Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: HxMyZkuDAWuuPRdrwhoOipknI66sNYBcr2jBnffNKS8=
Subject key identifier: 44:C6:06:42:75:1F:F9:EB:44:41:F1:9E:DC:DD:54:D3:58:16:42:32
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019D2F6247419145FE171C562877DA641876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 188C
Signing time: Fri 27 Mar 2026 13:01:02 +0000
Manifest this update: Fri 27 Mar 2026 13:01:02 +0000
Manifest next update: Sat 28 Mar 2026 13:01:02 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: vPDzyk7I1NVqkT6qpGkuhk5m/QT+4WXhvMrTrXNLKVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:62:47:41:91:45:fe:17:1c:56:28:77:da:64:18:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Mar 27 13:01:02 2026 GMT
Not After : Mar 28 13:01:02 2026 GMT
Subject: CN=44c60642751ff9eb4441f19edcdd54d358164232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:c4:5b:73:46:d9:44:7b:f6:5e:50:14:d8:
93:93:2b:cc:d6:c2:ec:f7:ec:57:82:3d:ad:08:d8:
ab:dd:41:03:ce:80:f8:ba:8d:68:de:64:34:1c:00:
90:a4:98:5d:e3:92:64:dd:aa:0f:1a:82:ee:ec:ae:
4a:d6:08:e2:dd:c8:a4:54:c2:65:50:ec:87:23:39:
d0:e1:8b:3d:b5:30:79:24:8c:35:04:ee:60:94:e7:
e0:9e:46:90:da:6f:de:93:2f:a6:05:67:4e:ff:19:
fd:45:c1:aa:42:75:a0:25:c6:ce:0d:1c:2a:65:0b:
41:e4:0f:a7:3d:f7:3a:ee:80:3f:30:ca:ab:dc:15:
43:42:5f:a6:5e:1c:b3:43:d8:59:85:9d:d3:83:01:
31:64:0d:74:83:f2:1f:ed:d8:5d:5e:18:6f:7a:bc:
47:07:db:43:46:0e:99:9b:25:fe:77:e0:5b:46:62:
de:74:f4:a4:fa:70:b5:4e:79:4b:9a:ea:42:54:d2:
02:41:fd:2e:31:44:3b:66:32:4f:6e:2a:68:96:2d:
37:e4:99:f7:22:56:0f:91:ab:ba:75:66:00:97:e9:
49:65:93:86:2d:36:70:4d:a4:5c:d3:2c:93:17:25:
76:b7:ae:f4:29:69:45:ff:17:a0:8a:fa:9c:b5:41:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C6:06:42:75:1F:F9:EB:44:41:F1:9E:DC:DD:54:D3:58:16:42:32
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ec:63:1f:d5:85:34:34:07:b1:bc:8d:4d:23:f9:55:ed:4e:
f8:9e:ce:b4:3d:9e:ec:78:17:3d:3a:71:b7:3c:6c:cd:e1:7a:
92:7a:fa:85:92:17:35:ef:c9:e8:0e:b9:92:28:0e:c2:c8:1c:
59:82:76:1e:e5:42:38:8a:ff:3e:ea:a6:f3:44:f4:f4:e6:d8:
bb:72:4e:fd:c2:9e:6d:7b:30:64:dd:a7:55:ce:d7:6d:40:61:
75:56:0b:a1:ff:94:dd:6e:32:10:da:90:b6:25:15:e7:a8:f8:
ae:75:00:a8:28:1a:0b:51:9e:bb:b2:b0:cc:50:0d:e2:f5:50:
07:22:d5:e7:ee:42:29:98:bc:a1:1a:3a:35:d1:f1:31:40:e5:
65:5a:2c:c9:f1:97:5d:a5:a9:a4:8f:27:6d:c1:fb:d6:ac:08:
d1:0d:b0:d0:da:59:37:2c:50:71:ae:66:81:a7:bf:63:af:ac:
8f:3b:ea:73:bf:eb:07:38:0d:bb:51:b9:9b:d9:e3:bb:f2:2c:
b4:e2:76:4a:c8:83:07:8b:8b:63:84:fe:59:eb:e0:5d:4c:cd:
f0:a9:7f:97:60:23:45:60:ca:96:ec:a3:00:c6:eb:bd:f2:9d:
bf:31:d7:13:bc:e6:24:28:3e:06:dc:a4:d5:74:be:87:15:40:
a7:64:69:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 16:09:33 2026 by rpki-client