Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: rJSa5xqacBQ81eRWfqLmzCi7AMvfBkibkgMFCOrvi9Y=
Subject key identifier: 7B:7A:A2:29:EE:43:B8:8B:19:54:32:B2:34:C3:D6:82:29:2A:82:3D
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019E2A70B4F47751AAD8112BFE7AC4F5B1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 190E
Signing time: Fri 15 May 2026 07:01:29 +0000
Manifest this update: Fri 15 May 2026 07:01:29 +0000
Manifest next update: Sat 16 May 2026 07:01:29 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: B7mJDPuLK2hm/H398UTnhbkfxMzriATFFeQV+4kFcQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:b4:f4:77:51:aa:d8:11:2b:fe:7a:c4:f5:b1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: May 15 07:01:29 2026 GMT
Not After : May 16 07:01:29 2026 GMT
Subject: CN=7b7aa229ee43b88b195432b234c3d682292a823d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:be:c1:a4:37:fa:0a:b4:9c:40:99:54:b4:
d5:7b:4a:b9:4a:3b:21:03:eb:9e:fa:17:a5:7a:11:
46:37:07:02:bb:03:1f:e5:51:ed:69:f0:6f:42:1a:
76:50:86:1f:ca:e9:57:cc:46:bd:aa:8f:35:2f:53:
04:94:31:bf:96:93:cd:af:e0:8a:4e:5d:d0:6e:a4:
31:a1:6d:50:b4:fd:0c:13:47:48:0b:5c:c7:a9:7c:
61:72:4f:8c:21:6f:f3:6f:7c:80:e2:af:e5:5f:e2:
11:be:7e:00:5a:58:c4:ad:d5:ba:ff:65:92:fc:f0:
3b:fa:f5:be:c2:89:ad:f0:93:92:7c:9b:29:d3:3e:
b8:bb:8f:aa:37:b8:48:32:f1:04:4f:04:d2:91:4a:
cc:2f:1f:fe:a3:3d:cc:8b:5f:58:44:85:11:8e:94:
b9:c3:7a:f7:47:bb:63:67:aa:a7:ce:66:a0:f0:3f:
4a:8b:6d:7c:eb:3e:f1:fa:19:17:bd:3f:c6:0e:22:
9d:c4:93:6e:92:19:6f:2b:18:b3:85:5d:fc:c9:df:
dd:2e:bc:b7:89:2a:c9:46:b5:d0:96:48:28:30:4a:
65:03:2d:cf:36:43:7e:94:ea:c3:62:9e:57:3c:e6:
1a:d1:82:a3:42:c1:09:ea:3a:42:22:b0:7f:50:0c:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:A2:29:EE:43:B8:8B:19:54:32:B2:34:C3:D6:82:29:2A:82:3D
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4a:96:20:10:12:d6:5f:8e:b5:a4:d2:5b:46:5a:ec:63:18:
63:7f:6c:89:42:c5:4c:cc:64:fe:1e:a0:75:41:b8:03:51:e8:
cc:5a:0e:6e:b1:e5:35:e8:c6:94:a1:d4:33:e2:7b:a2:de:16:
65:ad:fc:e5:f9:35:77:ba:87:fa:c7:63:1e:30:dd:bb:4f:bf:
65:19:4a:7e:a4:88:77:2f:a5:10:06:27:57:25:ad:de:ca:a6:
be:37:70:e3:c8:9f:2b:74:07:c5:d3:99:8e:dd:48:8e:d5:47:
75:01:a4:55:c9:a2:a1:14:6c:91:95:d5:1c:7b:4e:28:4c:19:
26:0c:fa:cb:37:44:27:02:ef:1b:92:65:32:9d:3a:b9:8c:f3:
af:c6:09:2c:22:75:9b:bb:e3:e9:c6:78:d8:6a:28:e7:7a:27:
51:f4:7b:a0:93:33:30:6f:de:b6:44:da:ab:fb:58:6d:55:b4:
8e:64:84:57:10:aa:d1:c9:ae:c1:fd:d0:3c:15:0d:1b:d9:10:
fb:79:a5:5b:8d:a3:1b:f0:81:9a:97:c8:9c:27:4e:bd:be:30:
b7:eb:34:69:39:7c:33:0a:c9:1d:b5:eb:df:26:80:74:a3:a4:
2a:87:12:a5:c4:d6:5e:54:f1:8d:0c:d6:ad:e7:89:01:95:09:
a8:e6:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:55:15 2026 by rpki-client