ca:f9:92:53:bb:01:b7:ef:a0:
6f:1e:9d:5d:fa:ab:64:7e:2a:5f:aa:7e:09:4d:0a:
65:f0:8a:5c:41:58:f6:11:46:e9:28:d7:05:af:4a:
af:74:60:e3:cb:7f:f5:2d:03:8b:53:16:66:ff:3b:
6d:85:db:5c:32:32:be:25:f9:6e:1c:e9:b1:5b:db:
84:21:f8:00:ae:c9:0d:06:3b:44:2b:22:ea:08:ae:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6E:D5:26:33:42:F0:BC:9D:0B:01:0C:B2:33:C5:86:9C:3F:8E:4A
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d1:2f:17:45:e7:fc:76:7f:8a:96:77:4b:5c:4d:13:79:7d:
57:fd:69:cf:21:93:d5:b7:5d:9a:8c:5d:aa:7c:83:e3:f3:ab:
d0:fd:45:90:58:43:8a:04:28:2e:b0:52:6c:ac:e7:2a:3d:f8:
d1:0f:8b:d3:3c:96:a9:fd:d4:b3:4c:82:7e:83:9d:7e:f7:c5:
52:4e:23:83:d8:a7:b8:23:23:35:54:4e:d5:55:39:e7:37:2e:
58:e0:a9:94:a4:f0:35:c3:c1:e5:4d:17:fa:d5:b4:f7:08:da:
49:76:c9:63:50:24:02:be:ef:ac:33:30:d9:8c:24:d5:a0:ba:
f6:f3:97:de:6d:da:de:e2:a3:b4:2b:91:c5:f1:ec:ad:21:5b:
e5:5a:c9:20:36:c5:35:0a:11:3f:54:26:66:8b:4e:68:c5:8c:
21:b9:76:59:97:03:b2:ec:2f:ba:12:93:3d:bf:f5:17:5e:ad:
95:d8:7e:cc:fc:f7:6a:4c:22:77:85:40:34:b8:e1:27:90:29:
4a:18:e9:3f:bd:a4:ba:bc:9a:bf:f4:3d:49:86:3e:ca:27:11:
9a:09:0f:f4:89:bd:cc:fd:e3:fc:d4:7f:29:bc:7e:e5:58:cb:
bf:30:3b:db:13:de:f5:a6:b3:5c:8d:ee:8b:10:68:ff:1f:1e:
fd:70:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:38 2026 by rpki-client