Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: y+X5DWNC0yeVVJ+T2AGyDOAgI+1DeYHlDJnmg0wZw7c=
Subject key identifier: AF:A2:CA:7C:40:32:7C:BC:8E:7E:D2:0F:68:AD:8E:28:9A:F3:D4:96
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 01A0C1B133E65D33851E5697D4034EAAB6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: 018C
Signing time: Mon 21 Sep 2026 02:00:10 +0000
Manifest this update: Mon 21 Sep 2026 02:00:10 +0000
Manifest next update: Tue 22 Sep 2026 02:00:10 +0000
Files and hashes: 1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: t+ZcruffMi7qRIXR6d88UuSFcZ71lnSjNoWMhEq2/Ds=)
3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:33:e6:5d:33:85:1e:56:97:d4:03:4e:aa:b6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Sep 21 02:00:10 2026 GMT
Not After : Sep 22 02:00:10 2026 GMT
Subject: CN=afa2ca7c40327cbc8e7ed20f68ad8e289af3d496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4a:57:d9:52:05:95:2c:52:88:a0:02:65:c6:
c8:b4:a4:c1:5c:10:cb:82:fc:b1:b1:f0:3c:c6:47:
a0:a3:94:09:91:f1:cb:20:7e:17:7f:00:dc:1c:b8:
12:83:64:26:8c:4b:3a:b6:dd:18:48:ed:de:90:24:
42:6d:8d:f9:7c:30:dd:94:66:8a:c8:aa:1b:bd:2b:
b7:2d:19:bf:76:7f:43:e7:39:a8:8e:92:f6:d2:94:
ca:8d:1b:99:56:8c:e7:86:47:45:6e:be:69:4a:6d:
4e:89:e0:0b:b5:a5:bf:1f:3a:96:59:c1:71:1e:4d:
ae:e2:b8:1d:3c:c9:28:ab:7b:0c:16:cc:fd:4e:21:
0c:21:64:27:b8:25:05:03:2f:58:a8:ce:84:91:16:
d6:2e:87:4e:9b:8f:43:8a:0b:c1:68:18:8a:1f:6f:
b8:f0:03:7a:37:a7:ba:55:87:5e:6f:7e:95:b0:eb:
94:81:b6:44:f9:0b:77:23:f1:13:f9:e3:22:47:bd:
bb:11:49:13:93:d2:59:9a:31:05:f8:bc:e0:17:a7:
d4:86:ee:c6:c7:3a:bc:86:13:39:aa:92:91:26:5a:
45:6d:34:40:b5:4d:68:49:32:fb:2b:bf:8d:96:03:
ec:ea:80:81:4a:b9:e3:7a:a8:6e:3e:32:31:32:b4:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:CA:7C:40:32:7C:BC:8E:7E:D2:0F:68:AD:8E:28:9A:F3:D4:96
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:f3:04:4a:23:ff:66:b7:8d:8e:d7:4a:52:75:f9:f5:63:
e2:e5:28:0e:07:66:cd:1a:88:83:f1:a6:6f:e5:cf:99:fd:40:
50:58:24:2d:eb:e7:b4:f1:ad:de:55:3c:b6:5c:59:b1:a8:7d:
ef:40:ad:b3:8d:02:39:c8:4c:db:b1:9a:37:af:8e:89:1e:45:
2a:09:72:0f:5b:55:1d:9e:40:63:3f:33:c8:85:8b:f5:39:4d:
62:42:da:69:84:24:24:7f:4f:af:e3:6e:13:c2:5c:c4:b8:b2:
7e:ad:31:8b:10:ce:77:38:67:36:6e:d7:76:ee:31:1f:a8:44:
c2:d0:f2:f7:92:1a:96:5c:a7:e5:5d:6c:9c:d2:b9:3d:5a:24:
52:75:c8:9b:fb:0e:66:94:93:e2:12:7d:3c:03:99:30:ac:05:
68:2d:d1:fe:53:20:49:db:ad:b8:55:f2:25:76:45:9f:39:65:
ea:6b:5f:c6:7e:16:6e:dc:30:92:94:1c:06:0d:87:16:f2:d8:
d5:98:2a:a9:e8:cb:dc:24:35:b9:53:2f:be:3d:45:9c:97:db:
55:25:7e:11:20:35:a1:6d:78:ad:f1:57:4a:71:97:52:6c:3b:
0a:7d:7a:80:94:c6:c3:eb:47:60:d5:af:d5:d9:69:b7:13:82:
35:4c:ad:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsTPmXTOFHlaX1ANOqrbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmY0YWY5MjAzNmZlNTBhMjBmNGExNTEyZTljMmM4ZWNl
ZGNlY2IwHhcNMjYwOTIxMDIwMDEwWhcNMjYwOTIyMDIwMDEwWjAzMTEwLwYDVQQD
EyhhZmEyY2E3YzQwMzI3Y2JjOGU3ZWQyMGY2OGFkOGUyODlhZjNkNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80pX2VIFlSxSiKACZcbItKTBXBDL
gvyxsfA8xkego5QJkfHLIH4XfwDcHLgSg2QmjEs6tt0YSO3ekCRCbY35fDDdlGaK
yKobvSu3LRm/dn9D5zmojpL20pTKjRuZVoznhkdFbr5pSm1OieALtaW/HzqWWcFx
Hk2u4rgdPMkoq3sMFsz9TiEMIWQnuCUFAy9YqM6EkRbWLodOm49DigvBaBiKH2+4
8AN6N6e6VYdeb36VsOuUgbZE+Qt3I/ET+eMiR727EUkTk9JZmjEF+LzgF6fUhu7G
xzq8hhM5qpKRJlpFbTRAtU1oSTL7K7+NlgPs6oCBSrnjeqhuPjIxMrSqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+iynxAMny8jn7SD2itjiia89SWMB8GA1UdIwQY
MBaAFIlvSvkgNv5Qog9KFRLpwsjs7c7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVc5Sy1TQTJfbENpRDBvVkV1bkN5T3p0enNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zZWVhNWUtMzcxMy00MzEwLTk2MmIt
OGYyZjAxZjdhOWJhLzEvaVc5Sy1TQTJfbENpRDBvVkV1bkN5T3p0enNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zZWVhNWUtMzcxMy00MzEwLTk2MmItOGYyZjAxZjdhOWJh
LzEvaVc5Sy1TQTJfbENpRDBvVkV1bkN5T3p0enNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxzzBEoj
/2a3jY7XSlJ1+fVj4uUoDgdmzRqIg/Gmb+XPmf1AUFgkLevntPGt3lU8tlxZsah9
70Cts40COchM27GaN6+OiR5FKglyD1tVHZ5AYz8zyIWL9TlNYkLaaYQkJH9Pr+Nu
E8JcxLiyfq0xixDOdzhnNm7Xdu4xH6hEwtDy95Iallyn5V1snNK5PVokUnXIm/sO
ZpST4hJ9PAOZMKwFaC3R/lMgSdutuFXyJXZFnzll6mtfxn4WbtwwkpQcBg2HFvLY
1ZgqqejL3CQ1uVMvvj1FnJfbVSV+ESA1oW14rfFXSnGXUmw7Cn16gJTGw+tHYNWv
1dlptxOCNUytDw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:59:07 2026 by rpki-client