Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: JkUuB6WD74tEzCg2jt+5i8FcC5b8rTyvPsSJ9EU1jFA=
Subject key identifier: F9:41:BD:29:E4:09:10:B6:7C:71:7F:01:97:AC:51:6E:B7:17:99:2C
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 01A0D2DF04EBE97E04FDE9922548729C5418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 0B78
Signing time: Thu 24 Sep 2026 10:03:46 +0000
Manifest this update: Thu 24 Sep 2026 10:03:46 +0000
Manifest next update: Fri 25 Sep 2026 10:03:46 +0000
Files and hashes: 1: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: sWc+KnkdhSEvCjWR/gQFIBByzAJ0DObY2P+bn2hYl9c=)
2: rTrNf2BtsL1vlw_R__r7UKcCZJk.roa (hash: lQAxfhbBIAhm99xgTizcCxmFSvD0y0yK3pththJkeEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:df:04:eb:e9:7e:04:fd:e9:92:25:48:72:9c:54:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: Sep 24 10:03:46 2026 GMT
Not After : Sep 25 10:03:46 2026 GMT
Subject: CN=f941bd29e40910b67c717f0197ac516eb717992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:84:e2:4c:d1:7a:ab:af:09:6f:fd:39:51:
0a:26:b4:dc:51:68:7f:52:89:2d:4d:a2:68:bb:ea:
d9:5f:1d:4f:47:90:fa:4f:67:ad:22:e6:99:84:b1:
5c:d7:86:95:cb:82:2e:91:27:8b:9b:b3:69:28:03:
5e:0f:e4:6f:0b:4a:18:cf:e5:50:c1:62:21:78:97:
72:c3:03:39:73:15:fb:da:c8:81:e7:4e:bf:2d:6e:
f7:57:72:45:55:34:35:cf:69:32:5d:95:de:ef:c3:
97:c4:3f:b0:ec:9c:e2:11:b7:30:b4:9b:09:35:f1:
08:74:71:84:e5:0c:17:f7:f4:ff:7f:e8:32:d9:e8:
ea:c1:8d:83:69:61:d9:a3:72:53:59:da:23:2e:3a:
61:d5:47:a1:6c:75:12:7f:05:3c:4a:a8:fc:93:07:
77:bf:82:b8:b0:92:80:3c:09:c1:ab:64:7d:80:c8:
97:6e:03:49:30:95:e0:31:06:47:22:23:09:2c:6c:
14:bc:ec:c3:d8:b9:5a:06:d3:4d:49:d6:4a:86:39:
92:bb:be:33:74:07:c2:fb:40:39:e3:61:4f:9d:f5:
33:bb:ff:b4:19:e1:81:e4:9b:ce:e2:29:64:8d:f6:
ed:b1:7c:09:8a:29:2e:6c:cc:9c:16:09:97:33:69:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:BD:29:E4:09:10:B6:7C:71:7F:01:97:AC:51:6E:B7:17:99:2C
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d0:a7:f9:d2:7a:5c:9c:3f:80:21:70:4d:fe:ea:97:c4:0b:
c0:0b:75:3f:58:be:28:34:6b:86:bf:5e:62:06:8d:21:05:5e:
03:93:03:35:2c:33:8c:8a:51:6c:39:56:00:fd:30:21:eb:0b:
91:7d:54:85:6f:fd:95:4a:51:ca:a7:40:e2:ed:44:5e:7a:06:
af:57:12:c0:e0:5b:d9:08:64:d5:8d:b7:83:bc:02:71:32:da:
27:aa:96:d8:14:26:5a:fb:3c:bb:f1:c1:e9:95:dd:09:27:97:
f9:2d:f6:10:1e:50:d1:ca:c7:7c:3f:df:2b:1b:a7:e5:29:dd:
b2:10:3f:d3:0f:01:54:0a:47:45:ee:a2:7f:8c:c2:bc:d3:1e:
5f:7d:88:0d:aa:94:96:55:0f:67:52:71:52:18:b6:06:a3:2f:
55:fa:a5:5b:69:f3:4a:32:1a:4a:df:2e:13:fe:d4:60:9a:07:
71:aa:9d:28:5d:c2:4a:11:18:ce:14:ac:96:b1:e7:9e:91:f0:
88:3b:2b:59:60:5c:cf:4d:8a:f6:a5:1d:d1:34:a7:12:0d:a7:
72:72:c4:ef:d1:d1:77:a6:e2:04:31:e6:b5:d3:53:85:94:f5:
f0:d7:b6:1e:9f:2f:a9:c5:84:17:95:62:1b:7a:7e:0a:f0:36:
48:52:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:14:29 2026 by rpki-client