Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: H1Nv6aaeMuj2eNkxsAoDlx5d6CB4P3NhGNY+cRAM4F4=
Subject key identifier: F2:CE:54:70:BD:DB:06:52:BC:FA:7F:A6:B7:0C:57:2D:9E:A6:FB:99
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019EC1802A7B86FF1DEEF596580D873DB5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 18ED
Signing time: Sat 13 Jun 2026 15:01:02 +0000
Manifest this update: Sat 13 Jun 2026 15:01:02 +0000
Manifest next update: Sun 14 Jun 2026 15:01:02 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: zVDc7DBkX0FDflZwFluy2ElyVjexzjnOSe0fo8buYXw=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:2a:7b:86:ff:1d:ee:f5:96:58:0d:87:3d:b5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jun 13 15:01:02 2026 GMT
Not After : Jun 14 15:01:02 2026 GMT
Subject: CN=f2ce5470bddb0652bcfa7fa6b70c572d9ea6fb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:26:ec:fe:24:aa:32:af:ff:cd:6c:f1:2a:
0d:c3:78:92:57:de:09:58:f6:d6:86:35:59:f1:60:
5a:ca:91:80:05:85:05:0b:bd:42:c3:02:ec:14:f9:
26:59:74:c3:66:fd:01:c3:d8:83:ff:cf:63:04:fc:
d4:db:18:2d:4a:0e:f3:62:63:1e:0a:1b:5b:82:01:
d7:eb:61:1e:f3:f3:49:88:b1:f1:1a:90:c5:68:3f:
f7:64:4c:40:c4:2a:a5:bd:48:69:55:03:7a:99:ca:
dc:c9:57:b1:b4:36:83:77:cd:35:4d:3f:6b:50:ae:
06:c9:7b:59:76:06:51:44:7c:30:7b:0e:45:a8:df:
04:aa:9a:1b:42:fb:7e:43:d8:2a:9f:5f:62:68:c8:
d5:e0:d8:c0:f8:ad:23:25:3c:2a:9a:db:af:b4:22:
6e:ad:93:5f:94:ef:54:e7:0a:c4:03:27:aa:44:20:
ec:ec:bd:8d:fe:16:5c:df:ba:ac:cc:2d:d1:91:ad:
2b:2c:da:f9:a6:e7:44:35:c2:a9:09:67:45:33:57:
d4:e1:5b:22:b2:02:05:91:ca:c0:a1:2d:4b:cc:ba:
29:08:64:b1:02:f4:4d:a0:23:30:2d:d7:78:e3:7c:
61:bf:3f:8f:60:49:c3:45:8d:27:52:8d:eb:7b:46:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:54:70:BD:DB:06:52:BC:FA:7F:A6:B7:0C:57:2D:9E:A6:FB:99
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e4:0d:48:d5:76:fd:e9:5b:8f:70:39:44:a0:2e:00:4c:58:
43:79:18:37:d1:98:ee:e8:ef:a4:e0:28:f6:92:68:3c:9a:89:
69:36:82:40:84:b7:b6:02:79:51:a7:39:88:d1:24:15:1a:db:
0e:94:50:9a:71:92:78:6b:af:01:aa:e0:2d:24:4d:c1:76:31:
45:88:2f:0b:b4:2b:3e:bb:6f:16:6b:80:1f:d0:ab:aa:c4:34:
57:fb:94:4c:25:5d:c7:d3:43:b7:76:3a:d8:16:b7:8d:c1:07:
33:72:9e:f6:92:4b:c4:45:94:0f:9d:47:50:31:a3:e5:a6:e0:
e5:c7:15:54:ab:ec:b4:b9:f2:ee:82:10:0b:c3:03:7c:52:af:
d4:ea:d2:4f:cb:a6:e4:cf:4d:4a:2c:0c:44:e5:8b:08:a7:3a:
ca:81:7f:ee:8e:0d:f2:47:26:02:23:61:87:7f:5a:0b:08:7a:
39:13:5d:55:f7:39:93:2d:32:2e:a0:6b:97:f3:ce:8d:58:ea:
00:17:90:fb:d4:60:2e:d7:06:1d:a3:cb:83:ef:fe:49:56:85:
c7:a0:8f:ce:50:43:fc:d0:e8:e3:59:22:92:da:d6:f0:18:95:
87:1c:e9:cf:a7:64:a2:c1:d4:b4:9a:76:83:63:ae:45:6d:ae:
ff:1a:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:54:42 2026 by rpki-client