Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier: 9RNMyQNMkcswqxuaWYMJwP1rYq4f4knrwLpFHJJ8YBI=
Subject key identifier: 04:B6:F7:02:9E:E5:02:E3:89:8D:6A:A9:9A:31:38:32:18:72:08:C0
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial: 019CAAC6BC7EE2BA6E80F212C244FAB01FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: NDwNFZEXkfQJUDkRKdNYGoT-CYs.roa (hash: MgEstRhz+rsVJ145O8dZD+Rboj459K59VW57okQlLvE=)
2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: TIOTRWjIZXwtPP5SpUDyP6RVQdBeLhW2Br8fkheKZ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bc:7e:e2:ba:6e:80:f2:12:c2:44:fa:b0:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89693344638acb0536582fab089876578ef6bc56
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=04b6f7029ee502e3898d6aa99a313832187208c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:93:ed:8c:a7:62:fc:df:f6:dc:10:99:2b:
45:4a:d9:bd:7a:b6:b0:3c:f0:3e:28:97:da:f6:77:
34:a1:44:12:d2:6f:79:b6:aa:5d:88:e2:55:fa:f2:
cd:d2:f1:d5:a1:83:bd:24:67:02:0f:39:72:c2:e9:
ba:34:7f:9e:2a:ac:d7:55:13:e5:9c:9b:ca:16:c5:
14:65:cd:f0:f1:b2:06:ed:b4:a3:af:d5:d2:0c:c4:
47:1a:81:40:4a:96:9a:38:6c:19:73:e9:0b:f0:4c:
57:29:da:83:36:99:01:5c:fe:19:19:44:a7:35:d1:
33:5d:8f:19:6c:09:0d:47:7b:ea:3b:ab:24:c7:d5:
1c:74:ca:8b:7d:54:80:db:fc:9e:9e:75:31:3c:b8:
ca:9b:c5:08:3d:b6:bf:f4:d5:ba:37:03:af:ed:87:
0f:37:24:3b:c4:86:86:8b:89:95:76:c4:1e:64:ed:
9b:4d:21:c8:ed:c5:8b:eb:f9:4b:c7:95:5f:89:bd:
1a:95:85:2f:ec:30:c7:4c:64:1c:6a:71:d8:63:01:
4f:0d:8e:97:b2:bb:86:e0:0a:cd:e7:b8:90:cc:b2:
cf:82:1c:c2:c3:86:bc:a9:19:9d:f3:3b:99:cd:a3:
1f:66:56:84:1e:fd:b1:5d:9b:e3:48:16:02:15:7c:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B6:F7:02:9E:E5:02:E3:89:8D:6A:A9:9A:31:38:32:18:72:08:C0
X509v3 Authority Key Identifier:
keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c4:2e:d9:6c:74:1d:33:f4:ad:a4:93:fe:ac:f3:74:40:00:
c5:0f:0b:fe:8d:17:50:a3:71:50:de:01:3e:34:f8:5b:1d:9b:
0d:be:29:88:53:25:c8:e2:14:9b:3d:c1:4f:18:db:e9:0d:af:
00:c8:4f:cf:d8:f5:af:30:83:bb:a2:80:3b:47:af:3d:04:02:
13:4e:f1:ab:e3:b2:65:85:ae:28:34:dd:9b:c9:5f:14:f2:bc:
45:1f:cc:9c:10:92:aa:c9:09:0c:58:2c:ea:77:ca:c7:5d:20:
97:e1:38:bb:fa:6b:95:82:70:76:ba:3b:0e:72:16:11:c9:47:
48:b2:2e:24:7f:a3:e8:66:48:50:24:93:8a:58:4a:41:bd:c7:
b0:d3:eb:52:d8:db:8b:5e:55:72:d7:04:fd:cb:6e:9d:65:01:
82:af:dd:aa:1b:5a:e3:bc:d1:1c:af:10:04:bf:f5:ec:96:19:
c6:ec:6e:cd:d2:65:ef:a4:89:51:46:99:a7:6c:a5:08:7d:63:
72:f1:ad:2e:ad:73:c9:3b:94:f2:99:b9:fa:17:44:5f:b6:81:
8c:e3:d4:82:32:db:6a:91:83:45:eb:47:a6:13:fa:b0:85:6c:
aa:37:1c:99:e5:9f:9b:56:37:ce:38:6f:6f:b5:9f:c7:f4:26:
92:f2:8f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxrx+4rpugPISwkT6sB/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NjkzMzQ0NjM4YWNiMDUzNjU4MmZhYjA4OTg3NjU3OGVm
NmJjNTYwHhcNMjYwMzAxMTkwMTE2WhcNMjYwMzAyMTkwMTE2WjAzMTEwLwYDVQQD
EygwNGI2ZjcwMjllZTUwMmUzODk4ZDZhYTk5YTMxMzgzMjE4NzIwOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcqT7YynYvzf9twQmStFStm9eraw
PPA+KJfa9nc0oUQS0m95tqpdiOJV+vLN0vHVoYO9JGcCDzlywum6NH+eKqzXVRPl
nJvKFsUUZc3w8bIG7bSjr9XSDMRHGoFASpaaOGwZc+kL8ExXKdqDNpkBXP4ZGUSn
NdEzXY8ZbAkNR3vqO6skx9UcdMqLfVSA2/yennUxPLjKm8UIPba/9NW6NwOv7YcP
NyQ7xIaGi4mVdsQeZO2bTSHI7cWL6/lLx5Vfib0alYUv7DDHTGQcanHYYwFPDY6X
sruG4ArN57iQzLLPghzCw4a8qRmd8zuZzaMfZlaEHv2xXZvjSBYCFXz0UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAS29wKe5QLjiY1qqZoxODIYcgjAMB8GA1UdIwQY
MBaAFIlpM0RjissFNlgvqwiYdleO9rxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83ZDg5MDAtYmU3Ni00MGUyLThjOTkt
NzBmOTQzZWFjNGRiLzEvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83ZDg5MDAtYmU3Ni00MGUyLThjOTktNzBmOTQzZWFjNGRi
LzEvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcQu2Wx0
HTP0raST/qzzdEAAxQ8L/o0XUKNxUN4BPjT4Wx2bDb4piFMlyOIUmz3BTxjb6Q2v
AMhPz9j1rzCDu6KAO0evPQQCE07xq+OyZYWuKDTdm8lfFPK8RR/MnBCSqskJDFgs
6nfKx10gl+E4u/prlYJwdro7DnIWEclHSLIuJH+j6GZIUCSTilhKQb3HsNPrUtjb
i15VctcE/ctunWUBgq/dqhta47zRHK8QBL/17JYZxuxuzdJl76SJUUaZp2ylCH1j
cvGtLq1zyTuU8pm5+hdEX7aBjOPUgjLbapGDRetHphP6sIVsqjccmeWfm1Y3zjhv
b7Wfx/QmkvKPew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:54 2026 by rpki-client