Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: AyMkIG6WddvpRS+pPbLmQ3s9w90HZ4BtbT1La8a9KBg=
Subject key identifier: 9D:48:73:33:81:06:4D:5C:32:E2:18:29:45:01:56:84:7F:28:00:0D
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019D9C2CA08B2DCF42E1BF68DE3F87A032AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 16:01:03 +0000
Manifest this update: Fri 17 Apr 2026 16:01:03 +0000
Manifest next update: Sat 18 Apr 2026 16:01:03 +0000
Files and hashes: 1: 1AAfNkOtoDPkV923JU6uKxUBzig.roa (hash: m+bM/ZO45nJYI69NyHTcglKt6eRpdsvdb8DCz1bIBG0=)
2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: NjS2jcMj1EkE2crnaBI+gx2bwHTycLFVaoaHxNXLa2Q=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:a0:8b:2d:cf:42:e1:bf:68:de:3f:87:a0:32:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Apr 17 16:01:03 2026 GMT
Not After : Apr 18 16:01:03 2026 GMT
Subject: CN=9d48733381064d5c32e21829450156847f28000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:2a:4d:57:68:b1:6e:0d:da:e1:61:a2:58:
96:e9:c3:b8:3e:df:fa:ce:63:0b:86:63:09:55:11:
69:04:67:b1:bd:dd:d9:62:3c:12:eb:1a:40:eb:e0:
e5:1a:22:f4:54:e7:65:c6:e6:a1:23:0e:62:9a:23:
6a:42:d8:c9:8b:b8:7d:80:fe:f2:3b:65:f7:00:44:
a4:73:0d:6e:09:9f:a9:62:14:ef:ed:ac:75:9e:55:
6c:cb:db:61:67:23:3d:54:21:90:7a:fe:b9:4d:d4:
30:dd:4f:80:4e:5e:a9:be:81:06:47:63:8a:4c:00:
9b:87:e8:63:6b:2f:e7:5f:56:2f:91:b2:dc:42:0d:
08:08:ea:e7:f8:84:86:a4:1a:ea:b4:40:14:d2:d6:
6a:ee:76:37:d6:28:56:45:d3:e4:56:53:62:7b:07:
36:ce:cd:90:1a:72:97:3f:46:9d:22:bd:da:bf:30:
15:39:ad:98:ed:82:b2:63:ae:b4:c0:c5:0d:b1:0a:
75:57:48:a3:5c:f4:14:44:f5:ea:06:3c:ad:32:09:
7d:27:69:3a:f9:87:52:fc:06:90:76:48:ac:d9:04:
ac:d5:5f:8f:74:28:17:9e:1b:1d:3e:40:d3:b2:89:
84:7c:27:df:34:7c:d0:de:76:cf:fc:83:eb:18:ff:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:73:33:81:06:4D:5C:32:E2:18:29:45:01:56:84:7F:28:00:0D
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:9b:19:d6:a0:9e:5d:5d:d1:c9:b3:d3:b1:bf:2d:80:eb:
09:af:86:00:4e:87:e2:85:b1:66:84:74:aa:cc:7e:c4:77:bf:
d8:b3:e9:bf:ed:93:b2:7d:3c:da:c7:6a:df:b7:58:0d:aa:9b:
be:2a:de:5f:c0:75:e3:0c:66:70:79:59:a9:47:e4:df:83:dc:
44:f0:a2:ef:45:f1:2a:65:ea:c8:55:fa:43:20:66:09:a2:b8:
0f:df:4e:98:b5:b7:2c:9d:46:9a:78:2b:c3:6a:fd:c3:d4:2a:
54:4c:fb:7e:93:18:4e:f7:9c:0c:b3:b8:ea:80:bf:70:13:4c:
86:df:fc:01:e1:17:b4:97:3f:00:15:c4:1f:12:81:90:7d:11:
2c:2b:55:7c:aa:ca:c6:1a:31:f8:f6:ff:b3:88:e7:d8:82:97:
b1:ff:a9:0b:86:ca:13:05:3d:8d:f6:19:82:ba:90:fe:c1:01:
bc:62:2c:81:ef:b5:e7:dc:4a:04:39:86:06:4a:c5:3c:78:d2:
70:0c:47:0e:11:da:1f:c6:da:18:a9:ac:a5:d4:7c:17:84:35:
09:80:0a:d9:8c:c9:16:07:44:88:4d:af:b4:70:86:37:38:68:
90:75:d6:53:d3:60:a6:45:3f:f6:c2:67:5f:33:5c:4b:42:9e:
c5:0e:25:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLKCLLc9C4b9o3j+HoDKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy
M2Q1YjgwHhcNMjYwNDE3MTYwMTAzWhcNMjYwNDE4MTYwMTAzWjAzMTEwLwYDVQQD
Eyg5ZDQ4NzMzMzgxMDY0ZDVjMzJlMjE4Mjk0NTAxNTY4NDdmMjgwMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhMqTVdosW4N2uFholiW6cO4Pt/6
zmMLhmMJVRFpBGexvd3ZYjwS6xpA6+DlGiL0VOdlxuahIw5imiNqQtjJi7h9gP7y
O2X3AESkcw1uCZ+pYhTv7ax1nlVsy9thZyM9VCGQev65TdQw3U+ATl6pvoEGR2OK
TACbh+hjay/nX1YvkbLcQg0ICOrn+ISGpBrqtEAU0tZq7nY31ihWRdPkVlNiewc2
zs2QGnKXP0adIr3avzAVOa2Y7YKyY660wMUNsQp1V0ijXPQURPXqBjytMgl9J2k6
+YdS/AaQdkis2QSs1V+PdCgXnhsdPkDTsomEfCffNHzQ3nbP/IPrGP8ZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1IczOBBk1cMuIYKUUBVoR/KAANMB8GA1UdIwQY
MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt
NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz
LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpSbGdag
nl1d0cmz07G/LYDrCa+GAE6H4oWxZoR0qsx+xHe/2LPpv+2Tsn082sdq37dYDaqb
vireX8B14wxmcHlZqUfk34PcRPCi70XxKmXqyFX6QyBmCaK4D99OmLW3LJ1Gmngr
w2r9w9QqVEz7fpMYTvecDLO46oC/cBNMht/8AeEXtJc/ABXEHxKBkH0RLCtVfKrK
xhox+Pb/s4jn2IKXsf+pC4bKEwU9jfYZgrqQ/sEBvGIsge+159xKBDmGBkrFPHjS
cAxHDhHaH8baGKmspdR8F4Q1CYAK2YzJFgdEiE2vtHCGNzhokHXWU9NgpkU/9sJn
XzNcS0KexQ4lIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:24 2026 by rpki-client