Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File: iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier: k4uu3YSfl0BwoKqtZ/lzvEBVPhkBxmVz/NPPtv0U9Kk=
Subject key identifier: 74:A8:3C:8D:72:A3:08:BB:E9:08:31:F4:74:78:72:20:C0:86:EC:32
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 019CB0240B92570D84793CC7A9F9863443A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number: 15C9
Signing time: Mon 02 Mar 2026 20:01:18 +0000
Manifest this update: Mon 02 Mar 2026 20:01:18 +0000
Manifest next update: Tue 03 Mar 2026 20:01:18 +0000
Files and hashes: 1: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: aPmfPdLVG6/8IserRgWJCXJy1Oaf7CHOGgsvsMYdrQo=)
2: iz-s1SV_V4AaMH-6-vZcdBe9_28.roa (hash: AFIMSomYZRZ7dduGJLch69mRqRFbHaPPEtg9WN6niUo=)
3: m9EXLhYWcdpBDX-fRVjeJwFcks4.roa (hash: hO49V1SsoRH71HYWYcEzmHsz7GxUTsYMMr0hhLYqiYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:0b:92:57:0d:84:79:3c:c7:a9:f9:86:34:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Mar 2 20:01:18 2026 GMT
Not After : Mar 3 20:01:18 2026 GMT
Subject: CN=74a83c8d72a308bbe90831f474787220c086ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:f0:97:3d:b4:55:df:88:c7:8d:4d:c0:fb:
92:cf:3c:1a:70:b3:c8:bc:07:0f:d1:b1:13:a4:6b:
a9:c1:fc:88:08:c5:ec:b8:b3:44:b7:a3:43:0d:d4:
cc:9c:29:f5:94:04:94:a3:58:14:a6:f4:b1:18:83:
6e:5a:ca:71:16:d1:d4:05:d6:30:eb:19:14:db:82:
9c:6f:de:95:40:fe:a6:d2:8d:74:55:7b:7a:bd:d5:
5b:fd:77:56:f5:95:dc:09:82:7e:03:6e:11:ec:5e:
b8:90:b3:76:40:b5:a0:23:20:04:73:73:67:cf:57:
79:e2:16:c9:08:6c:19:3c:e1:bf:40:7e:c8:43:35:
de:19:27:39:13:9d:59:f4:d0:0d:49:26:14:52:c0:
4b:33:89:0a:89:a3:6a:0f:7f:e5:83:08:de:6d:5e:
c0:16:d1:fa:fd:27:a0:3f:ca:18:1b:af:41:3f:37:
20:60:0c:57:69:34:34:d1:25:fb:5a:26:b0:6b:73:
7a:fd:9b:42:1d:23:33:7a:76:f7:ef:0c:8a:2d:83:
50:dd:ce:19:06:74:2e:1c:61:94:d2:3b:24:13:bf:
ef:a4:63:38:11:06:bb:73:ec:e2:af:b2:a9:cc:7a:
7c:85:e6:27:12:85:66:8b:6c:52:a6:3f:9e:8f:ea:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A8:3C:8D:72:A3:08:BB:E9:08:31:F4:74:78:72:20:C0:86:EC:32
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:64:fa:ab:a3:04:14:4b:00:06:3f:28:a9:92:4b:5f:da:53:
48:85:7d:c9:5a:c0:3d:c6:92:da:e4:dd:46:58:b3:15:38:8b:
36:a1:76:45:b9:4b:49:d0:53:43:2f:79:55:c0:8d:8b:a8:c6:
5b:0f:0d:05:b3:84:a6:e9:b7:2f:e0:6e:a1:4f:96:18:5a:74:
4c:f6:cc:a5:a5:ce:9d:af:46:12:9d:e4:f6:37:8d:7f:b2:0c:
6f:33:73:c7:69:38:a6:bd:42:e6:bf:cd:cc:39:31:3c:fc:c8:
cb:5a:87:00:be:08:a3:79:b2:75:cf:fa:97:88:81:c3:9d:e1:
27:6b:4e:a7:c1:c9:88:00:27:dd:a8:56:50:9e:cc:2d:fc:7c:
31:09:77:a9:27:4d:dc:2a:d4:a1:ee:ff:8b:dd:91:84:f4:3f:
36:ef:b3:b5:c4:a1:bc:4f:62:d5:7e:2a:b5:8e:f0:4b:a0:b1:
cf:db:42:20:96:ee:9b:3e:c5:a4:df:6f:f3:25:fa:73:f9:e7:
11:7f:01:7b:ea:5b:01:41:d2:84:0a:f5:51:9c:88:91:9f:d8:
cd:36:96:03:2c:06:9b:67:d1:39:6f:59:29:81:f4:e1:0b:84:
67:00:15:fa:4c:7d:ff:44:e0:fd:6f:5c:4e:93:7f:cd:82:95:
15:7e:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:31:13 2026 by rpki-client