Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: /RApnf2jKHaU7rq6LiFThVEPrdOFb+gZHtw/tSOwtFg=
Subject key identifier: 94:4F:29:24:A6:0F:AC:5B:2F:81:97:E1:C7:C6:BA:1E:21:38:CA:2F
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 01A1046E187EDDC1CC99D654687C91A6DF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 174E
Signing time: Sun 04 Oct 2026 01:01:26 +0000
Manifest this update: Sun 04 Oct 2026 01:01:26 +0000
Manifest next update: Mon 05 Oct 2026 01:01:26 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: SwX4awGJrvy6cMhZlCVKrQE25ulQmvK0f08gz1YhLsE=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:18:7e:dd:c1:cc:99:d6:54:68:7c:91:a6:df:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Oct 4 01:01:26 2026 GMT
Not After : Oct 5 01:01:26 2026 GMT
Subject: CN=944f2924a60fac5b2f8197e1c7c6ba1e2138ca2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:ce:9c:b9:0b:69:cf:66:d1:2d:8a:c3:5a:
1e:a5:50:8b:ca:53:43:ed:4e:d4:26:8e:c8:fa:28:
16:9a:32:4e:29:13:87:ba:4e:11:25:ae:17:b2:b3:
ee:df:cf:b7:ca:d2:86:5f:6d:c2:08:c4:9d:35:b2:
f3:0a:0e:c1:6e:0f:91:cb:85:c6:9e:9f:ef:03:86:
5b:0a:9f:28:1e:ef:17:20:28:0e:77:d2:e4:d3:b8:
b6:20:2b:41:08:23:92:bb:d8:c7:78:45:09:50:d3:
ed:7d:2b:e4:9e:5d:be:90:ff:26:ce:05:18:61:bc:
5f:d9:0c:98:8e:8e:1c:81:e3:50:c8:2e:11:b2:a7:
6c:f8:7a:2b:d9:fe:15:5c:b1:cb:c4:58:d1:ea:3c:
b0:36:42:8f:78:b0:55:2e:2a:b8:b6:0c:4d:e8:c2:
7c:0a:58:04:31:db:0d:63:b0:a7:9e:12:b9:7f:d1:
1d:57:a5:65:31:dc:f3:7d:2b:73:49:85:63:af:19:
10:36:2c:d0:06:50:ba:71:63:f4:cf:3d:de:7e:b1:
8b:3f:98:75:1f:61:63:0b:cc:a3:8a:f5:1e:ec:3a:
b9:f9:32:96:01:e1:43:51:93:19:a7:43:7d:4a:b5:
bd:7d:15:9e:49:d0:24:f1:41:de:c2:0b:2d:05:93:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:29:24:A6:0F:AC:5B:2F:81:97:E1:C7:C6:BA:1E:21:38:CA:2F
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6d:89:84:0c:f0:e3:a7:4f:0f:c4:2f:fe:77:49:04:55:07:
3e:d0:0d:df:c3:ea:20:26:6a:a8:5d:22:54:4b:e0:77:f1:fb:
07:b3:fa:3a:3a:60:44:2d:94:c8:97:cd:11:64:88:2e:51:d3:
af:04:83:33:94:e5:12:a2:77:39:14:c1:f4:4c:41:1b:d9:3c:
94:90:09:9c:0f:c2:3c:c7:12:9e:5c:53:f8:5e:c5:d8:fe:7c:
e4:5f:ae:0d:c8:8e:54:4e:7b:9d:0c:1b:e4:cf:28:39:97:cf:
54:20:24:a2:3f:c8:ef:03:7e:39:2e:f2:20:8f:fa:12:1d:74:
54:9b:46:85:83:37:0d:47:35:60:0b:d1:3c:c1:33:cc:97:d1:
b1:69:6a:cb:8b:2a:c1:1a:48:c0:1c:48:dd:46:5e:1b:1d:7d:
49:10:bb:18:17:5c:b8:84:d2:1c:44:54:e7:40:5e:e9:ce:81:
73:d8:2a:e4:b5:72:e8:77:59:43:25:bc:77:e2:1d:6e:b9:62:
59:a0:9d:ae:13:93:26:c8:08:11:40:16:d4:77:79:df:26:1f:
ea:96:1d:3f:37:ea:ad:a2:f9:fc:e7:c3:73:02:57:f3:b1:41:
8b:6a:e6:f3:61:83:18:87:bd:19:2c:b7:75:02:f6:cb:1b:7b:
8a:4e:a4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:37 2026 by rpki-client