Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: G53vEwx9mFV6Wqmht6jFbb8ycxHYeUCvw9ACjQrNtEk=
Subject key identifier: 49:6F:67:8A:AF:8D:43:35:A3:57:7C:5E:F7:F8:A5:32:31:6F:4E:80
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 01A026FC34E034925F97431AE7AF1AF6F758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 19A7
Signing time: Sat 22 Aug 2026 01:00:57 +0000
Manifest this update: Sat 22 Aug 2026 01:00:57 +0000
Manifest next update: Sun 23 Aug 2026 01:00:57 +0000
Files and hashes: 1: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (hash: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk=)
2: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: VR9IEXvWqilXYdwlSFSTFE7kpPOgD2dPpbyRAbRmzdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:fc:34:e0:34:92:5f:97:43:1a:e7:af:1a:f6:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Aug 22 01:00:57 2026 GMT
Not After : Aug 23 01:00:57 2026 GMT
Subject: CN=496f678aaf8d4335a3577c5ef7f8a532316f4e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:7c:0c:a7:ba:9a:58:d1:ea:23:04:7a:d6:
3e:6b:a2:0a:47:32:25:05:dc:c3:fd:00:ba:e5:99:
20:aa:7e:fd:6b:e6:47:a7:a3:4b:fb:8f:76:3b:7e:
fb:62:dc:07:f6:90:00:80:bf:5f:7a:ef:bd:10:8e:
0f:36:9f:9b:04:55:6b:78:fb:18:8e:b2:a1:8b:e5:
4d:ae:7e:00:93:56:da:ee:9e:5c:e3:a5:bc:37:b3:
bc:8a:7f:de:fb:79:c0:06:8d:1a:15:dd:18:3d:60:
cc:bf:57:53:ad:39:8d:81:91:5b:c4:4e:f9:a5:88:
f9:4e:be:56:82:91:25:11:51:cd:18:97:7c:c4:29:
e3:60:34:d4:1f:c9:3a:26:be:83:64:e5:6d:95:df:
ec:38:e3:54:01:f0:79:4f:08:91:01:77:39:5a:f7:
79:2a:09:fa:fa:c6:80:3a:92:7a:8d:89:e6:ed:16:
93:f3:56:ed:8e:12:9c:51:fd:4a:f7:d3:40:41:a5:
d5:fe:b2:09:93:7b:5e:3d:9a:17:12:90:36:0d:61:
8c:fd:ba:0c:45:52:1a:2a:45:d6:bd:d5:23:31:da:
bf:0c:cd:49:4e:e5:df:95:2f:e7:ea:97:1c:6b:d5:
34:30:a5:2c:81:b8:79:ab:01:83:c6:70:a7:16:03:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:67:8A:AF:8D:43:35:A3:57:7C:5E:F7:F8:A5:32:31:6F:4E:80
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:75:e4:38:f1:85:8a:db:32:a5:63:f1:16:71:17:38:e9:b5:
82:1b:af:42:37:05:8d:26:58:ca:7e:2b:37:5e:2b:a7:78:94:
f7:47:e6:86:90:15:f2:51:aa:12:ba:a1:12:c4:db:3d:93:1c:
ac:4d:82:84:97:08:1c:90:dc:a8:ea:6f:7f:07:6b:b1:01:92:
a3:ee:6c:aa:4c:a1:55:3b:91:ee:8c:6b:96:95:ef:7f:ca:51:
93:f3:5d:10:e0:45:08:77:78:55:cf:1b:37:15:52:db:68:74:
bd:45:8a:8d:4e:35:41:25:31:ef:43:22:c3:ed:0b:c5:b3:93:
77:8f:b5:a9:64:1e:1a:5e:6d:3d:56:f2:ce:54:89:d1:8a:93:
b9:13:75:4e:81:13:1d:c5:79:80:3d:38:41:93:3b:68:09:6b:
3f:63:75:21:dd:3f:59:2c:2c:94:0d:78:45:41:2a:6b:ba:9d:
33:3e:72:dc:32:dd:42:25:3e:c7:8e:41:6f:c8:ef:4c:41:31:
c0:1b:14:f6:ba:12:8b:d4:89:b3:42:da:af:fe:5a:c0:d0:d4:
2a:41:a0:f1:cc:88:54:5a:5b:35:91:a9:29:c0:f9:a0:67:7d:
06:c5:2c:f8:8d:c1:e3:7e:cb:94:21:e0:d4:db:ef:fe:61:7b:
4b:be:05:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAm/DTgNJJfl0Ma568a9vdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMThlZjA4YjU1ZGRiMjBjODgxNmE2MjFhNDU5Y2RiOTI3
YjMyMDEwHhcNMjYwODIyMDEwMDU3WhcNMjYwODIzMDEwMDU3WjAzMTEwLwYDVQQD
Eyg0OTZmNjc4YWFmOGQ0MzM1YTM1NzdjNWVmN2Y4YTUzMjMxNmY0ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaB8DKe6mljR6iMEetY+a6IKRzIl
BdzD/QC65Zkgqn79a+ZHp6NL+492O377YtwH9pAAgL9feu+9EI4PNp+bBFVrePsY
jrKhi+VNrn4Ak1ba7p5c46W8N7O8in/e+3nABo0aFd0YPWDMv1dTrTmNgZFbxE75
pYj5Tr5WgpElEVHNGJd8xCnjYDTUH8k6Jr6DZOVtld/sOONUAfB5TwiRAXc5Wvd5
Kgn6+saAOpJ6jYnm7RaT81btjhKcUf1K99NAQaXV/rIJk3tePZoXEpA2DWGM/boM
RVIaKkXWvdUjMdq/DM1JTuXflS/n6pcca9U0MKUsgbh5qwGDxnCnFgP4swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElvZ4qvjUM1o1d8Xvf4pTIxb06AMB8GA1UdIwQY
MBaAFCAY7wi1XdsgyIFqYhpFnNuSezIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDIt
YTBhYzQ5YWQzNDNmLzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDItYTBhYzQ5YWQzNDNm
LzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXXkOPGF
itsypWPxFnEXOOm1ghuvQjcFjSZYyn4rN14rp3iU90fmhpAV8lGqErqhEsTbPZMc
rE2ChJcIHJDcqOpvfwdrsQGSo+5sqkyhVTuR7oxrlpXvf8pRk/NdEOBFCHd4Vc8b
NxVS22h0vUWKjU41QSUx70Miw+0LxbOTd4+1qWQeGl5tPVbyzlSJ0YqTuRN1ToET
HcV5gD04QZM7aAlrP2N1Id0/WSwslA14RUEqa7qdMz5y3DLdQiU+x45Bb8jvTEEx
wBsU9roSi9SJs0Lar/5awNDUKkGg8cyIVFpbNZGpKcD5oGd9BsUs+I3B437LlCHg
1Nvv/mF7S74Fyw==
-----END CERTIFICATE-----
Generated at Sat Aug 22 04:55:08 2026 by rpki-client