Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File: iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier: HRrx5SOL12JY2J6Vvhpi51gDwpkuIfWJQAHc5cEVsx0=
Subject key identifier: CD:00:D7:43:6D:A7:73:A9:9D:B9:05:54:37:D6:3F:EE:3C:4B:1B:5E
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial: 01A0CB224E93628CBC1CE54178E560CB4900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 22:00:18 +0000
Manifest this update: Tue 22 Sep 2026 22:00:18 +0000
Manifest next update: Wed 23 Sep 2026 22:00:18 +0000
Files and hashes: 1: 1PQLqhoScjfBFsnVHNm0k3bCNFk.roa (hash: Vk0i8JggRVRyN9gNhJOmPHfRFdxGWfDcvajCmQ4/kDs=)
2: TWbCTwDnys208grtWi4L9d1lq6s.roa (hash: +ftR3wfvVv49VPzjWv+X3HJTgQfHYyU1PAP5N6+M9DY=)
3: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: dde1pxs0X9JWY16GeHl922ctU7uHN5G6PXMnjVJOIQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:4e:93:62:8c:bc:1c:e5:41:78:e5:60:cb:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Validity
Not Before: Sep 22 22:00:18 2026 GMT
Not After : Sep 23 22:00:18 2026 GMT
Subject: CN=cd00d7436da773a99db9055437d63fee3c4b1b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:0f:87:b7:30:12:61:26:ef:ab:56:38:e4:
f8:fc:c3:df:a4:6d:c3:6f:21:d9:69:bd:43:a4:65:
cb:51:67:f1:46:06:d6:37:17:87:e6:15:3f:8f:6a:
b2:88:9d:85:f5:50:c4:08:78:56:69:ac:d3:58:63:
22:82:1e:79:23:0c:1a:c3:6c:ce:15:7f:b8:ee:be:
01:fa:1f:02:04:0c:67:7e:af:9f:42:ef:26:68:1f:
6b:02:4a:9d:f8:59:44:9a:8d:40:a7:2d:06:71:b8:
e0:c8:30:54:e1:3d:37:9b:3a:10:37:a6:64:75:bd:
65:08:33:ad:f6:d4:5e:86:bc:18:57:c0:27:54:34:
c1:a0:b8:65:e7:eb:9a:28:66:2c:0f:8a:3d:af:56:
85:5c:23:f0:35:97:a7:f6:26:31:5f:1a:e7:4b:0a:
29:22:a7:36:6c:e2:b5:5f:9f:e1:79:da:98:c7:17:
d5:cc:b2:36:df:f4:9b:f4:9a:38:3f:e8:aa:d3:fd:
af:11:54:79:75:3f:13:4a:63:ff:0a:df:2a:1f:be:
7b:f7:b4:1c:89:6f:9e:e1:d6:05:de:7e:d6:59:16:
85:89:f4:72:7e:0c:e2:03:3c:d1:45:f2:98:40:17:
29:31:59:8d:8a:fe:36:e3:3d:8d:cf:03:09:be:0d:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:D7:43:6D:A7:73:A9:9D:B9:05:54:37:D6:3F:EE:3C:4B:1B:5E
X509v3 Authority Key Identifier:
keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:29:9b:1b:1c:6a:b9:78:4e:4f:16:f9:08:41:a1:35:26:69:
86:f8:dd:e9:2e:b0:00:5b:2a:50:47:4e:70:35:fe:d4:be:6d:
dd:77:d4:1a:36:b3:a9:2f:8a:c7:f6:65:ac:1d:23:d5:b9:0e:
2c:43:d0:43:5a:18:71:e6:19:5e:7e:99:b6:25:a9:6d:27:1a:
53:79:7a:2f:f8:fc:05:61:e7:7f:b2:93:c9:9e:18:c4:cf:2c:
5d:40:46:ee:48:3a:63:a9:5b:86:64:76:61:9a:3d:1d:81:bc:
6b:aa:77:53:5f:8f:48:0e:12:33:09:f3:45:08:c2:0d:e4:9b:
1b:34:95:96:1b:14:04:5b:08:28:6b:79:a4:44:b7:4e:71:82:
60:26:ca:b3:9f:15:54:26:2c:10:ac:d4:74:e7:00:02:15:f1:
f4:fc:50:5c:fa:32:7e:15:82:40:66:f0:03:f1:13:9d:a5:3f:
f2:8b:9a:21:ce:ed:a3:7d:aa:4f:ca:88:ff:52:86:35:5b:76:
5f:95:77:5b:20:1f:50:ed:10:39:a4:e0:09:04:3e:6f:c9:f3:
0e:5e:b9:bb:a6:fe:c4:53:cc:a3:0c:4f:bf:7b:9e:ae:5d:80:
8a:4a:60:64:31:0c:a5:7d:ca:4c:92:44:df:2a:12:da:91:51:
f3:fd:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:26:20 2026 by rpki-client