Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: JmJLSyvcyVGNUJ/JRy69eVPz29mAVaSKH7POiajLoN4=
Subject key identifier: 3F:FB:EC:DC:F6:ED:07:0A:C3:F2:8E:4A:BF:96:8B:B6:23:38:36:E1
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 019ED34FC4D35A1FCDBD7956D87E71903E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: 8C
Signing time: Wed 17 Jun 2026 02:01:20 +0000
Manifest this update: Wed 17 Jun 2026 02:01:20 +0000
Manifest next update: Thu 18 Jun 2026 02:01:20 +0000
Files and hashes: 1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: zJvggjHBpDYQT9AhQlCUoa32UckKEHLOe7rWNjOv+fU=)
3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:c4:d3:5a:1f:cd:bd:79:56:d8:7e:71:90:3e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Jun 17 02:01:20 2026 GMT
Not After : Jun 18 02:01:20 2026 GMT
Subject: CN=3ffbecdcf6ed070ac3f28e4abf968bb6233836e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:2e:fb:bf:ba:f9:cd:b7:55:09:c3:98:3b:
3e:a0:d9:b1:07:f4:c5:16:f1:3f:54:46:29:7e:f3:
5d:a0:45:c7:70:98:0d:23:6e:b9:2e:7c:60:29:04:
a4:0c:bd:8c:19:94:a9:a7:f4:65:fc:ac:49:0c:45:
99:b6:94:d2:0a:00:9c:3a:b1:be:40:76:2b:9c:2a:
c8:95:1d:2a:04:cb:5d:dd:ed:c4:c9:a7:ed:95:d7:
b1:4b:98:b8:33:7c:cb:e1:9c:c3:3f:5e:6d:ed:19:
5c:35:75:8a:f0:54:b5:dc:eb:b6:98:b7:f8:c8:d9:
8c:02:18:b1:ff:01:69:ec:bf:04:73:c9:fb:76:a0:
52:9e:a5:e3:2e:2f:7f:6f:be:4f:4b:7d:c3:ca:c4:
36:b1:58:3e:c2:e2:c2:1b:fa:e9:8e:8d:a0:7b:cc:
7a:d9:17:9f:1c:f2:90:64:f4:87:c8:1e:ba:12:f7:
7c:69:57:c9:12:3c:cb:e8:b2:3a:c0:3f:81:10:cd:
bd:b1:96:53:3b:4b:3c:05:04:9d:2a:79:30:27:a6:
f6:8b:a1:77:27:ca:8e:77:d3:c6:18:27:fe:62:82:
ab:c2:89:8a:4f:e1:21:63:c4:17:fc:9e:1e:57:d0:
81:fa:cd:64:41:11:4c:8f:a9:70:63:0c:e3:72:df:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:EC:DC:F6:ED:07:0A:C3:F2:8E:4A:BF:96:8B:B6:23:38:36:E1
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6e:5c:67:17:13:90:b7:7f:9e:04:19:b1:e8:5c:44:c2:86:
8f:9d:4c:53:c5:8f:10:50:71:54:fd:89:db:ff:23:ad:db:0d:
ba:37:44:78:cf:97:a0:bb:77:bc:5b:a1:ce:b8:1f:61:e1:c1:
41:2b:fd:1b:4d:e9:04:8b:a0:7e:d4:87:a6:28:c6:8a:c8:a1:
26:36:9b:18:8d:c5:a1:eb:4f:85:96:29:90:5f:33:3c:6a:43:
2b:6b:10:bb:3d:5d:e0:f7:ed:c1:d8:dd:45:d8:94:02:67:21:
62:e9:38:11:59:f4:73:27:ac:e9:d7:05:4f:9d:b9:9d:55:94:
dd:f9:2d:6d:aa:b2:ce:99:c8:35:86:5f:e0:aa:0c:57:e1:38:
ed:a8:9d:58:2b:75:57:77:5e:28:78:3d:98:e1:f7:c1:10:69:
41:b8:a3:86:b1:9c:17:8e:65:75:79:54:e6:df:98:ff:17:4a:
14:0e:4b:f2:2f:81:33:10:90:04:5c:99:4c:ae:78:0e:25:c3:
8e:3e:e9:94:5f:65:93:b1:ee:68:39:5c:fa:7f:57:d0:99:99:
c2:63:8f:18:fe:3b:4b:94:7c:b6:af:bb:89:fa:cd:36:1d:bb:
d3:49:7f:c7:b6:6a:93:8a:3d:94:cb:53:1b:46:dd:a7:58:5c:
09:1e:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:41:24 2026 by rpki-client