Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: zgZCY3XxVEmNmenl6j3GkZkiSRRNfwSh9w+w632Dw/8=
Subject key identifier: 1D:7C:93:2E:22:C6:4C:A9:70:DC:CC:CE:26:E2:19:C0:D7:5A:E0:F5
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 019F89E9EEDC119482B265C7927DA289E39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 15A1
Signing time: Wed 22 Jul 2026 13:00:37 +0000
Manifest this update: Wed 22 Jul 2026 13:00:37 +0000
Manifest next update: Thu 23 Jul 2026 13:00:37 +0000
Files and hashes: 1: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: yl0YaiBsWBW0bextMtAPZWlHeoAbgLbAjHW2F+MGfTI=)
2: kUi761JvorzxQPc6oroU7qaYtPw.roa (hash: XgXtN6YXvVkYUj2ZwJZH9OZFn2FFfJDscz2MToxQBsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:e9:ee:dc:11:94:82:b2:65:c7:92:7d:a2:89:e3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Jul 22 13:00:37 2026 GMT
Not After : Jul 23 13:00:37 2026 GMT
Subject: CN=1d7c932e22c64ca970dcccce26e219c0d75ae0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:8b:dc:d1:25:d4:7f:2c:d7:36:03:f3:54:
59:ee:e8:73:4d:a6:9b:41:82:49:0f:db:ab:37:52:
24:d8:91:23:e9:f0:18:7f:7c:85:fd:90:73:8f:1c:
9b:57:56:ce:4d:e8:b4:e1:b5:b2:ea:4c:24:10:8c:
8c:42:85:9f:91:27:4f:c4:4a:3d:2b:b2:c2:1c:49:
54:2e:17:b0:19:54:3c:51:c2:e8:41:ac:20:ec:b5:
78:96:54:92:ea:2a:5f:20:63:dc:37:87:ba:83:22:
5e:6e:74:49:d8:27:99:53:83:e6:65:f5:8c:e0:43:
50:85:1c:5c:2e:e2:44:81:38:5e:21:3f:fb:cb:b1:
a6:13:2a:55:fd:e7:1b:d4:3a:25:92:ab:7a:0b:70:
11:47:02:20:a9:c5:68:be:48:48:49:3d:76:c7:7f:
d3:fd:5b:c0:31:70:c0:d5:3e:2c:26:2b:cd:0f:bd:
32:d6:4f:5c:3a:1c:86:ce:45:52:10:23:c6:7a:f2:
19:c7:51:d3:31:e1:2e:c6:d2:72:86:d7:cc:02:c8:
e6:9b:7c:b9:79:fb:da:90:af:05:c8:0c:57:b3:6c:
e4:3e:ab:2a:ea:e3:90:b8:40:0e:84:65:8d:e4:54:
a0:54:8c:0a:17:a7:09:6f:78:c5:c1:fb:3b:57:08:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:93:2E:22:C6:4C:A9:70:DC:CC:CE:26:E2:19:C0:D7:5A:E0:F5
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e7:8a:a4:4c:ef:67:10:8f:05:e5:e0:55:8d:4e:61:13:2d:
25:81:a7:89:fd:40:1d:91:78:f3:12:cf:77:7a:de:32:d6:4f:
fa:3e:1d:0d:b3:7b:c2:27:9b:5f:a4:f8:9c:6d:33:9c:2b:a3:
85:4c:33:97:05:62:bf:e6:bf:f1:da:05:74:78:ac:87:3b:3b:
20:b3:5f:1a:ac:29:c9:59:22:bb:93:59:59:3a:2f:df:45:49:
4c:98:89:a9:32:f3:0f:8a:9c:ac:2f:b7:df:a3:86:f9:9b:ba:
a9:f9:cf:76:3a:17:9e:2b:ab:45:f0:4d:d0:9e:cf:51:32:a2:
8b:35:64:9a:19:a5:4e:e3:29:27:1a:c7:0e:b5:b7:95:a3:4a:
31:f8:8a:ae:af:5c:31:8c:28:43:cf:42:47:ab:98:fc:5f:08:
b6:18:70:b1:51:a8:f4:41:9d:70:b6:50:fc:0d:5a:31:d4:40:
db:f0:f0:cf:f0:95:7e:04:88:db:f3:29:0d:41:71:86:8b:20:
72:5d:e9:79:9f:8d:f6:ec:95:1a:ed:0f:7e:7a:fd:9d:28:8a:
dc:1a:b9:2c:88:5b:4b:88:b1:e0:8a:ca:e6:fe:96:ee:7f:21:
e5:7f:dc:65:99:3b:72:4d:25:f3:75:7e:1d:62:94:1b:88:40:
fb:dd:f2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:49:20 2026 by rpki-client