Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: DvGLoFsqF2EoxkK282MvB6Kx8F0bfHvewZDR2NxUuOc=
Subject key identifier: A1:34:AE:F9:AD:41:D1:60:79:BD:2B:F5:30:E5:27:58:9A:CC:37:9F
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019D9998F40AD561B1BCC213BAB619AD141F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 1589
Signing time: Fri 17 Apr 2026 04:00:31 +0000
Manifest this update: Fri 17 Apr 2026 04:00:31 +0000
Manifest next update: Sat 18 Apr 2026 04:00:31 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: v+MyHrnP8W+PZ4vuthWm6DLWE+jhsBGklxNRb/whu1M=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f4:0a:d5:61:b1:bc:c2:13:ba:b6:19:ad:14:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Apr 17 04:00:31 2026 GMT
Not After : Apr 18 04:00:31 2026 GMT
Subject: CN=a134aef9ad41d16079bd2bf530e527589acc379f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:15:be:17:67:da:f8:54:10:b6:79:0e:26:
0c:6e:f5:f6:d1:8c:ca:ab:c2:b0:67:8c:2a:bf:99:
b2:e0:c7:8d:06:1f:45:8b:8e:de:e5:52:c7:e9:59:
ac:e1:a3:0c:32:62:d9:bc:92:13:f9:a9:43:74:79:
73:37:bc:69:fc:6d:8f:3d:8e:83:31:9e:ca:60:3b:
9b:b5:a1:16:ac:c8:f4:94:40:3d:64:00:8b:d8:8c:
62:bd:49:86:64:8d:27:19:89:e1:72:f0:e2:a7:d5:
0a:cb:59:a7:b5:fd:3e:86:c7:22:e6:fc:55:9a:82:
e4:8f:5a:8f:b7:22:4f:61:52:cd:f8:c8:3b:6c:1b:
38:38:ca:5e:97:a8:d8:9d:09:30:51:be:f1:9b:60:
65:55:fa:be:c4:19:99:10:d8:6c:8b:62:dd:54:2a:
c5:3e:a9:49:31:b4:d6:2b:a1:73:75:0c:86:e7:79:
8f:76:23:9f:c6:6d:e3:f1:93:9b:e4:af:58:10:77:
df:53:74:27:33:3a:11:05:cb:da:51:56:89:2a:96:
c4:ba:f3:b0:a1:52:8e:9f:f9:55:52:b6:32:3c:78:
55:b2:e1:0a:98:25:47:7a:c7:20:bc:59:8c:0a:04:
fd:62:08:5a:dc:52:1a:6f:3f:64:ff:33:ea:ca:49:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:AE:F9:AD:41:D1:60:79:BD:2B:F5:30:E5:27:58:9A:CC:37:9F
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:50:38:e2:e7:d8:b3:ea:37:a6:b4:da:5a:ad:cc:79:a2:f9:
ad:fa:20:48:aa:f7:57:66:d1:23:e3:8d:91:b6:33:41:4b:e6:
55:a7:a3:23:a9:d0:6f:9a:60:2c:5c:ad:0c:0f:c6:12:06:89:
47:67:4e:3d:70:01:8d:f2:5a:c3:d6:49:da:fc:88:3d:92:14:
1d:e2:5e:37:66:b8:bd:65:8d:52:ec:b4:6f:b1:3c:81:08:f3:
12:58:98:dc:12:77:91:a1:f5:a8:9b:25:cd:4d:cd:91:02:e1:
1e:b7:d9:b8:ea:5d:cf:e1:48:02:50:9a:11:74:10:13:73:a5:
2e:8e:67:b2:0d:3d:4d:03:60:8e:38:51:6a:db:fc:8f:d3:b5:
c1:92:6c:fa:c2:eb:8d:68:3c:ce:a8:26:69:97:ab:78:2b:21:
fa:bf:9b:10:ab:6a:2e:ac:1b:85:93:c7:3a:27:1f:05:bc:3d:
78:27:fb:53:68:b6:2d:e4:cd:2b:77:40:a8:a7:e8:e8:75:76:
d3:3f:8c:82:6f:bb:00:e1:b9:61:f4:ec:54:44:f7:96:cc:cd:
e0:37:ba:0b:ab:19:0b:12:9f:dc:b9:6c:a1:7f:83:8f:73:27:
43:fb:e8:b8:b8:c9:5b:a0:79:b6:81:c8:d2:25:12:ea:d3:ef:
b6:5d:2a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:46 2026 by rpki-client