Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: S6CpwntGaIOhHCq3rqUG+eRxmeXhMKpTFSzBfjnD7tU=
Subject key identifier: 20:7A:88:7C:ED:92:BB:65:90:44:A6:3D:6E:34:A6:F0:98:BD:68:FF
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 01A03F72CCAB94F62536EE5E44850C433397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1A22
Signing time: Wed 26 Aug 2026 19:01:23 +0000
Manifest this update: Wed 26 Aug 2026 19:01:23 +0000
Manifest next update: Thu 27 Aug 2026 19:01:23 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: wW+pTb0kZ3j45V71MHJcxK1f5563k5bROAlcolIOdGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:cc:ab:94:f6:25:36:ee:5e:44:85:0c:43:33:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Aug 26 19:01:23 2026 GMT
Not After : Aug 27 19:01:23 2026 GMT
Subject: CN=207a887ced92bb659044a63d6e34a6f098bd68ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:a7:24:e5:a8:15:1b:49:bd:6e:48:fc:0d:
67:ca:bf:29:3a:7b:0d:fe:b4:89:08:14:cc:90:a2:
c5:32:cf:a7:99:13:93:b0:71:03:39:d9:aa:b1:1f:
33:e6:dd:47:a5:85:ca:0f:e8:7e:ba:87:9b:27:22:
20:2d:41:43:d5:00:44:5a:5c:7e:db:2c:f7:af:7a:
89:aa:b3:d2:cc:09:26:3c:6e:46:3a:78:ae:b7:60:
f0:95:4d:83:14:cb:3b:ca:25:56:0c:c8:ad:1c:db:
39:61:2d:ad:b3:f2:29:b3:5d:95:17:a0:b8:0a:f4:
28:9e:09:3d:a9:10:35:9e:cc:41:57:ef:05:18:2a:
ba:de:15:36:d9:dc:6b:a3:44:26:3c:38:b4:b4:7a:
9b:a0:82:79:45:a7:b6:e7:aa:8a:17:6d:eb:e6:33:
aa:33:f1:d8:54:a9:fb:02:fc:26:b6:9c:d0:02:6a:
1d:ee:0f:77:94:ab:d4:d1:f0:ea:c3:99:40:1f:65:
89:37:84:ed:55:03:50:80:1e:56:18:19:d3:93:35:
50:4e:64:b2:92:80:57:f3:f1:f1:bc:02:9a:0e:58:
5c:73:3a:64:4f:60:dd:47:83:1f:cc:8e:e4:3f:67:
70:b9:33:f1:fc:ef:c5:e1:51:74:29:12:7a:2e:f3:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7A:88:7C:ED:92:BB:65:90:44:A6:3D:6E:34:A6:F0:98:BD:68:FF
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bf:8a:96:a6:21:b1:57:16:53:c7:36:63:1e:33:d1:93:aa:
57:53:bf:94:81:d1:cf:14:34:bf:52:e7:3b:87:29:b2:f4:53:
94:bb:6c:ee:7f:eb:62:5e:0b:53:29:11:84:04:9d:6e:a6:80:
39:45:73:85:f1:59:93:c9:0d:ed:02:53:eb:7e:71:c4:97:02:
7c:a2:15:66:25:aa:c3:b4:9c:03:c8:35:20:6e:9f:05:99:10:
c6:71:a8:ce:03:20:0a:39:9f:57:7b:53:0b:25:97:0f:9b:ec:
56:33:6e:f8:74:2f:b2:5d:84:a6:03:f0:27:f7:e9:b9:46:bf:
0c:7e:fc:e5:3e:91:9b:7d:d1:9f:64:80:29:d8:3d:27:dc:05:
f6:41:97:59:f1:71:2f:a3:a2:cf:0a:9f:01:46:ec:93:a2:a5:
dc:49:6e:32:f1:80:b4:79:3e:34:53:b1:df:17:58:d7:96:fe:
55:97:48:e9:7d:34:c9:9e:51:f7:09:d3:d3:82:6e:1b:b2:39:
57:aa:b2:fd:29:c9:23:fb:47:4b:6d:e1:53:ca:af:59:cc:d7:
9d:78:d7:c5:7f:6e:4e:57:e1:c3:68:a3:03:20:81:eb:c3:37:
5e:34:a2:97:0d:c7:e4:b7:09:fd:a8:3a:94:7b:f4:31:3e:21:
4e:c8:11:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:43:12 2026 by rpki-client