Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: HrARAwhEFCBlZgFGjPt/DmQ6rMSg9+Qm+EmTl3j0sM8=
Subject key identifier: A7:28:09:70:08:E3:C7:DA:A5:DA:E2:BD:CB:C6:06:E3:EA:E1:73:CE
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01A0C28D61FE2E8BD5A432602D30C93CF52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 1AC3
Signing time: Mon 21 Sep 2026 06:00:40 +0000
Manifest this update: Mon 21 Sep 2026 06:00:40 +0000
Manifest next update: Tue 22 Sep 2026 06:00:40 +0000
Files and hashes: 1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
3: EDn6jQwDUb3_g3td9FsRuFag4vc.roa (hash: odWjY9IlQTpSIG4MhA9Jlqnd2G5ltLMnoOP98UOiafU=)
4: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: UTqiRI5COtpIuS73CeqQHc3+wjivAl0lo/MQt+LbmAA=)
5: R7Lu4Y1fCyTXONuoklyDGrymZag.roa (hash: 5a8I6IIILgZSlU2ehvXhgeJfg0YzkicxbnbV++shmxM=)
6: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
8: xOkTZSLsa771caq28USEEIkXpes.roa (hash: NwIcfsi68DSP9V21cWD03wWREzD0An2kgwljZOmrIf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:61:fe:2e:8b:d5:a4:32:60:2d:30:c9:3c:f5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Sep 21 06:00:40 2026 GMT
Not After : Sep 22 06:00:40 2026 GMT
Subject: CN=a728097008e3c7daa5dae2bdcbc606e3eae173ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:03:68:7d:e0:9b:f2:10:20:83:82:56:7c:
43:08:ef:3c:ab:48:9b:75:e8:1c:ed:8b:5e:02:b0:
33:c4:57:09:2f:1f:73:b9:14:b2:f3:19:35:5d:8a:
9d:f6:55:98:fa:3c:ac:59:62:a6:d0:a3:a7:59:42:
73:6a:35:b2:ae:ae:2f:ac:72:89:e5:d3:e0:f1:f8:
5e:0b:97:cb:f7:61:e5:2a:1c:5a:c3:b4:69:a3:d3:
1d:eb:21:a5:e5:2b:88:09:59:14:cc:ab:47:2f:2a:
32:39:be:ff:35:ef:0d:d0:a1:04:e8:4c:21:23:38:
a4:bc:bb:c8:04:af:72:fc:b4:48:8d:49:55:62:dc:
04:9e:8c:b6:6f:5c:56:f2:a3:fa:24:7d:64:ba:1a:
51:8d:94:1d:63:69:37:23:a8:ac:9e:1b:b2:d8:d8:
76:be:f1:3d:b3:69:9b:ad:b0:3b:91:ab:39:6d:62:
cd:09:32:7b:de:18:44:9b:60:0a:a2:e0:1b:ec:bc:
7d:c3:de:4c:81:3a:73:f8:58:0c:c1:2b:b9:84:52:
d3:6f:45:0f:29:5e:06:1d:de:3a:d4:6e:7a:c7:6c:
b9:58:86:45:99:9f:4d:3b:24:2f:bc:52:e6:74:e4:
c7:bd:99:cf:35:4e:ce:7c:5a:17:4a:09:dd:05:9c:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:09:70:08:E3:C7:DA:A5:DA:E2:BD:CB:C6:06:E3:EA:E1:73:CE
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a5:8b:60:83:5f:12:3d:df:dd:bf:c5:ce:02:5c:fc:04:a4:
9e:a7:94:78:00:7d:1d:55:e9:36:2a:9d:5a:b8:fa:ea:cf:ef:
bb:87:a9:4b:bf:b6:b7:9a:57:45:49:67:83:d5:c8:d0:5a:bf:
ed:57:46:ed:22:99:32:5b:3e:76:80:de:f2:61:7a:0f:4c:b9:
b3:a8:82:fc:18:3b:a1:dc:cf:74:a9:81:bf:31:52:3e:22:bb:
a9:c5:1b:80:de:fd:c3:5d:00:06:ba:28:3f:c2:b3:d0:02:a6:
18:74:2f:ff:51:c4:7a:47:a8:15:26:0c:fa:4b:22:f3:eb:c6:
74:f3:87:67:7e:8a:65:f9:c8:5d:66:96:9d:af:fa:6a:c2:fb:
06:98:bb:4f:29:b4:6e:9e:4f:8c:2b:61:ca:c5:d0:f5:c1:12:
ce:0a:4a:1b:87:42:a1:fb:35:c2:eb:70:07:12:6d:d9:7a:f8:
96:11:53:db:17:6c:0d:97:32:77:c9:41:f6:2b:5c:a1:83:05:
e4:e1:70:d4:c1:9f:83:7c:88:82:d0:0b:c8:02:91:f3:7a:aa:
ac:59:17:ab:7e:13:a9:ee:5f:ce:c6:6a:a0:9e:7c:34:15:8d:
0e:86:f0:ef:db:80:a6:b5:60:ef:6b:1a:4f:5c:88:cc:cd:ea:
de:2c:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:35:08 2026 by rpki-client