Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: r9xNzhaChx4pITUEoKZtjYf+Szd9nmO/oTi0R7Hre2A=
Subject key identifier: 03:40:97:99:D2:23:36:BF:04:9E:70:8F:DF:A8:C8:FC:7B:69:D9:20
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 019FAF40835F519EB523EC2053C00B9E8912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 0AE1
Signing time: Wed 29 Jul 2026 19:01:08 +0000
Manifest this update: Wed 29 Jul 2026 19:01:08 +0000
Manifest next update: Thu 30 Jul 2026 19:01:08 +0000
Files and hashes: 1: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: L1suQUtRF13CYftdl64HhCjKkBQciLCA0P/eeO+c/4Y=)
2: rTrNf2BtsL1vlw_R__r7UKcCZJk.roa (hash: lQAxfhbBIAhm99xgTizcCxmFSvD0y0yK3pththJkeEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:40:83:5f:51:9e:b5:23:ec:20:53:c0:0b:9e:89:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: Jul 29 19:01:08 2026 GMT
Not After : Jul 30 19:01:08 2026 GMT
Subject: CN=03409799d22336bf049e708fdfa8c8fc7b69d920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:b8:25:d1:83:11:9a:38:5a:c8:00:94:64:
e4:29:66:e8:4e:cb:d2:d5:ce:7c:c5:94:cc:50:bf:
08:5d:f8:08:22:0c:9d:56:98:75:d8:ef:55:1b:d4:
5a:83:78:01:36:09:47:1d:67:ff:e2:56:c9:33:9e:
87:9b:99:3c:25:9f:41:dd:34:0b:f4:cb:10:4e:06:
55:8b:b8:58:52:ab:36:c9:21:b1:bf:10:21:14:57:
6e:d7:af:16:28:2a:da:c0:14:7f:3a:d2:04:6f:82:
f6:21:11:7c:78:0f:4a:d8:81:dc:a2:5d:08:44:38:
9d:53:2d:bd:fc:cd:a1:ca:b7:59:fb:30:95:8c:49:
f6:03:ce:41:80:98:a8:41:f4:45:26:d2:52:f9:d6:
9e:4f:54:80:1c:71:8a:34:83:00:1e:8b:a6:52:94:
4b:05:2e:2b:66:41:d4:1b:bd:cb:af:c8:72:2a:35:
17:e7:4e:f6:8f:59:f4:4a:bd:21:b8:9d:48:c7:d1:
21:21:0a:4e:ff:9c:85:40:93:3e:38:98:8b:05:e3:
d3:1b:07:89:79:80:87:7c:a3:d7:17:1a:4e:f9:44:
7c:e1:64:fe:29:cc:2f:5d:84:0f:60:73:de:d4:44:
15:38:bc:a4:35:29:87:25:c1:bc:e7:1a:cd:4b:41:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:40:97:99:D2:23:36:BF:04:9E:70:8F:DF:A8:C8:FC:7B:69:D9:20
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:db:6c:a2:3f:aa:ff:dc:a0:a9:1b:f2:f1:44:9d:10:91:9b:
2c:2d:5d:19:f3:27:46:57:f9:ca:05:e8:1e:ce:1d:06:d4:c7:
06:4e:8c:07:d5:2f:f3:eb:b6:5e:e3:54:e7:e9:34:ff:ef:f1:
ab:60:ec:57:0e:43:4a:a3:43:97:ab:b4:13:5c:18:35:a8:f9:
ae:54:08:14:46:6b:7c:36:a7:bb:22:3d:a9:86:2f:6d:1f:64:
91:70:e8:e0:ff:c4:f9:e0:ec:47:73:1d:db:39:66:6e:b2:27:
82:66:7f:c8:e0:fa:72:3d:b2:02:45:28:9f:b6:47:e7:75:c6:
c2:04:8a:4a:1a:cb:e5:96:30:a5:b7:dc:73:d1:82:7d:db:25:
39:1a:ca:5f:5b:99:72:e1:cb:ad:03:f4:ca:b3:94:80:59:eb:
92:d7:ed:ed:6d:f7:7f:ac:14:d7:1a:b1:63:bb:67:56:c1:be:
ec:4c:e6:4a:55:91:0f:4d:86:b9:45:c7:0e:ae:47:87:08:aa:
f7:19:7c:ff:5d:31:67:67:39:a8:e7:ee:96:50:fd:b2:54:b3:
4e:88:0b:3c:fe:c6:f7:e3:dc:00:7d:ab:fa:48:dd:af:17:d5:
5f:c2:1d:f0:34:37:41:d9:70:a5:41:c3:ca:84:27:e7:18:92:
98:7f:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 21:07:56 2026 by rpki-client