Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: Ynm50+ZKNj2wTkF4etdua45ByoB9FIAlVBwTHAISQsE=
Subject key identifier: C3:1E:59:14:A7:98:9D:7F:E9:93:05:C6:13:98:2A:0B:0E:D1:6A:6F
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019F122EE1D90E229FC23ED99899C60B14DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 07:01:30 +0000
Manifest this update: Mon 29 Jun 2026 07:01:30 +0000
Manifest next update: Tue 30 Jun 2026 07:01:30 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: LQtxSoe1lxmSsB7BbtOVIjFfjqij24CEIukuNQ/T+48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:e1:d9:0e:22:9f:c2:3e:d9:98:99:c6:0b:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jun 29 07:01:30 2026 GMT
Not After : Jun 30 07:01:30 2026 GMT
Subject: CN=c31e5914a7989d7fe99305c613982a0b0ed16a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:5e:30:b4:b0:b0:9b:10:a6:40:67:98:31:
1a:8d:e0:6b:d4:73:34:58:d3:4d:ee:8c:16:70:c8:
a6:a4:82:a1:51:82:90:d8:72:dc:8f:32:30:03:2f:
d9:96:4e:94:c8:fb:b9:47:36:19:58:69:55:76:20:
f7:a0:1e:d7:5f:eb:b4:63:90:46:b9:ec:1c:e5:b1:
77:45:cb:d6:7e:a8:96:96:64:70:91:00:86:6b:bf:
be:1b:30:5b:58:5e:53:63:ef:b8:ad:f4:1b:60:f9:
d6:32:cb:5d:60:dc:08:ef:40:07:fb:44:f1:b5:7d:
29:b3:b1:6c:2b:ef:c4:13:08:5e:4a:c8:a5:eb:fe:
f9:bc:b4:cb:81:92:e3:a2:0c:bd:69:40:be:a1:bb:
30:85:f2:cb:fb:b5:b9:3c:fc:2e:d4:5d:c7:56:13:
c3:40:10:ee:a7:b0:b9:f5:49:99:4a:12:ac:a9:a2:
92:43:e5:ef:e1:48:f7:fe:54:63:1e:76:5b:d7:a9:
42:74:64:7d:2b:33:5e:7b:41:9b:0c:c4:3f:74:a2:
b7:6d:89:12:20:cf:68:e1:64:97:6f:ee:69:a8:34:
bd:6e:f4:3f:79:9e:bd:ae:1b:75:4c:58:a8:a9:37:
b5:ca:b8:ff:a1:15:9c:61:78:d8:2e:34:bd:73:72:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1E:59:14:A7:98:9D:7F:E9:93:05:C6:13:98:2A:0B:0E:D1:6A:6F
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b7:b6:18:6d:c8:da:c2:67:b7:39:5c:38:02:5b:71:b5:1e:
a9:13:71:86:de:43:81:1a:7a:ed:3f:f9:5c:76:86:a3:d0:79:
1b:2a:bb:ad:79:f1:e0:9f:e1:93:73:04:97:fb:8f:85:89:88:
24:01:9d:41:8b:0c:59:17:8b:0e:ef:17:11:d9:9c:22:17:51:
83:40:f1:71:51:a8:aa:54:cc:1a:0f:bf:04:ed:d1:13:79:87:
6e:a5:5f:3c:f6:03:bb:e8:2a:61:35:2e:c4:9b:b4:74:76:86:
c0:15:09:80:4d:0b:ed:a6:2d:80:37:6d:e6:1a:7f:2e:57:e2:
5b:1c:ad:e9:32:56:a4:58:40:20:a6:99:75:c8:b3:e6:9f:b2:
6b:e2:6b:6d:ad:e9:68:55:fc:85:eb:60:1c:d7:6e:40:8d:c9:
77:0a:1f:98:34:7c:96:cc:8e:80:3b:a7:6a:9b:f2:56:06:e9:
30:ce:dc:c8:61:2f:4d:01:e2:97:1e:1d:17:05:0e:21:58:af:
f2:3d:fe:27:db:fe:75:d5:00:87:5e:1d:14:e4:e6:9a:84:6f:
51:23:a9:8d:ec:6e:1e:74:52:e8:5a:92:77:e5:b1:88:1f:c6:
76:de:91:8c:bf:b6:ea:7c:88:6d:b6:59:50:7d:86:a0:79:65:
6c:2c:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:46:56 2026 by rpki-client