Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
File: ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft (raw, json)
Hash identifier: L6MbGlQgQA6h6Y9LPj6zicAO1vHU7OdEQosv/xFMxfI=
Subject key identifier: 13:20:A1:A4:ED:2B:9C:7B:08:D2:B5:B8:06:15:E4:9B:4B:BE:A3:08
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Certificate issuer: /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial: 019FCB5DABC70BA3CC64819935FA1577A2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
Manifest number: 0DCC
Signing time: Tue 04 Aug 2026 06:02:21 +0000
Manifest this update: Tue 04 Aug 2026 06:02:21 +0000
Manifest next update: Wed 05 Aug 2026 06:02:21 +0000
Files and hashes: 1: 1gk0sLtkOinOBhMkUiRN6708AVA.roa (hash: qx4BeBMu/olO2Xz1c+ij7UE+dLcw4YvlNY6rUOImv/o=)
2: ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl (hash: ra3C3C+KlLs2sfIjBcBZJGXD3yk9dpt8sKcnpaXQzYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5d:ab:c7:0b:a3:cc:64:81:99:35:fa:15:77:a2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Validity
Not Before: Aug 4 06:02:21 2026 GMT
Not After : Aug 5 06:02:21 2026 GMT
Subject: CN=1320a1a4ed2b9c7b08d2b5b80615e49b4bbea308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:dd:2c:f3:b9:5b:ea:48:9a:96:f9:6b:aa:
95:09:4c:d5:df:17:2d:71:0d:26:c1:a4:f9:f7:69:
8e:55:a7:2a:3e:76:f5:3e:17:10:ca:5a:e1:e7:78:
49:31:b4:a6:31:5d:fa:1d:25:24:6b:85:9b:60:81:
46:70:bb:2d:55:19:a6:ce:79:ed:1f:34:ee:37:3f:
13:72:d6:c5:7b:cf:da:6b:2b:df:5c:de:3e:88:00:
a8:98:3d:cc:14:8a:dc:dd:1e:1d:8e:fb:fa:99:be:
86:d7:98:82:af:80:e7:2e:4d:30:2d:b2:40:20:28:
3c:61:45:da:50:24:e9:f9:c3:52:e5:fb:7d:b0:2f:
62:8a:b1:1a:7a:dc:7c:f1:e0:37:4e:f4:24:e9:e7:
3c:5f:3a:ad:f3:72:c0:0a:24:e0:80:c3:e1:0b:ad:
ba:81:03:0d:3d:79:df:29:2e:24:14:b9:c8:d6:7f:
dc:28:07:ff:ed:b0:2f:36:22:f4:6b:61:f2:4f:73:
98:a9:ba:36:b9:97:5d:7c:25:0e:25:0c:b4:e5:e3:
cc:24:66:b7:4d:74:cb:88:35:b2:02:2d:bb:7e:09:
e6:3c:d8:9d:89:75:c9:44:b6:c3:2a:eb:c2:7f:0a:
37:fe:11:d8:d1:58:50:7e:cd:17:11:46:73:bb:dc:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:20:A1:A4:ED:2B:9C:7B:08:D2:B5:B8:06:15:E4:9B:4B:BE:A3:08
X509v3 Authority Key Identifier:
keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:39:4b:81:1f:b5:df:00:95:bd:0f:6f:39:95:13:81:7d:
38:2c:0b:28:af:8e:24:24:29:c6:6e:6a:4a:6b:84:eb:ee:eb:
