Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: KAkQurKH9vxMKatTnLue5nVE6hXeX3AfV43y1rsAFKk=
Subject key identifier: 07:82:08:22:19:CD:1F:42:69:13:66:83:15:39:32:A3:5E:8B:A2:D8
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019FAE9B518C13FD6A688FB9EF1083CEEDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 169D
Signing time: Wed 29 Jul 2026 16:00:42 +0000
Manifest this update: Wed 29 Jul 2026 16:00:42 +0000
Manifest next update: Thu 30 Jul 2026 16:00:42 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: 1sNOhh73IfF79XR79GV0dMoE1ZiUk4DVAG7Sk365I+U=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:9b:51:8c:13:fd:6a:68:8f:b9:ef:10:83:ce:ed:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Jul 29 16:00:42 2026 GMT
Not After : Jul 30 16:00:42 2026 GMT
Subject: CN=0782082219cd1f4269136683153932a35e8ba2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:32:8f:57:ca:e4:13:66:f9:06:bf:48:8a:
5d:30:de:b5:42:7c:0a:08:6a:6b:d8:9c:15:a9:35:
c5:ff:ae:f3:3a:8c:59:c6:c3:00:8d:46:0c:b6:3e:
84:8e:1f:e5:1c:7e:6c:ed:f0:fd:67:4a:ff:e1:68:
d6:6c:be:72:08:2b:82:90:8a:eb:96:2e:a5:94:3f:
7c:33:af:d2:9e:46:6f:fe:7d:65:14:3e:06:49:57:
6a:1e:92:ad:a0:6d:b0:95:e0:0c:3f:f0:fb:34:ba:
eb:e0:2c:81:9e:b9:b6:74:2b:e0:4a:fb:75:94:28:
72:39:63:53:bc:9f:85:4c:c6:93:16:02:b7:65:86:
d0:6e:29:f6:12:2b:58:61:d5:39:0c:a2:55:7a:16:
47:07:11:67:5d:7c:4d:22:22:b2:34:a3:fe:98:9c:
98:dc:4a:a5:7d:8d:91:a8:a3:96:5d:9d:29:b6:26:
ac:1d:bb:d9:da:5c:94:5a:22:c3:5b:9e:bc:f3:b4:
0f:d1:58:05:d7:ce:a1:60:a3:d0:ef:61:b7:f5:81:
42:44:2e:6b:98:ba:c3:b8:2d:20:8c:b5:32:8f:16:
67:4f:29:6d:be:cf:88:96:e3:cd:fb:85:81:68:27:
4f:dc:2b:77:86:21:56:75:fc:3d:ff:70:c4:f4:8b:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:08:22:19:CD:1F:42:69:13:66:83:15:39:32:A3:5E:8B:A2:D8
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fc:f0:b0:32:88:54:c2:4b:fe:63:2c:0c:2c:bb:89:eb:c5:
82:8d:fe:40:10:8e:1a:f7:f9:23:61:f3:0f:8b:30:8d:ef:27:
b8:d0:52:b0:d7:d2:fe:f9:31:0d:a9:e8:69:a3:9d:3f:d5:1d:
e2:6c:09:9f:af:93:11:e5:67:78:99:80:79:eb:60:ba:c6:23:
4c:f8:7b:55:e9:a5:c5:a3:1a:ca:ed:93:0c:d6:bd:54:55:f0:
45:61:09:09:1f:49:b4:6b:03:82:f9:ba:9e:10:7f:c3:01:2a:
7b:85:50:4b:20:e6:4f:79:72:ca:64:7e:28:ad:0d:05:2c:db:
96:ee:5f:27:b5:a7:ef:00:15:7c:7e:32:c8:98:44:32:55:12:
32:43:9e:bb:9b:3e:3c:93:d1:46:1c:ee:dc:a1:17:ea:e3:f5:
a3:f4:cb:40:84:cb:ea:e8:fb:c5:b4:55:d3:10:a1:d4:38:ab:
7c:d9:3b:ec:b4:6c:cb:5c:16:46:67:30:ab:f3:26:6d:d3:b9:
4a:4c:87:ae:78:ee:92:7f:cd:d7:bf:5d:1f:bc:f3:7e:3d:af:
fc:dd:9c:ec:f4:9a:de:37:dc:2e:70:19:2d:a3:91:91:67:05:
cc:fd:bf:ee:83:d3:3b:17:7a:e0:d4:8b:1c:6b:f2:88:57:0c:
7c:b5:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:42:02 2026 by rpki-client