Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: EulalXWDf4GCoVXYjNm8vcZFMEWOpCZmGAYGn1cTll0=
Subject key identifier: 89:FF:5D:8A:50:72:17:A8:22:FB:6C:2F:61:3F:9A:4A:A6:24:E8:40
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 019EC1EDDC4AE7095160154F4ACC0EDF5A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 01AB
Signing time: Sat 13 Jun 2026 17:00:51 +0000
Manifest this update: Sat 13 Jun 2026 17:00:51 +0000
Manifest next update: Sun 14 Jun 2026 17:00:51 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: 1gAhhygPnIqQg8We/i/x96z4Ff8aUAjeENLArzi/+S8=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:dc:4a:e7:09:51:60:15:4f:4a:cc:0e:df:5a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Jun 13 17:00:51 2026 GMT
Not After : Jun 14 17:00:51 2026 GMT
Subject: CN=89ff5d8a507217a822fb6c2f613f9a4aa624e840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:ec:24:73:21:4c:c2:a6:ea:79:5c:78:73:
a6:b3:61:a8:0f:86:48:4e:bb:cc:7b:d3:07:3d:ed:
3d:f3:7b:fa:79:87:df:2e:ea:7f:91:24:bd:ac:cf:
fa:5b:58:22:55:dd:9d:10:35:18:1d:04:0b:ba:f2:
97:0d:6d:8f:13:8b:f7:3e:87:ea:d0:09:2e:cc:2d:
89:69:98:0c:60:bf:f8:e6:67:28:04:ca:ab:57:7c:
51:89:f8:23:8d:09:48:22:7b:8b:98:42:80:c1:fa:
35:d0:a5:57:69:ad:18:a3:03:40:32:38:9f:98:51:
95:b4:a4:88:30:e3:17:7a:37:72:0e:b9:fc:a9:84:
14:fe:67:92:c4:61:b4:0d:60:e6:42:33:52:0b:3f:
60:cf:ca:7d:c7:37:a9:e4:e8:eb:c5:89:5a:4d:de:
2e:d2:e4:b1:81:ee:78:d0:67:dc:eb:31:77:7b:3e:
d6:3f:69:22:ce:4c:04:d3:30:8c:64:bd:18:5f:f4:
b1:fe:ee:2a:71:36:74:e7:fc:2a:b4:c2:01:2e:30:
19:f3:77:65:30:0c:19:97:3f:1b:cc:94:4d:77:95:
55:b0:d3:64:8f:b6:b3:77:68:0e:69:1b:ba:15:a6:
a7:19:33:b1:d9:ec:68:bf:df:42:4b:81:98:f6:31:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FF:5D:8A:50:72:17:A8:22:FB:6C:2F:61:3F:9A:4A:A6:24:E8:40
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:53:0a:af:77:44:39:b7:6a:f1:27:21:2d:d3:e7:38:71:9a:
01:a1:70:23:8b:48:87:41:5d:20:57:c4:4c:cd:20:8d:60:a6:
7b:f7:13:25:00:45:f7:6f:75:50:5c:ae:59:92:8e:78:4a:8c:
2b:23:da:71:de:38:0a:99:0e:35:1d:ee:af:18:79:bd:a4:33:
e4:8d:ba:e0:b0:6d:81:c8:79:ee:f8:84:67:03:2d:85:82:cc:
75:5f:78:e7:32:46:43:98:06:63:9e:c6:0c:4d:57:1c:91:0c:
aa:86:19:d7:9d:ac:52:b9:a7:10:83:d6:69:d2:a5:62:b3:6d:
10:4a:47:9a:a8:21:27:9b:d4:17:10:98:28:c8:7a:51:4e:a9:
4c:2e:ad:9d:06:65:22:fd:42:e1:5b:e3:1a:b0:c6:ad:41:cc:
b1:92:db:79:9c:d6:95:85:11:af:cf:97:11:ab:2a:66:85:11:
a1:88:c5:1c:d0:d6:02:05:c0:a8:ac:ed:9a:89:01:68:40:a1:
b7:96:05:4d:0f:65:2c:0a:ad:1b:79:65:6f:88:79:41:30:63:
15:71:37:8f:3c:77:4d:fd:2e:72:56:1b:67:c2:ff:49:9f:8b:
dd:d8:22:93:f1:52:bb:c3:d0:ab:7a:80:15:11:cc:36:36:42:
31:0f:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:45 2026 by rpki-client