Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
File: ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft (raw, json)
Hash identifier: LDptCmHrY8dkCyhiX17Q5+e33BgnyiSDqcZbO1vSCpA=
Subject key identifier: 41:DA:AC:6D:82:B4:BB:22:57:D5:88:19:1E:01:4A:AE:9F:4A:75:A8
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Certificate issuer: /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial: 01A0B5096D4FE12F727609F659E5C42495E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
Manifest number: 0E45
Signing time: Fri 18 Sep 2026 15:01:28 +0000
Manifest this update: Fri 18 Sep 2026 15:01:28 +0000
Manifest next update: Sat 19 Sep 2026 15:01:28 +0000
Files and hashes: 1: 1gk0sLtkOinOBhMkUiRN6708AVA.roa (hash: qx4BeBMu/olO2Xz1c+ij7UE+dLcw4YvlNY6rUOImv/o=)
2: ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl (hash: zQSah54AqJiTDBUMat1tYV8rd6Flfd9OFz+BzkVF37Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:09:6d:4f:e1:2f:72:76:09:f6:59:e5:c4:24:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Validity
Not Before: Sep 18 15:01:28 2026 GMT
Not After : Sep 19 15:01:28 2026 GMT
Subject: CN=41daac6d82b4bb2257d588191e014aae9f4a75a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:8d:20:f6:7f:f5:c5:6a:36:2d:ae:1e:4b:
00:06:fa:24:59:e2:43:5a:32:ad:6c:5b:f2:ec:78:
f8:2b:32:1f:f9:e3:2d:4d:b4:c6:ae:7d:c2:c4:1e:
7e:9c:17:67:21:ec:bb:d8:1a:b1:4f:4e:6b:14:c4:
0c:ae:0a:31:dc:a2:da:03:94:db:60:37:eb:ee:ee:
bd:58:18:12:5e:02:59:91:3b:d9:e3:84:f8:da:f2:
f0:11:29:5d:13:e3:1a:25:3b:13:6d:d1:90:4f:a5:
33:dc:c0:16:47:6e:07:7c:13:97:2a:34:7c:69:f4:
94:e1:91:68:44:86:d0:ac:a1:c2:47:9c:f5:6b:15:
55:3a:2b:f5:ea:03:60:91:57:a6:0f:6c:f6:41:f0:
55:30:70:84:a9:d2:da:6a:8a:8d:2a:4f:ee:a3:e1:
14:84:5d:a2:68:21:8f:65:ae:49:6e:0d:92:ef:f7:
8b:45:bd:13:0f:f8:89:9f:c9:8c:70:fc:23:fa:82:
dc:e4:1c:c9:90:c3:e6:3a:9b:d6:12:ee:ff:ae:2c:
3c:c0:42:c4:d7:5d:f5:ca:68:5b:34:07:c8:f0:1c:
8a:3e:0e:2f:f9:4a:30:d8:1a:7d:c3:98:e6:bb:56:
fc:f7:53:ad:72:76:e0:ae:c1:f7:45:ac:38:17:df:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DA:AC:6D:82:B4:BB:22:57:D5:88:19:1E:01:4A:AE:9F:4A:75:A8
X509v3 Authority Key Identifier:
keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:bb:e1:a4:48:7e:50:91:e5:ad:50:e9:ee:6e:5e:d0:8f:
d8:b3:b6:49:3a:3c:99:c7:1a:20:1b:05:3b:d6:b3:51:dc:04:
e5:06:12:6b:90:ef:9c:b1:cd:70:8b:59:0d:b2:90:45:aa:51:
bd:02:6d:58:cc:f2:bb:bb:e4:97:2b:d0:51:42:46:01:d8:c2:
48:d3:f3:e6:b9:28:5c:1c:eb:16:76:21:95:fc:9d:78:ae:7a:
fa:ed:c9:bd:84:d2:38:20:08:ef:bc:db:6f:f7:63:62:35:e2:
b0:f2:ce:2c:20:26:27:62:ae:93:40:08:df:90:e7:64:1b:76:
93:ba:f4:69:94:c1:77:ba:7a:e7:4c:57:d0:7c:2b:f1:f2:43:
ff:61:eb:ca:c9:39:57:6b:f1:6d:a2:97:a8:0b:9d:fd:d4:58:
d9:79:6b:fd:fa:ef:90:05:02:33:14:69:f4:0b:d8:97:f9:0f:
2f:17:1c:ac:3f:78:cc:09:7d:fc:b4:ed:b9:8d:61:d5:90:f1:
1a:41:3f:bb:cf:56:7f:99:6c:4c:aa:a5:6b:f5:3f:df:c6:b9:
41:d9:36:60:ca:57:b1:d9:10:37:42:94:88:36:a2:5d:8a:a0:
6a:33:2c:14:dd:f7:60:05:1e:4a:be:21:3b:69:f0:cb:ac:f1:
b7:a7:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:01:38 2026 by rpki-client