Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: GVd58DO3xqUdlBBPwuJNXSK1lox/BP3b4TuoViUVFD4=
Subject key identifier: BD:64:C2:2D:BB:42:F9:2E:61:94:4E:72:D6:F6:2D:68:EA:41:D1:93
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 019FA1BB44B4F82C805C074CADDF1FE9FD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 04:00:32 +0000
Manifest this update: Mon 27 Jul 2026 04:00:32 +0000
Manifest next update: Tue 28 Jul 2026 04:00:32 +0000
Files and hashes: 1: FzaSctWTm436xTaHu7cLIoR3zuI.roa (hash: ZWQNCmBRzSOXikzbY8uxPHONXN2ergkv72vrvK6pGEg=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: RVQHYkGD1K8XLwYvavIHHrXxz8v7c03pDrxWNgjvoEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:44:b4:f8:2c:80:5c:07:4c:ad:df:1f:e9:fd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Jul 27 04:00:32 2026 GMT
Not After : Jul 28 04:00:32 2026 GMT
Subject: CN=bd64c22dbb42f92e61944e72d6f62d68ea41d193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:c3:91:be:b2:c9:89:c6:9f:03:27:59:d5:
3e:5d:74:76:8d:df:bf:73:d7:4e:98:91:68:1b:f8:
e7:13:62:05:89:d3:a4:ac:42:c2:d2:87:00:ac:6b:
e6:44:ec:36:be:0b:6e:34:79:34:31:08:7a:b3:79:
9c:b2:13:66:0a:95:7c:e5:df:8c:99:6a:98:88:e5:
e9:62:82:64:5b:f8:bd:03:4c:03:7b:f0:4d:74:bd:
34:73:aa:77:f9:fb:55:f1:e6:0b:4f:1a:26:12:cc:
03:4e:88:f3:d5:9e:2c:a5:4e:f3:7b:5f:fe:c4:ab:
74:57:f3:6b:a8:3f:67:10:5a:84:13:a0:f3:7c:97:
f3:58:14:1d:2e:9c:a5:b9:e8:f2:e3:a5:1a:c5:80:
52:8d:93:f3:05:30:01:8b:17:cb:c5:63:ea:1b:ec:
99:24:40:ab:78:8d:44:d7:ca:93:36:e5:41:b2:24:
88:6a:ac:80:d6:a1:f5:d9:db:8f:a6:be:73:62:e9:
a0:90:fc:34:84:df:12:a3:e9:d5:7d:84:ed:32:90:
55:8a:21:a3:29:b7:83:70:89:77:a6:1c:e4:80:dc:
9c:19:79:e7:d9:16:21:5e:d6:4d:65:36:40:18:c3:
57:76:5b:1e:3e:8a:df:cb:24:09:2d:c8:82:78:48:
39:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:64:C2:2D:BB:42:F9:2E:61:94:4E:72:D6:F6:2D:68:EA:41:D1:93
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cd:0d:19:a2:bc:ee:86:78:95:aa:7d:28:ca:fd:97:62:df:
63:58:cf:82:c0:b5:af:96:30:79:f8:04:f2:d2:65:aa:71:06:
5f:08:e6:70:88:45:41:af:11:0f:fd:d3:cf:aa:2c:7f:15:09:
a1:3e:3c:70:36:dc:2f:3c:3b:62:d9:97:e6:b8:cf:cf:03:27:
52:63:80:c0:de:d8:7b:04:95:c3:92:52:70:84:ba:82:47:ee:
5e:d6:7f:bf:a4:87:8d:32:d1:35:18:dd:55:51:32:87:c1:9f:
0e:e6:f3:03:6e:3a:2a:61:63:62:ab:28:13:78:a0:07:a8:4f:
5b:75:40:cc:33:66:1d:75:2a:30:49:09:77:e0:4d:ff:dd:bd:
bc:b2:5d:68:d0:53:93:de:10:30:29:0b:1f:c6:4e:98:cb:08:
af:0d:3d:38:9f:c2:e6:0b:ec:67:96:b5:c1:fa:1d:b7:bb:85:
47:fa:2e:69:be:08:54:1b:37:b7:b8:97:30:a3:28:5b:a7:4a:
3e:cc:8d:34:76:c8:06:b5:82:84:50:ab:ed:af:10:9a:d0:5f:
cd:64:02:e9:e5:8c:01:d1:45:08:03:69:3c:57:b6:4f:a7:7d:
69:5d:04:ad:5e:d7:04:e5:17:6b:fb:15:3b:2c:7d:c1:e7:a9:
d3:2a:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:17 2026 by rpki-client