56:0f:a6:fc:9d:a7:ed:98:0a:73:83:4a:ea:2a:95:5c:c3:7d:
f8:af:c7:b6:05:15:0b:23:b6:77:11:63:78:1f:fb:de:50:0c:
1f:08:56:35:6d:b2:7a:e3:27:c9:4a:3f:2b:1d:78:f9:a8:32:
d9:33:42:03:2d:de:7c:40:51:da:f0:0c:50:07:af:a3:c3:82:
6b:5d:16:59:ad:74:a8:29:a4:58:02:f6:9e:21:65:c0:10:0d:
bf:51:2f:5a:66:b8:a5:1c:82:f8:50:c6:1e:8b:0a:9c:d3:39:
d7:c6:72:f7:d5:6b:1c:89:01:16:c1:8e:7a:49:20:d8:f2:03:
7c:cb:84:ad:33:96:77:bb:4d:9f:e3:3c:58:60:90:55:4c:86:
05:09:70:93:b6:9d:fc:f1:e8:df:74:6d:17:4e:a8:40:19:19:
50:ec:f1:ed:16:dc:cc:f9:02:87:45:70:dd:38:a2:27:3a:63:
13:f9:7f:f8:a7:4f:6a:5f:9e:9e:1a:6f:18:4c:ad:40:77:28:
fa:f7:b5:fa:88:bb:11:c2:b2:dd:8b:5e:c5:bd:80:52:ca:e6:
fb:70:92:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/LXavHC6PMZIGZNfoVd6LKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZjdmMzJkMzNmNjY0Njc3OWE1MWZiMjMyMDFjNjQ0MmQx
NDUxY2EwHhcNMjYwODA0MDYwMjIxWhcNMjYwODA1MDYwMjIxWjAzMTEwLwYDVQQD
EygxMzIwYTFhNGVkMmI5YzdiMDhkMmI1YjgwNjE1ZTQ5YjRiYmVhMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve7dLPO5W+pImpb5a6qVCUzV3xct
cQ0mwaT592mOVacqPnb1PhcQylrh53hJMbSmMV36HSUka4WbYIFGcLstVRmmznnt
HzTuNz8TctbFe8/aayvfXN4+iAComD3MFIrc3R4djvv6mb6G15iCr4DnLk0wLbJA
ICg8YUXaUCTp+cNS5ft9sC9iirEaetx88eA3TvQk6ec8Xzqt83LACiTggMPhC626
gQMNPXnfKS4kFLnI1n/cKAf/7bAvNiL0a2HyT3OYqbo2uZddfCUOJQy05ePMJGa3
TXTLiDWyAi27fgnmPNidiXXJRLbDKuvCfwo3/hHY0VhQfs0XEUZzu9zIXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMgoaTtK5x7CNK1uAYV5JtLvqMIMB8GA1UdIwQY
MBaAFIr38y0z9mRneaUfsjIBxkQtFFHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZmekxUUDJaR2Q1cFIteU1nSEdSQzBVVWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hZmZjYmItYzFiMy00NDRhLTg3NmMt
NWI3MmZiOTI3ZDFjLzEvaXZmekxUUDJaR2Q1cFIteU1nSEdSQzBVVWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hZmZjYmItYzFiMy00NDRhLTg3NmMtNWI3MmZiOTI3ZDFj
LzEvaXZmekxUUDJaR2Q1cFIteU1nSEdSQzBVVWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXs5S4Ef
td8Alb0PbzmVE4F9OCwLKK+OJCQpxm5qSmuE6+7rVg+m/J2n7ZgKc4NK6iqVXMN9
+K/HtgUVCyO2dxFjeB/73lAMHwhWNW2yeuMnyUo/Kx14+agy2TNCAy3efEBR2vAM
UAevo8OCa10WWa10qCmkWAL2niFlwBANv1EvWma4pRyC+FDGHosKnNM518Zy99Vr
HIkBFsGOekkg2PIDfMuErTOWd7tNn+M8WGCQVUyGBQlwk7ad/PHo33RtF06oQBkZ
UOzx7RbczPkCh0Vw3TiiJzpjE/l/+KdPal+enhpvGEytQHco+ve1+oi7EcKy3Yte
xb2AUsrm+3CSAA==
-----END CERTIFICATE-----
Generated at Tue Aug 4 13:56:01 2026 by rpki-client