Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier: tF5hKJWdcm21Tf4VNSTcIbXSV2s+uGSPCz3+snuIX9o=
Subject key identifier: EB:74:FA:09:04:48:DC:AA:1D:19:FF:08:1E:0B:B0:EB:1D:21:6C:35
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial: 019CAB6B8EBD9A80CF6C78F86A733DAF9048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number: 0833
Signing time: Sun 01 Mar 2026 22:01:18 +0000
Manifest this update: Sun 01 Mar 2026 22:01:18 +0000
Manifest next update: Mon 02 Mar 2026 22:01:18 +0000
Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: fkPBvfUHqdeETFSvmDvqrnOoJujwy2YHd0c3ior2neA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8e:bd:9a:80:cf:6c:78:f8:6a:73:3d:af:90:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Validity
Not Before: Mar 1 22:01:18 2026 GMT
Not After : Mar 2 22:01:18 2026 GMT
Subject: CN=eb74fa090448dcaa1d19ff081e0bb0eb1d216c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:b0:00:e5:9d:5b:64:a2:37:8e:d8:99:fc:
1a:53:c8:5c:eb:5c:fb:ee:3d:78:fc:0b:cc:fd:2d:
22:4f:6c:c1:3c:7b:d9:0b:a8:18:b1:0b:e1:40:55:
04:64:dc:0a:95:05:d1:62:54:06:2d:00:ab:e7:a8:
d4:08:3c:ce:15:66:bb:7c:42:e1:ee:94:36:4e:a8:
95:17:47:19:6c:45:35:ae:2d:63:ac:87:b4:d0:ab:
f5:63:29:07:ae:66:69:2e:6d:42:c5:fb:6b:a9:d7:
14:25:9a:16:3c:29:fc:c0:43:9b:97:24:b7:b1:3c:
ba:f8:78:ca:bd:08:42:7f:a5:bb:65:74:13:4b:b8:
c4:f4:6a:5c:e4:1a:83:52:56:51:41:37:b4:65:05:
14:1a:34:37:91:bb:a8:9b:6c:8d:30:c5:6a:8d:4a:
b1:39:f7:f3:07:6b:3d:b2:aa:60:41:1b:67:33:17:
ad:62:6a:89:d1:9e:0a:9e:e3:1c:f0:d5:84:f9:2d:
5b:51:ec:38:6b:1a:21:8f:61:50:fc:6a:c6:e6:5c:
36:33:61:6f:b6:c7:cd:c5:66:dd:a0:c6:8e:36:d1:
ee:72:40:17:a8:bf:3a:dc:b5:0c:70:12:51:7a:a4:
f5:78:a9:c8:b7:8e:4d:7c:ad:9d:b6:19:94:b5:01:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:FA:09:04:48:DC:AA:1D:19:FF:08:1E:0B:B0:EB:1D:21:6C:35
X509v3 Authority Key Identifier:
keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ec:eb:0f:27:26:fd:cb:a4:32:70:0b:20:a0:41:09:10:4c:
d4:4f:fd:30:71:90:0a:8a:de:3d:5d:dd:49:92:19:12:1d:70:
13:2e:ac:be:8c:b2:13:c2:96:7b:d2:af:64:9f:3a:4f:16:3e:
c1:b9:e6:79:57:5b:68:c8:62:d1:d1:af:48:36:b1:50:ce:86:
69:df:51:e8:6e:29:65:2c:f7:a2:13:95:cf:a1:43:44:05:29:
f3:72:b4:1d:27:88:2d:ef:d6:41:0b:c8:36:e2:92:28:13:0e:
c3:d3:bc:20:dd:be:84:a6:81:fe:3a:54:21:93:0e:56:52:95:
f9:b4:59:d4:b4:f1:41:bd:59:8c:ae:27:27:88:e0:22:8b:30:
8d:aa:c3:ae:e9:60:34:51:09:9a:5c:61:57:7d:2d:06:87:30:
23:24:ea:ec:d7:1a:24:52:15:bc:08:d8:8d:dd:95:6b:f3:51:
2d:2e:7c:40:9f:b1:b4:fd:c9:81:70:6f:5a:eb:9e:65:a9:55:
c6:c0:92:7c:93:8e:cb:f8:ae:67:47:89:5c:92:be:02:01:0c:
64:df:15:a2:95:c0:65:63:e9:c1:f7:8b:35:6e:9e:65:ef:48:
52:1b:2f:5b:e4:21:11:22:2b:f6:b7:b4:40:ec:f4:35:8b:db:
20:7e:64:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra469moDPbHj4anM9r5BIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDhlNmFiZTJmZTQzMjIyNjUxY2U5OWVmY2QxMmFmNjBl
NjRmNWIwHhcNMjYwMzAxMjIwMTE4WhcNMjYwMzAyMjIwMTE4WjAzMTEwLwYDVQQD
EyhlYjc0ZmEwOTA0NDhkY2FhMWQxOWZmMDgxZTBiYjBlYjFkMjE2YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HSwAOWdW2SiN47YmfwaU8hc61z7
7j14/AvM/S0iT2zBPHvZC6gYsQvhQFUEZNwKlQXRYlQGLQCr56jUCDzOFWa7fELh
7pQ2TqiVF0cZbEU1ri1jrIe00Kv1YykHrmZpLm1CxftrqdcUJZoWPCn8wEOblyS3
sTy6+HjKvQhCf6W7ZXQTS7jE9Gpc5BqDUlZRQTe0ZQUUGjQ3kbuom2yNMMVqjUqx
OffzB2s9sqpgQRtnMxetYmqJ0Z4KnuMc8NWE+S1bUew4axohj2FQ/GrG5lw2M2Fv
tsfNxWbdoMaONtHuckAXqL863LUMcBJReqT1eKnIt45NfK2dthmUtQHsqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOt0+gkESNyqHRn/CB4LsOsdIWw1MB8GA1UdIwQY
MBaAFIsI5qvi/kMiJlHOme/NEq9g5k9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzU2YTQtNDBkZS00MmQ1LWI0NzQt
Y2I2YjgwYzllM2Y4LzEvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82NzU2YTQtNDBkZS00MmQ1LWI0NzQtY2I2YjgwYzllM2Y4
LzEvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+zrDycm
/cukMnALIKBBCRBM1E/9MHGQCorePV3dSZIZEh1wEy6svoyyE8KWe9KvZJ86TxY+
wbnmeVdbaMhi0dGvSDaxUM6Gad9R6G4pZSz3ohOVz6FDRAUp83K0HSeILe/WQQvI
NuKSKBMOw9O8IN2+hKaB/jpUIZMOVlKV+bRZ1LTxQb1ZjK4nJ4jgIoswjarDrulg
NFEJmlxhV30tBocwIyTq7NcaJFIVvAjYjd2Va/NRLS58QJ+xtP3JgXBvWuueZalV
xsCSfJOOy/iuZ0eJXJK+AgEMZN8VopXAZWPpwfeLNW6eZe9IUhsvW+QhESIr9re0
QOz0NYvbIH5kLg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:21 2026 by rpki-client