Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: pfLN5cvw0l0pAgkhI8G01cxras39b2ABWgzytKBVt80=
Subject key identifier: A4:8B:F6:D3:63:25:B5:77:34:94:9A:47:99:3D:1F:A6:99:10:BF:58
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 019EB80E6D465274E8DEC228F03E773F703C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 19:00:13 +0000
Manifest this update: Thu 11 Jun 2026 19:00:13 +0000
Manifest next update: Fri 12 Jun 2026 19:00:13 +0000
Files and hashes: 1: FzaSctWTm436xTaHu7cLIoR3zuI.roa (hash: ZWQNCmBRzSOXikzbY8uxPHONXN2ergkv72vrvK6pGEg=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: x3rgMNmGoxvcQf+4O1p01REYWoYDEh/n9wTOIHxLtdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:6d:46:52:74:e8:de:c2:28:f0:3e:77:3f:70:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Jun 11 19:00:13 2026 GMT
Not After : Jun 12 19:00:13 2026 GMT
Subject: CN=a48bf6d36325b57734949a47993d1fa69910bf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:6f:5a:cd:51:6c:67:2e:30:f2:37:81:b8:
31:93:71:41:f5:8f:f7:98:5c:49:59:97:e1:4d:72:
d6:b8:d4:cf:39:21:51:5a:db:27:3f:ae:9d:70:22:
2a:d1:2b:22:d3:de:73:04:58:2e:85:8a:33:c7:5d:
b4:47:de:0a:fa:4b:a6:78:7c:86:63:02:06:c7:22:
8b:e1:99:34:1e:e3:6b:59:3e:a3:8a:25:ed:fc:fe:
31:d7:33:f4:bd:d5:45:2d:8c:56:4f:58:92:c4:b3:
74:da:45:25:e4:05:22:eb:b3:0f:41:7f:20:d6:07:
91:8e:ff:62:70:66:3c:d7:73:ea:4f:ef:fb:59:c0:
36:bc:e9:fb:46:7b:cc:63:f3:0c:09:2c:27:ab:41:
66:bf:68:dc:8a:61:a3:27:ef:dc:26:ef:85:36:07:
0c:a3:f3:31:3d:ac:17:1b:d5:94:ce:46:6a:3a:6e:
d2:2d:ba:cc:7c:00:c3:86:b2:ed:50:be:5a:a7:a2:
08:54:d6:98:f6:b6:88:b4:50:bb:d7:17:a5:92:06:
92:3c:3a:a4:d7:f1:df:96:a8:da:60:5e:0b:93:14:
5b:68:f7:c9:9d:f5:48:66:08:5c:6d:2c:3f:2e:ee:
65:73:d6:52:80:6b:65:1a:21:58:54:d9:f8:0e:36:
b4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8B:F6:D3:63:25:B5:77:34:94:9A:47:99:3D:1F:A6:99:10:BF:58
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bb:b2:74:e3:48:da:9c:ba:20:ce:51:48:18:dd:9a:35:b2:
25:5c:59:46:93:69:a7:bc:1a:26:60:53:1b:9e:f7:6b:ea:1d:
e0:98:c2:90:8d:42:57:b1:b3:9e:8c:bd:6d:14:5b:08:ad:84:
85:43:46:73:b2:cd:7e:7f:0c:c6:2a:d7:75:4f:a5:41:33:29:
03:03:60:04:45:cc:46:99:df:d8:ab:bc:ce:db:44:4d:13:83:
fd:c0:08:8a:e5:78:c8:1e:7f:48:3f:28:ef:e3:a1:9f:57:88:
d8:e8:a2:1a:ce:9e:0b:28:7e:8d:51:e0:7a:77:39:ac:a0:0a:
33:2d:7e:98:ca:e6:04:88:4d:b1:a5:6a:48:5e:a9:2f:af:3c:
af:98:21:13:8f:74:45:b5:a1:13:3c:b9:49:d3:bd:02:8f:ce:
2d:41:4c:c5:ee:a5:cf:2c:3a:a9:42:c8:89:67:1a:e5:c5:34:
cd:09:b7:6b:34:a5:49:6d:85:16:c0:3e:44:d6:5f:48:79:88:
2a:71:ed:e2:ca:ed:3a:9d:41:a9:00:32:2e:ff:8f:79:c0:4e:
db:90:17:29:92:5d:8b:3a:79:56:f1:1c:66:03:2e:3a:f5:f5:
fa:a0:04:dc:7a:b6:b9:ae:6e:3b:64:cb:f6:d0:15:de:a0:97:
28:5d:d5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:15 2026 by rpki-client