Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
File: iW9K-SA2_lCiD0oVEunCyOztzss.mft (raw, json)
Hash identifier: DSgxUyAASjf6vlT7eP9gZL/D+c1j+I3h3C80A0tnlVw=
Subject key identifier: 77:09:49:EF:66:DB:F5:96:C5:63:E1:7E:5B:EC:26:51:F8:BF:A5:BC
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Certificate issuer: /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial: 01A0C39F94FA980ADBCC0C82E82329EA8503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
Manifest number: 018D
Signing time: Mon 21 Sep 2026 11:00:10 +0000
Manifest this update: Mon 21 Sep 2026 11:00:10 +0000
Manifest next update: Tue 22 Sep 2026 11:00:10 +0000
Files and hashes: 1: T3jfzi53S8xZPceztrFRoHBB2Gs.asa (hash: iIwUoh+fafGMzrESQvIZ8Y8e7wQVqF2lRs7FIizOvSw=)
2: iW9K-SA2_lCiD0oVEunCyOztzss.crl (hash: sDnzwkibptvWyD5N4pVi061G97aBtkJCgolTFJRT1uA=)
3: kdaDaZmYqGMzqUUnLPSsLH8GrPc.roa (hash: B9RQvP9FD3l+CItncVjMhVfvLB+HWK7qmh+l2cN8QSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:94:fa:98:0a:db:cc:0c:82:e8:23:29:ea:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Validity
Not Before: Sep 21 11:00:10 2026 GMT
Not After : Sep 22 11:00:10 2026 GMT
Subject: CN=770949ef66dbf596c563e17e5bec2651f8bfa5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:9f:50:39:44:ad:ac:52:2c:75:b4:3d:17:
a3:c2:c3:d7:45:d2:5d:b4:eb:3b:66:57:1d:ea:65:
8d:70:ed:9d:b3:11:df:b2:37:e1:89:61:34:22:a1:
6c:c9:54:4b:e6:4e:50:19:38:91:56:82:33:80:3d:
49:21:67:47:68:18:5e:0b:de:85:0c:f8:5d:1b:c9:
68:df:35:d2:e3:a2:b7:87:de:fd:eb:3d:6c:76:19:
59:4a:cf:40:7a:3d:a0:28:6a:9d:43:05:bc:42:46:
85:0d:b7:f5:26:7f:62:6e:09:3f:00:c3:0a:72:f9:
17:d8:72:95:e9:3c:02:18:27:c3:80:61:15:9f:f7:
29:ab:ab:29:75:1d:8a:48:40:36:3c:f6:a7:4d:07:
e2:4d:12:34:fe:53:ee:70:1b:a1:12:d6:6c:ea:67:
83:c9:2e:44:cf:07:03:61:9a:90:33:fe:10:46:4b:
b8:9f:ed:89:bb:2f:20:d2:3e:b8:97:39:1f:72:01:
54:5e:15:ed:de:ed:92:78:c7:0d:75:a8:61:f5:19:
0a:53:ec:90:68:89:20:5c:90:e7:0f:df:6a:a8:2f:
ca:27:21:a2:e5:92:26:71:fe:ed:d7:ea:10:aa:cb:
44:b2:ba:9c:59:90:e6:45:ee:ce:3b:58:d3:02:b3:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:09:49:EF:66:DB:F5:96:C5:63:E1:7E:5B:EC:26:51:F8:BF:A5:BC
X509v3 Authority Key Identifier:
keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e5:dc:40:43:b0:0d:8c:6b:12:cd:03:c5:e4:56:66:33:9e:
0c:4c:55:64:71:60:71:af:65:24:dc:28:8f:dd:87:c0:bc:53:
86:6d:65:f1:80:c7:b5:c0:51:00:9a:bb:b3:09:f1:d2:7f:c7:
35:3f:47:7d:5e:a3:4e:e8:e5:a5:fe:5e:12:e2:f2:e3:5f:61:
82:6b:6c:b9:e0:88:8c:7d:3f:b7:a9:96:53:da:33:a2:16:2a:
9a:41:61:08:ce:1b:3e:84:d8:a8:5a:63:eb:57:c0:a2:e3:2c:
a4:b1:9d:1b:8e:8c:8e:5b:b4:86:1d:94:35:1a:2c:02:e1:3c:
06:95:07:61:69:00:2c:cb:f6:a3:c5:a8:9b:28:77:21:54:d5:
cb:94:d2:63:52:1e:14:e7:1c:c7:27:65:d4:10:01:0d:2f:c5:
06:3c:17:2a:b6:2e:8f:ab:59:bd:41:9f:2e:e3:4f:df:af:5b:
c0:07:50:7b:8d:62:49:a6:80:af:76:1e:6e:1b:8e:11:e7:ed:
3f:2e:b2:8b:0f:1d:a8:83:6b:0a:7f:cd:34:bb:b1:2e:b9:59:
a2:fe:c5:18:2e:0f:be:99:09:ff:8f:b6:0b:62:7e:bd:ef:ec:
1d:36:53:b4:ac:78:50:5a:96:62:15:c6:21:2f:1e:e0:0b:e0:
ea:4b:fe:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:55:01 2026 by rpki-client