Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: z/9vGUAa9hoTr521aAUStvx4Gr67V/DRhiA5GUEvho4=
Subject key identifier: A2:CC:CE:37:7C:68:1C:1A:F4:25:FC:88:59:AB:AD:6D:E3:8D:BB:78
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 019D3909E642C9502E040084A3C24305B027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 1351
Signing time: Sun 29 Mar 2026 10:00:43 +0000
Manifest this update: Sun 29 Mar 2026 10:00:43 +0000
Manifest next update: Mon 30 Mar 2026 10:00:43 +0000
Files and hashes: 1: A0vguZeSZvjbO1iAp7ep30taXaU.roa (hash: OFdk7Efqg14eKcFzGkyEl7CmU/rQu1LKkHn7D4lTfd0=)
2: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: 0I02zlYALijPtpGS5dOrMRWeBG25raYvs1tC4L+disY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e6:42:c9:50:2e:04:00:84:a3:c2:43:05:b0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Mar 29 10:00:43 2026 GMT
Not After : Mar 30 10:00:43 2026 GMT
Subject: CN=a2ccce377c681c1af425fc8859abad6de38dbb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:62:6b:66:78:2d:f3:b7:a4:98:6e:96:59:
19:ed:7c:60:5d:c9:5f:e3:67:b4:d5:28:ad:d3:1d:
00:d4:04:cb:85:05:74:3e:86:66:a6:cd:e1:56:67:
f7:ac:a2:b7:0c:de:e5:e1:da:37:0e:15:e7:5e:c4:
f1:bb:fc:de:ed:13:50:79:fa:38:d8:22:c7:ce:a8:
4d:b4:c1:a6:6e:a0:50:37:33:4f:e9:93:d1:30:58:
b7:ee:09:7d:b8:1f:d6:35:ab:6a:36:14:8f:cf:14:
52:69:c9:88:62:51:e0:f5:62:a7:9d:7a:da:f3:2c:
b6:4d:14:5e:8f:46:a2:cf:94:57:81:f6:57:30:0b:
6b:07:7e:18:25:34:2b:90:4a:e7:3c:82:c2:d0:10:
09:32:00:54:f2:c8:ba:dd:c7:cd:01:1e:c3:8c:b2:
a6:96:82:93:db:aa:36:03:77:68:85:b4:7d:08:aa:
09:63:85:c2:c3:bd:32:d7:39:e5:1d:c4:2c:f4:0e:
60:ed:96:2a:44:ef:11:00:4e:18:d0:26:2c:20:43:
b6:41:61:d7:27:b0:f1:d3:0e:9a:e8:b1:a0:60:13:
a4:79:5d:1a:f6:34:92:eb:77:16:0e:a0:7b:38:fe:
48:80:80:5b:bd:78:09:43:68:fd:e2:d8:f7:c7:f9:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CC:CE:37:7C:68:1C:1A:F4:25:FC:88:59:AB:AD:6D:E3:8D:BB:78
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d3:da:b3:d0:67:d9:89:4c:ae:b6:98:b4:90:fe:46:9b:8a:
c8:87:46:4c:46:71:29:a5:41:6d:60:74:d8:62:80:4e:a9:5a:
6d:71:c2:73:91:41:5c:8c:e5:c7:13:3d:61:f6:dc:77:d9:29:
3e:fe:30:ad:10:c4:c2:5c:06:7a:59:4c:f0:3e:f0:f3:a5:a1:
41:21:6c:bb:7f:0b:0c:ae:b0:8a:05:4d:ef:11:80:d6:8f:08:
e4:bd:c9:7e:80:c4:98:da:1e:1b:51:9b:95:6e:97:d9:3d:b0:
4a:d6:a4:a5:45:c6:ba:d6:62:68:ea:45:74:bb:b8:45:4b:bd:
3e:d1:6a:ca:dd:ed:62:e8:9c:d8:e9:ed:38:01:25:15:07:45:
77:44:d1:bd:b9:5f:da:f6:9c:2a:dd:b7:8d:6f:d9:48:1f:55:
e2:4a:36:46:db:bc:ef:58:75:b5:a7:89:cf:e8:9c:d3:eb:5d:
dc:a2:aa:c6:26:12:d3:08:b3:90:5b:09:1b:fa:36:43:07:c3:
a8:d5:fe:57:f9:3b:67:b3:0c:20:06:75:50:d1:5e:03:d5:dc:
53:d2:9c:5f:5c:e6:5e:61:24:28:9e:91:e0:59:e2:d1:37:ef:
89:96:80:88:4e:53:e3:b6:e7:84:20:16:fc:3d:d9:7b:81:97:
44:0d:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:33 2026 by rpki-client