Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: Sd63L7RxhO/rkAFTlCXwjHXNcgES4xKvuZ9DTIMDNiI=
Subject key identifier: FD:BD:D7:E3:54:42:8A:C3:3C:69:41:97:93:CC:5A:D2:13:3A:CF:EB
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 019D389BF2B3C65FC1161BB83B156A30CCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 164E
Signing time: Sun 29 Mar 2026 08:00:37 +0000
Manifest this update: Sun 29 Mar 2026 08:00:37 +0000
Manifest next update: Mon 30 Mar 2026 08:00:37 +0000
Files and hashes: 1: 3oGVu0O8WvuLGv8f2Jt9dxPSv2A.roa (hash: 4mJ9zwVzZQxqJbzR75wLCS8IQ+/ppt2TeN93BoHL9DY=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: 2Z+ozUWIBC9NIkM6zi2FSyRmXZex3Rast0pTzeOliGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f2:b3:c6:5f:c1:16:1b:b8:3b:15:6a:30:cc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Mar 29 08:00:37 2026 GMT
Not After : Mar 30 08:00:37 2026 GMT
Subject: CN=fdbdd7e354428ac33c69419793cc5ad2133acfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:27:a7:b4:9e:db:e6:68:2f:f8:3e:c0:0c:
4c:8c:09:31:c6:47:a0:3d:28:38:40:e8:e5:5f:b4:
b7:23:23:7e:e5:42:a6:bd:92:8a:ae:25:11:31:2b:
6a:4a:45:7d:39:ab:80:3f:c3:b3:bf:e7:8b:1a:b3:
d6:02:50:8c:5d:19:64:ad:25:c6:69:2f:66:11:b7:
3e:d4:98:bf:fa:82:75:e7:9d:e1:d9:9c:5d:7c:3f:
cc:69:cd:19:45:06:2b:53:43:5e:77:69:0d:9b:db:
79:1b:7c:0b:07:69:aa:25:81:42:5f:46:9d:a9:4d:
e1:48:a5:5e:1e:fa:bb:44:a6:10:8b:ef:3f:9f:64:
75:a9:3a:a2:91:4f:37:af:da:5b:c3:77:e0:3d:9e:
fc:41:ea:bd:79:30:55:bb:c5:55:e0:21:4b:d2:5e:
f7:cb:9f:ac:c9:46:04:61:18:a3:93:fc:3e:36:96:
ec:f4:ed:45:98:0d:0f:9a:d8:77:7c:4d:6a:0f:55:
52:dc:78:be:5b:60:05:be:3f:fc:e8:ae:fd:76:33:
7c:6e:00:4a:05:f4:67:c9:96:58:59:88:20:6e:2b:
52:58:c8:80:a3:88:fe:74:0e:d9:18:16:26:4f:4d:
f6:47:0f:e2:fc:56:82:5a:17:8e:1b:09:eb:86:c5:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:D7:E3:54:42:8A:C3:3C:69:41:97:93:CC:5A:D2:13:3A:CF:EB
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:aa:9a:7e:bf:a8:51:48:a7:26:bd:63:61:68:2c:41:5d:d4:
8c:e8:fc:2d:44:41:15:cd:86:53:ce:43:dd:1d:3c:1e:25:a5:
5f:54:13:cc:1c:50:4d:a3:4e:de:86:1f:b2:91:5c:fd:93:aa:
3c:65:cd:e6:ee:69:f3:9c:85:de:30:f5:23:c8:2e:43:52:87:
f2:60:60:19:08:d9:09:ff:14:38:f7:38:a8:1b:35:b6:4d:2f:
28:b8:4c:25:de:af:e3:fb:9f:52:0c:00:04:e7:a8:0b:65:3f:
55:69:94:ca:18:dd:40:5b:b5:2b:a3:05:eb:46:19:a9:6b:4f:
13:9c:1a:ee:51:07:61:7d:4d:80:58:9a:6c:c2:be:66:51:bf:
3f:28:92:48:af:f7:dc:af:b8:f1:be:f9:e2:45:11:2e:0b:0d:
6a:65:f8:3d:8e:6b:46:cd:0d:b3:18:c1:5f:b4:7d:a7:7c:fa:
0f:cc:fb:1c:8f:14:f0:4c:fe:59:fa:52:1c:da:df:b8:31:9f:
70:e9:64:1e:1f:29:1d:c5:90:80:10:06:00:cd:7b:8e:bb:51:
73:be:d5:d6:49:23:3a:a7:2e:f9:af:96:a8:1c:43:98:fd:ef:
04:a7:f7:15:b9:ac:89:fc:34:18:3a:0d:66:80:f2:d8:aa:8e:
43:14:a4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/Kzxl/BFhu4OxVqMMy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZmJjNjRkNTkzZmMwNzNjNjkzMTQzNTY2MzEwMjk1ZGUw
YTgzMzcwHhcNMjYwMzI5MDgwMDM3WhcNMjYwMzMwMDgwMDM3WjAzMTEwLwYDVQQD
EyhmZGJkZDdlMzU0NDI4YWMzM2M2OTQxOTc5M2NjNWFkMjEzM2FjZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19snp7Se2+ZoL/g+wAxMjAkxxkeg
PSg4QOjlX7S3IyN+5UKmvZKKriURMStqSkV9OauAP8Ozv+eLGrPWAlCMXRlkrSXG
aS9mEbc+1Ji/+oJ1553h2ZxdfD/Mac0ZRQYrU0Ned2kNm9t5G3wLB2mqJYFCX0ad
qU3hSKVeHvq7RKYQi+8/n2R1qTqikU83r9pbw3fgPZ78Qeq9eTBVu8VV4CFL0l73
y5+syUYEYRijk/w+Npbs9O1FmA0Pmth3fE1qD1VS3Hi+W2AFvj/86K79djN8bgBK
BfRnyZZYWYggbitSWMiAo4j+dA7ZGBYmT032Rw/i/FaCWheOGwnrhsX0QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP291+NUQorDPGlBl5PMWtITOs/rMB8GA1UdIwQY
MBaAFIr7xk1ZP8BzxpMUNWYxApXeCoM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQt
MTA5N2RhOWRkZjI3LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQtMTA5N2RhOWRkZjI3
LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6qafr+o
UUinJr1jYWgsQV3UjOj8LURBFc2GU85D3R08HiWlX1QTzBxQTaNO3oYfspFc/ZOq
PGXN5u5p85yF3jD1I8guQ1KH8mBgGQjZCf8UOPc4qBs1tk0vKLhMJd6v4/ufUgwA
BOeoC2U/VWmUyhjdQFu1K6MF60YZqWtPE5wa7lEHYX1NgFiabMK+ZlG/PyiSSK/3
3K+48b754kURLgsNamX4PY5rRs0NsxjBX7R9p3z6D8z7HI8U8Ez+WfpSHNrfuDGf
cOlkHh8pHcWQgBAGAM17jrtRc77V1kkjOqcu+a+WqBxDmP3vBKf3Fbmsifw0GDoN
ZoDy2KqOQxSk5w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:21 2026 by rpki-client