Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: w3oswn1m9eZWndSKsLgq8O0hVbzDmWA6VoKeCvgRvaA=
Subject key identifier: 65:62:1E:67:AD:42:B6:68:1E:1C:69:12:59:9A:DD:17:C9:FD:6A:ED
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019D9BF57A46362DE230946139431956E087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 15:00:49 +0000
Manifest this update: Fri 17 Apr 2026 15:00:49 +0000
Manifest next update: Sat 18 Apr 2026 15:00:49 +0000
Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=)
2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: ENkJ4B0Va2nazPO8UftunGI8mJG35A7tyo/8lL7R4p8=)
3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:7a:46:36:2d:e2:30:94:61:39:43:19:56:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Apr 17 15:00:49 2026 GMT
Not After : Apr 18 15:00:49 2026 GMT
Subject: CN=65621e67ad42b6681e1c6912599add17c9fd6aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:12:de:3e:a5:4a:16:2c:cf:e4:c3:83:7b:
aa:a2:21:09:47:25:ca:c3:58:7b:c0:e9:50:2c:fd:
8a:01:62:29:6d:f1:fb:f9:7f:89:a0:a4:8d:ba:20:
0b:93:41:38:a4:d3:9a:9a:cd:3c:2b:66:62:41:d3:
3a:e6:a9:25:cb:6d:c2:be:03:1e:7e:80:31:55:11:
b3:2d:82:93:0d:db:2d:b8:8a:ac:7a:6c:ec:dd:29:
ff:5e:3c:5b:3b:51:38:a8:41:df:0e:be:92:46:b1:
96:23:6c:88:1e:9b:07:70:b2:ad:b7:a8:9d:93:c6:
46:8d:76:9e:82:51:b1:e9:7a:2e:0a:87:5d:e4:05:
d0:27:c6:87:ce:73:90:db:4d:d7:7a:df:9b:91:29:
90:f9:e5:d3:f4:58:c9:a0:a5:56:39:6c:ad:c0:e3:
c0:52:5b:33:e1:3f:7f:dd:3d:ed:10:97:41:3f:9a:
c0:9e:58:b7:5e:fd:ee:21:ee:5d:78:61:a8:d7:9e:
53:34:16:de:9e:9b:6e:00:fc:6b:88:55:d1:41:29:
41:2d:d8:8a:52:6e:20:aa:b6:a1:ae:30:5f:7d:d0:
7e:70:0e:73:46:95:d5:39:a7:02:cc:ad:af:25:7f:
f2:34:c7:2b:e4:73:a6:ae:70:7d:e5:5a:1f:46:d6:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:1E:67:AD:42:B6:68:1E:1C:69:12:59:9A:DD:17:C9:FD:6A:ED
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:03:55:c4:31:ee:b9:6d:d7:4f:b2:b0:ea:2f:9d:9e:2d:43:
99:f6:55:8a:78:fb:e9:bb:b3:d2:d7:42:4b:5c:cc:e5:8a:f0:
dd:00:f3:51:cb:ad:05:15:89:fc:4b:d8:59:13:8b:ad:32:e0:
c9:2c:82:82:04:ec:51:f2:7e:ab:dd:20:ea:4a:3b:93:72:22:
3b:b0:e3:af:ce:bd:21:c2:e5:10:3a:bb:22:ed:f4:f2:ae:07:
e1:0e:f8:dd:91:14:72:1a:80:cd:b4:3f:8b:33:1e:7b:42:82:
07:5b:81:e5:96:49:38:e2:7a:95:d0:c6:ae:eb:f6:f1:05:e7:
a3:ea:e2:6d:2c:3b:e0:8d:57:5e:da:b1:a3:89:c7:ed:a3:78:
a1:9f:fb:28:a7:bd:4a:27:d2:9c:c7:e3:9b:c6:09:a9:13:20:
b4:67:2d:d4:ed:c4:eb:db:28:2d:91:c0:67:f9:34:7c:3c:55:
04:77:d4:81:d9:5a:d4:7f:44:f2:67:6c:9c:f2:23:9d:68:09:
6e:68:c0:05:0e:80:3b:49:44:2f:08:fd:d8:ab:f4:53:27:2d:
ae:cf:03:94:db:f9:ea:c6:2b:42:ea:f9:64:3c:f9:2c:3f:9b:
1b:29:e9:8f:b6:ef:07:e2:0a:40:2a:00:00:76:ff:a9:e4:2e:
a4:32:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:11:52 2026 by rpki-client