Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: q5BoiH4aKVZhNFCeYsBXxcoHSclE8ubSrpb6IU/3Wo8=
Subject key identifier: 01:1C:3B:46:3A:72:06:06:4B:44:B3:78:3E:E7:31:23:E6:87:24:2E
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 019FA33BEAFEF201370ADB5C33C1F92878DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 12A6
Signing time: Mon 27 Jul 2026 11:00:40 +0000
Manifest this update: Mon 27 Jul 2026 11:00:40 +0000
Manifest next update: Tue 28 Jul 2026 11:00:40 +0000
Files and hashes: 1: 3yOJ06gfUKk-2XYdWHLIAlWgfEc.roa (hash: nXcj7d6dSu1swvQGzGjJKVLnGkefzXVXrhP3pXEGcwM=)
2: 7rB4dVkLekdvJu2WV1aBm26tfk4.roa (hash: dQXlWyfYcUEq4/cQMbVBV+QLb2ARWgSkORhGuX+vIpo=)
3: BDnFJ4jYiW4UB0OWqHm0E81ZFGk.roa (hash: kHvW0Bcsv+dU2wBHMm0QcL2FR83ZCdT4yyeLFS4eeP8=)
4: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: wfT3WBcDtb+1cI4HH2lK3FXx7wJiaZrzM60rmNWlK+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:ea:fe:f2:01:37:0a:db:5c:33:c1:f9:28:78:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Jul 27 11:00:40 2026 GMT
Not After : Jul 28 11:00:40 2026 GMT
Subject: CN=011c3b463a7206064b44b3783ee73123e687242e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:5c:aa:3a:0c:11:92:63:b8:a9:e0:b9:5c:
f7:90:d8:89:ed:68:29:39:d6:bb:92:c8:76:04:78:
16:c1:c7:a8:00:bf:37:b1:c9:d4:9e:06:2b:11:1e:
26:c3:ab:de:72:16:2a:db:79:13:ff:9a:8e:8e:be:
fa:df:64:b9:f0:31:52:e2:57:95:d9:1b:95:d1:62:
12:13:22:bd:37:38:77:d5:c1:b0:ee:b1:26:06:27:
8d:2e:ed:90:ca:68:e9:99:3f:f1:1e:a1:a5:b8:48:
db:62:da:51:04:7b:eb:11:c8:06:dc:ec:41:66:f2:
6a:28:4f:26:76:e0:42:6b:72:a8:b6:3d:5a:11:98:
35:a3:40:8f:e7:fa:c2:ea:06:cb:a4:f3:82:dc:ea:
72:d3:06:a9:d4:20:a7:65:a1:94:4e:72:00:4b:89:
fc:f3:6d:bf:39:b4:ce:1b:c7:87:11:2e:f2:01:2b:
02:09:83:4c:bd:82:d4:90:1f:d5:fb:50:58:12:da:
9e:a1:0f:26:01:c9:ee:a3:cc:9b:06:ca:2e:44:6b:
ae:22:dc:64:59:5d:29:41:92:0a:40:ac:aa:ac:62:
0f:1b:d2:a4:c3:1d:c6:ac:38:7f:7c:01:50:a6:bc:
e0:f5:c9:e0:fe:f9:70:e2:7a:78:b3:69:74:10:51:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:3B:46:3A:72:06:06:4B:44:B3:78:3E:E7:31:23:E6:87:24:2E
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a9:ec:e3:3a:97:db:2e:f1:03:2b:e3:04:77:43:14:ac:61:
fd:10:24:0f:cf:20:8e:62:88:f0:60:f9:e3:67:9e:4d:7d:20:
a4:e6:89:06:a7:11:9d:91:59:f7:bb:58:56:2a:f0:5f:dc:fa:
ba:04:9b:d6:1e:81:51:7d:16:2e:13:e7:2b:62:e8:c0:5a:a2:
b7:36:cf:c7:e1:28:4b:ad:4e:77:38:b6:09:41:ba:38:01:8c:
5c:f0:6c:b8:3d:aa:76:70:84:1f:2d:95:79:8a:51:1a:ad:9f:
6b:77:1a:a7:35:91:84:47:12:0b:a6:53:74:2c:f7:6f:64:3f:
34:9b:47:47:c9:86:84:59:f1:54:f3:de:d6:1d:ec:fb:9d:72:
7d:e7:55:bb:2b:15:b8:77:e5:a0:d7:ec:10:d4:95:5a:2c:54:
e0:eb:29:0c:25:62:af:ef:07:55:e4:ca:48:4b:10:b3:72:a7:
bc:60:87:c4:3f:e9:e7:78:a9:b7:f4:61:af:03:58:e6:9c:df:
bb:6a:2d:2c:2c:42:9b:6d:9c:be:b6:dc:db:27:41:08:05:2a:
c4:50:13:e6:7c:21:8e:c8:dc:05:27:5f:fb:c1:92:2e:e6:9f:
b4:de:2b:87:7e:de:ff:ea:5a:ce:14:4a:9f:28:07:b0:18:5c:
c6:48:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:44:48 2026 by rpki-client