Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: l9BEtFAwQ8zCatvoc8nzo1tUuX58cJaLh2W9n1k65w8=
Subject key identifier: D0:FE:1D:78:B0:65:4D:45:E0:0E:CD:A3:73:F4:6F:4A:19:EC:3B:73
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 019D3752DD95E3C8CF4FEA83077266E59969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 1165
Signing time: Sun 29 Mar 2026 02:01:10 +0000
Manifest this update: Sun 29 Mar 2026 02:01:10 +0000
Manifest next update: Mon 30 Mar 2026 02:01:10 +0000
Files and hashes: 1: 3yOJ06gfUKk-2XYdWHLIAlWgfEc.roa (hash: nXcj7d6dSu1swvQGzGjJKVLnGkefzXVXrhP3pXEGcwM=)
2: 7rB4dVkLekdvJu2WV1aBm26tfk4.roa (hash: dQXlWyfYcUEq4/cQMbVBV+QLb2ARWgSkORhGuX+vIpo=)
3: BDnFJ4jYiW4UB0OWqHm0E81ZFGk.roa (hash: kHvW0Bcsv+dU2wBHMm0QcL2FR83ZCdT4yyeLFS4eeP8=)
4: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: m+TKa4dIdLiWnk2zl3v/G4W96s/24NtcUo6e8QSXobk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:dd:95:e3:c8:cf:4f:ea:83:07:72:66:e5:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Mar 29 02:01:10 2026 GMT
Not After : Mar 30 02:01:10 2026 GMT
Subject: CN=d0fe1d78b0654d45e00ecda373f46f4a19ec3b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:66:b7:b8:c6:81:c0:0b:9d:4b:2f:1e:7e:
4b:29:e3:9b:f1:57:26:27:b0:32:6b:69:12:dd:1c:
6b:9e:32:ae:4c:f1:b7:91:ae:36:9e:84:f5:a7:63:
21:cd:bb:f3:24:41:6e:2f:4e:ad:08:9f:7b:f5:58:
14:40:11:60:4c:9b:1a:40:2c:57:54:2d:4c:06:a5:
78:74:b4:bc:18:cc:d8:c5:d1:f9:22:af:e4:b2:8d:
80:50:b3:ec:dd:31:a3:f7:90:51:be:0e:85:54:ca:
91:c1:32:e8:88:65:0f:a2:a2:92:71:28:d5:4d:a5:
f0:cc:bc:3b:94:de:ba:fd:b5:2f:64:58:07:a5:3b:
7b:3d:b0:31:68:aa:8a:d1:c6:d6:b8:7d:4f:af:45:
61:17:5b:6e:fe:26:89:1a:1d:8c:c0:ad:0c:81:14:
78:71:38:ab:3f:5c:ed:db:7c:5e:c7:90:59:e2:80:
1d:e5:38:fb:4a:82:0f:d7:ea:92:7c:da:03:3f:59:
c4:51:25:d0:09:9a:77:c8:ab:09:42:2a:15:c5:b1:
83:0f:67:d6:80:23:f2:03:0a:84:f6:b9:54:bc:39:
cf:9c:1c:db:5a:ad:b9:fc:a0:47:5f:ec:06:8f:d8:
ef:09:e3:0e:9f:3a:ac:5b:85:b5:ee:3f:1c:e4:5d:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FE:1D:78:B0:65:4D:45:E0:0E:CD:A3:73:F4:6F:4A:19:EC:3B:73
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7c:2e:42:7f:07:3d:c0:32:22:8b:81:7e:48:6e:75:89:3f:
f4:ea:b0:09:f4:e2:1b:93:1c:2b:f3:fe:4c:8e:22:d9:20:43:
b5:b2:ae:31:3d:36:a1:83:ce:e3:12:8e:ac:a7:26:f7:88:01:
f4:ba:4a:f2:9d:c6:30:58:ac:31:a2:c0:00:d8:1e:89:e9:1c:
35:49:51:ca:36:84:c1:68:48:9f:ea:41:01:85:5c:7f:9e:59:
50:7f:be:cd:6f:26:9f:34:be:67:39:5d:d2:94:fc:aa:2f:ac:
77:0b:86:5c:a8:68:15:75:f9:5c:bf:73:05:8d:bf:4d:ca:f1:
19:82:29:59:63:ee:1e:39:b2:9a:f0:b7:c2:ea:36:4d:7a:e3:
2c:0a:f5:2a:d8:f3:96:9f:9c:fd:10:95:4a:8a:9e:22:c5:df:
26:cd:29:38:ea:1c:b3:09:3d:e6:67:be:55:1b:4c:23:eb:24:
17:d7:93:93:1f:14:ff:36:fb:e6:66:2e:00:a5:81:9a:51:f4:
10:65:49:23:76:b6:b9:20:dc:ee:5b:b4:e7:af:84:a8:1f:b2:
cb:72:bf:6c:89:20:e6:64:08:30:06:ae:6a:9b:a3:b9:84:47:
2e:41:24:69:64:45:44:78:36:3c:0f:10:b3:c2:40:78:98:6b:
f0:d6:c3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:27 2026 by rpki-client