Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: 9aia9lim1ZpiJezeq/hsLTgIAtvY4w5P1bl9lOVauNQ=
Subject key identifier: 67:6D:4A:56:BF:20:7E:38:EF:58:BE:7F:BB:A6:D4:EE:16:77:9A:E1
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019CAC7DF07F30204F4791F9E0D034DD9504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: Jh9BURnKXBI9WFrYFa422XPt+YJ59EGHbB2heJl8EV0=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f0:7f:30:20:4f:47:91:f9:e0:d0:34:dd:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=676d4a56bf207e38ef58be7fbba6d4ee16779ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:f7:99:ae:63:93:d9:4a:04:35:92:46:8a:
ba:03:fc:0a:98:0a:42:b6:65:36:b4:cf:dc:25:81:
9d:ce:97:07:07:a7:7e:8e:a6:0e:c0:64:60:ef:66:
9f:db:6d:19:d6:cf:67:dd:10:99:ba:8c:8a:b9:33:
e6:3b:c8:02:48:fd:9c:36:a9:36:06:7b:91:9a:11:
bf:7e:e1:c1:f4:7b:36:df:58:b6:ad:52:00:c1:63:
55:bc:c7:e5:02:93:61:f6:b5:3b:30:54:31:1f:44:
8c:8f:76:24:fd:cd:63:43:50:a7:71:e9:c8:6e:fd:
86:2a:78:65:ee:5a:84:2c:45:74:cb:7b:60:c8:42:
25:f4:ce:61:2a:72:3c:b6:67:c8:af:b6:3d:4a:14:
fb:ad:c0:fa:ee:b6:e4:d5:32:0c:e2:71:ee:52:0b:
83:9d:9c:00:d2:e4:6b:94:64:e6:7a:a4:d1:4a:81:
f8:bb:f2:d1:ca:83:57:4d:d3:84:0d:59:13:d8:a5:
98:c1:71:5c:4d:a3:17:2e:67:52:85:14:8d:c2:9f:
21:d5:cf:a4:64:94:4a:67:7e:32:e3:00:60:d3:97:
fa:09:a9:a9:9b:aa:d9:fa:f0:e0:91:a2:87:64:54:
f7:b6:98:d5:17:51:14:30:02:21:95:41:22:87:c0:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:4A:56:BF:20:7E:38:EF:58:BE:7F:BB:A6:D4:EE:16:77:9A:E1
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:39:06:3f:9f:f8:ff:d3:46:d3:9f:5b:7c:72:a6:3a:8a:b7:
63:b1:26:c1:3b:55:8e:28:04:dd:31:1a:03:07:bd:fd:24:21:
80:c7:eb:b2:e5:61:02:44:30:c5:10:56:57:16:f4:07:cc:81:
5f:3b:5a:74:e1:a9:27:69:e1:4c:a5:86:e9:83:56:3a:b1:9b:
9e:17:02:d0:06:68:ea:ed:af:47:4e:f8:6b:51:4f:22:09:0b:
b7:56:ac:e4:1f:ab:be:0e:0b:32:9b:cf:4d:c9:ce:16:f2:56:
fc:71:06:77:42:6a:7c:6f:e6:e1:6f:41:4f:e6:a4:de:5a:98:
2e:b2:64:fe:9e:c6:4b:70:47:64:fc:ba:6c:a1:8e:11:2d:a2:
7d:e8:5f:1f:27:3c:fd:4b:11:1c:3f:c5:f7:de:cd:d0:f9:7a:
fa:d8:38:b5:67:26:6a:4e:01:cd:c9:61:46:d1:08:6c:3f:eb:
80:ea:4f:7a:d0:f5:94:8b:2a:4e:78:65:f2:39:52:ae:52:1e:
eb:56:66:c4:a9:45:4b:a3:32:a1:99:c0:c9:4f:53:8d:b6:e7:
6a:3b:84:32:e5:d5:00:55:ce:46:fb:7b:dc:d0:12:3a:0d:c0:
f8:d6:45:ed:e4:6e:10:4f:20:a0:73:c0:27:96:9a:20:be:fe:
44:99:89:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysffB/MCBPR5H54NA03ZUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGNkNjk2YWRhODkxMTMwMjU2M2JhNGU0NDJlNmNmYTZh
MjhmZmIwHhcNMjYwMzAyMDMwMTAwWhcNMjYwMzAzMDMwMTAwWjAzMTEwLwYDVQQD
Eyg2NzZkNGE1NmJmMjA3ZTM4ZWY1OGJlN2ZiYmE2ZDRlZTE2Nzc5YWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4f3ma5jk9lKBDWSRoq6A/wKmApC
tmU2tM/cJYGdzpcHB6d+jqYOwGRg72af220Z1s9n3RCZuoyKuTPmO8gCSP2cNqk2
BnuRmhG/fuHB9Hs231i2rVIAwWNVvMflApNh9rU7MFQxH0SMj3Yk/c1jQ1CncenI
bv2GKnhl7lqELEV0y3tgyEIl9M5hKnI8tmfIr7Y9ShT7rcD67rbk1TIM4nHuUguD
nZwA0uRrlGTmeqTRSoH4u/LRyoNXTdOEDVkT2KWYwXFcTaMXLmdShRSNwp8h1c+k
ZJRKZ34y4wBg05f6Campm6rZ+vDgkaKHZFT3tpjVF1EUMAIhlUEih8B3mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdtSla/IH4471i+f7um1O4Wd5rhMB8GA1UdIwQY
MBaAFIsM1patqJETAlY7pORC5s+moo/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDct
YjQwM2QxMGMzZTkxLzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDctYjQwM2QxMGMzZTkx
LzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzkGP5/4
/9NG059bfHKmOoq3Y7EmwTtVjigE3TEaAwe9/SQhgMfrsuVhAkQwxRBWVxb0B8yB
XztadOGpJ2nhTKWG6YNWOrGbnhcC0AZo6u2vR074a1FPIgkLt1as5B+rvg4LMpvP
TcnOFvJW/HEGd0JqfG/m4W9BT+ak3lqYLrJk/p7GS3BHZPy6bKGOES2ifehfHyc8
/UsRHD/F997N0Pl6+tg4tWcmak4BzclhRtEIbD/rgOpPetD1lIsqTnhl8jlSrlIe
61ZmxKlFS6MyoZnAyU9TjbbnajuEMuXVAFXORvt73NASOg3A+NZF7eRuEE8goHPA
J5aaIL7+RJmJuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:52 2026 by rpki-client