Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: QXxogH6lhOi28gYOvWFuNTBdurruRgWEPGR3a+B/4T0=
Subject key identifier: 68:DA:51:26:37:55:14:76:89:88:65:29:27:A6:A1:F9:4A:32:3B:72
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 019EB98F4738DEC6B578E844A84BEDE7E335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 122D
Signing time: Fri 12 Jun 2026 02:00:35 +0000
Manifest this update: Fri 12 Jun 2026 02:00:35 +0000
Manifest next update: Sat 13 Jun 2026 02:00:35 +0000
Files and hashes: 1: 3yOJ06gfUKk-2XYdWHLIAlWgfEc.roa (hash: nXcj7d6dSu1swvQGzGjJKVLnGkefzXVXrhP3pXEGcwM=)
2: 7rB4dVkLekdvJu2WV1aBm26tfk4.roa (hash: dQXlWyfYcUEq4/cQMbVBV+QLb2ARWgSkORhGuX+vIpo=)
3: BDnFJ4jYiW4UB0OWqHm0E81ZFGk.roa (hash: kHvW0Bcsv+dU2wBHMm0QcL2FR83ZCdT4yyeLFS4eeP8=)
4: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: LzMCb+iY/+PKEzdbRGotkYSVq0V15oZC3ZX++3LwyCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:47:38:de:c6:b5:78:e8:44:a8:4b:ed:e7:e3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Jun 12 02:00:35 2026 GMT
Not After : Jun 13 02:00:35 2026 GMT
Subject: CN=68da5126375514768988652927a6a1f94a323b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:47:d2:23:32:c8:b1:64:68:29:11:cd:b9:
76:03:14:02:3b:c8:44:20:bd:5d:b3:83:55:00:60:
59:74:94:f7:45:cf:61:d6:17:8f:fc:44:8d:f0:89:
fa:25:ae:26:ec:56:a4:7e:92:1b:8e:36:de:00:64:
8c:39:05:db:06:8b:fb:ba:3a:33:f3:fa:23:7f:07:
fb:42:4e:de:66:93:c8:49:4a:28:bb:b5:77:34:c2:
f2:f4:08:7a:f1:b3:e7:17:36:ed:f1:a7:59:de:32:
28:02:86:ff:93:8b:36:ef:fc:04:86:05:ca:b9:5f:
08:cc:d5:47:db:ac:ca:89:8d:24:fd:c5:af:8f:0c:
84:b1:64:5d:7b:f1:e6:7b:98:04:ad:9e:c8:67:24:
88:f0:ec:ee:4d:55:98:9b:20:b6:93:16:0a:09:8f:
d5:e1:29:56:ff:6e:37:24:21:9b:3b:98:a4:fa:6b:
31:b7:c9:8c:58:7c:69:88:11:f9:ef:8d:ef:3e:cb:
02:71:b5:a8:aa:0f:42:93:59:47:34:08:ef:87:46:
bf:fa:4c:e7:f2:fc:1f:4e:61:56:87:ee:80:cc:fe:
69:14:8e:45:f1:de:72:e8:55:d7:0f:91:81:93:47:
ad:99:a7:15:d9:aa:61:4e:46:ec:5f:84:47:e2:6b:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DA:51:26:37:55:14:76:89:88:65:29:27:A6:A1:F9:4A:32:3B:72
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:67:d5:c1:b5:06:15:67:d4:74:3f:dd:2d:ba:6a:a4:e2:
0b:13:21:b2:97:4f:70:88:0d:1f:6a:87:3f:f7:44:38:48:49:
b9:54:b7:c9:78:04:67:1f:f2:ac:a0:eb:16:4b:25:60:d0:af:
f1:45:3f:4a:08:d9:53:7e:ee:a0:3f:44:1a:85:43:c2:81:0c:
3e:e3:b4:51:3f:59:47:d6:4e:f7:71:10:5e:f8:55:49:96:93:
52:52:7c:e7:69:3c:70:57:c5:98:29:57:47:61:ee:01:e4:1a:
c0:cd:73:a1:33:b3:4b:af:cd:73:10:d1:37:e5:06:0b:8a:70:
50:ef:f2:f4:79:e5:61:0c:c5:b1:12:50:2c:06:0b:73:4b:92:
af:1e:d8:d2:c1:3a:11:bb:55:03:46:48:fa:03:6c:1a:96:e7:
b7:ca:78:97:46:19:2a:b1:1b:c5:18:3c:2b:2d:07:fd:66:e9:
d9:c2:22:47:12:bf:71:22:fc:d2:f1:07:24:76:20:3d:54:80:
20:27:9f:40:f7:eb:ee:ba:37:90:f9:f7:b1:51:24:10:cb:15:
36:ee:77:3f:cb:bb:e8:35:db:48:bb:bb:43:af:25:28:3b:23:
e8:2d:aa:c4:b0:51:c9:a9:bf:6b:5b:7f:58:dd:83:a6:b8:f8:
69:43:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:48:46 2026 by rpki-client