Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: 64sA2PO3u0VN8Z+JZU8yQPtVvIXjDeb9ZPKfrr4iDiw=
Subject key identifier: 88:FE:3C:70:7E:C5:AE:F6:62:01:11:16:F8:EE:71:04:E9:8D:83:E9
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019FACACCEE293EB89F44E77B242327F53A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 169C
Signing time: Wed 29 Jul 2026 07:00:34 +0000
Manifest this update: Wed 29 Jul 2026 07:00:34 +0000
Manifest next update: Thu 30 Jul 2026 07:00:34 +0000
Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: KUTw5rprNkTq9gy9A2P2sX1ozdyY4yURaWDTI5H2fHs=)
2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:ce:e2:93:eb:89:f4:4e:77:b2:42:32:7f:53:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Jul 29 07:00:34 2026 GMT
Not After : Jul 30 07:00:34 2026 GMT
Subject: CN=88fe3c707ec5aef662011116f8ee7104e98d83e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:00:3e:93:c3:77:62:ea:1c:fd:04:f3:0f:
ad:51:73:99:f4:12:58:03:f3:ba:6d:06:06:31:b1:
ca:57:29:bc:19:41:0e:a6:2d:a0:9c:81:15:71:c6:
ef:80:ff:4e:ba:03:d5:b6:4f:6c:29:c7:dd:c9:9e:
49:89:c5:af:33:12:c4:46:4b:a6:dc:24:fe:91:34:
ce:c6:e3:b4:e2:c8:45:39:ef:44:a8:91:0f:2c:28:
58:f5:7c:20:c6:30:8a:ea:a3:9b:7c:88:23:83:19:
84:32:6d:eb:85:92:0c:63:97:f4:9f:ca:92:0d:98:
a4:b5:d4:6f:28:d1:ce:18:76:f9:d3:0b:0c:ec:f4:
3d:b6:2d:d7:ac:81:15:ff:20:b5:a1:31:51:4d:be:
23:ff:51:dd:25:e4:c2:26:66:59:19:9f:f4:16:77:
f7:20:21:06:76:f8:4f:bf:4d:1f:2c:66:4a:33:a3:
c1:63:07:88:9c:46:ff:af:06:f0:85:18:21:f4:e7:
e4:32:f7:ed:2d:62:16:dd:21:19:25:f5:d2:f7:6a:
25:93:ac:70:52:24:b7:36:df:b9:ec:3c:09:e4:a5:
c8:03:4c:19:22:f5:c4:a8:bd:7a:98:24:94:0b:b8:
91:05:91:90:a5:1d:6d:30:5f:52:24:9e:f3:03:9b:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:3C:70:7E:C5:AE:F6:62:01:11:16:F8:EE:71:04:E9:8D:83:E9
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:77:2b:f9:8f:c8:44:4f:89:e5:a9:6b:dd:9b:53:14:63:8f:
5e:7e:55:91:a7:0f:ba:79:4b:37:1a:bc:74:5c:01:47:37:d5:
34:1c:78:d7:83:5a:f5:10:98:c9:4e:fd:7b:9b:15:27:0f:66:
c2:17:da:c7:33:b9:a6:03:58:a7:af:77:d2:02:e9:d9:c8:c1:
5d:d8:6b:cf:33:36:19:11:21:fa:b1:d5:24:58:49:00:06:bd:
33:a2:cd:75:0e:e7:ea:b7:98:7d:3b:13:23:9d:d6:47:b9:71:
8b:88:b5:71:7f:69:91:ca:09:ff:cf:41:e0:b7:79:a4:b8:2e:
ae:a0:1d:63:4d:db:3f:d5:3f:ab:b6:e9:9b:9a:6a:5a:9a:51:
15:34:78:90:81:11:50:48:d6:6a:a1:2d:48:68:00:69:a3:4c:
fd:c4:1c:3c:38:17:8f:b3:31:3d:66:ec:8e:62:98:d7:12:9f:
1a:7d:d6:be:d8:56:4f:19:72:c5:16:20:2f:b5:bf:b7:f0:d1:
f6:6f:bf:80:cc:68:59:07:a3:c9:3b:ec:6c:2f:16:95:c5:b8:
0d:50:da:c8:fa:4a:88:34:04:91:4e:22:f1:27:87:5f:56:f9:
02:a5:ad:6a:33:67:3e:21:96:74:7e:65:12:f3:fb:79:ae:f9:
6e:cf:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:32:58 2026 by rpki-client