Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: rnK2ObCIKuucFKYQnWGKCZllHlWsMgA+ONoMR5fTr2M=
Subject key identifier: 35:95:A2:4A:58:0F:40:BD:04:12:B2:68:48:EC:BE:84:A3:F3:49:1D
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 01A15EC3B5DC9CFBA92951D40E4C68830CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 1695
Signing time: Wed 21 Oct 2026 14:00:46 +0000
Manifest this update: Wed 21 Oct 2026 14:00:46 +0000
Manifest next update: Thu 22 Oct 2026 14:00:46 +0000
Files and hashes: 1: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: xjGTkhN9aLZsCgPMwa2gmOVjRgA8vv25UmAlnlRhPBo=)
2: UB3nbJaD_lqgzpXX9TTrFnAnCw4.roa (hash: 9MwXMFCOP1MO23HAeAAUU+WfivrwIhT4DgWcAU+xQTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:c3:b5:dc:9c:fb:a9:29:51:d4:0e:4c:68:83:0c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Oct 21 14:00:46 2026 GMT
Not After : Oct 22 14:00:46 2026 GMT
Subject: CN=3595a24a580f40bd0412b26848ecbe84a3f3491d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:1d:ae:58:82:5e:08:35:f0:5a:4f:53:96:
3b:19:bb:dd:8b:3f:f1:09:6f:d5:0d:38:a0:e8:7e:
c3:b0:10:98:3f:f2:72:ae:15:cb:81:75:91:ca:03:
70:f3:83:6c:2d:16:c2:2b:f8:03:67:9b:37:71:a7:
ec:c8:20:fe:80:94:38:5d:3d:6f:34:7e:a5:58:91:
82:69:89:25:af:96:7d:ea:d3:e8:c3:5c:ff:b5:29:
db:80:4d:e5:74:76:57:6c:95:08:d9:55:2f:a8:f7:
a7:72:12:f6:2e:45:97:0c:b1:c4:aa:64:62:18:1f:
b9:d7:32:58:85:1a:f6:7a:a0:59:5d:c4:c5:63:fe:
70:23:b6:ee:8d:0b:e2:2a:74:01:54:bb:4e:08:fd:
c4:88:71:60:ea:fb:f8:ef:a4:77:09:8e:f9:7f:96:
48:9e:e6:73:96:d6:39:18:ed:11:0b:0d:17:e5:33:
23:f3:1f:7b:2d:8e:57:62:de:2b:27:5b:e0:a4:9d:
6c:91:6b:38:55:1a:07:70:0f:6d:81:6b:29:5a:75:
c6:82:26:21:bb:33:4c:b1:7a:35:4d:b2:44:f0:59:
6b:55:a3:3d:4d:fc:26:29:ee:0c:3e:1a:d7:82:38:
e0:be:c4:75:39:cf:2f:af:3c:6d:76:77:a5:e0:32:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:A2:4A:58:0F:40:BD:04:12:B2:68:48:EC:BE:84:A3:F3:49:1D
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:73:33:3a:69:bb:ab:62:a0:b3:28:73:a3:b7:65:86:45:e6:
79:7a:09:9c:03:97:ec:45:3e:d5:ea:c6:df:01:4b:71:19:f4:
c8:4b:55:5c:11:cd:22:94:f7:d6:9a:c2:80:d8:8b:77:73:da:
34:c6:08:de:13:32:69:a3:eb:08:55:d6:16:9c:25:84:f6:72:
01:25:1d:e7:0d:5d:15:17:41:6b:18:55:e4:b5:09:be:ef:0a:
50:1b:76:68:3c:ff:0f:40:5c:ad:f9:fc:7e:80:62:d3:82:9f:
f1:b4:41:be:0a:f5:f6:33:6b:df:0d:27:17:0c:44:88:00:0b:
84:49:cb:0f:2d:0a:48:28:09:5b:ad:14:67:bc:48:d4:cb:37:
10:cd:65:b2:53:43:86:97:15:cd:dd:04:ff:01:03:79:04:b7:
ac:47:fc:e8:64:d3:d8:93:07:e3:ce:b4:b3:c9:40:4a:50:7e:
20:c2:0c:b7:45:fd:2f:c7:4a:dd:56:8c:16:b9:01:f0:4c:f1:
e5:c1:ae:5c:7c:d6:18:95:4d:cc:a0:1f:97:54:7a:5e:da:0d:
c5:cd:c2:2e:4c:76:8f:05:53:0d:2f:80:1f:9e:7a:e1:19:fe:
52:5d:de:2d:e1:89:38:36:26:a0:0f:6c:4c:18:f2:a5:cc:27:
ba:2d:8e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:58:42 2026 by rpki-client