Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: 9Nn8mdE0IhTk4+Fi3k0/4C+zf0tRfrc0Mwq5fDJBJns=
Subject key identifier: B4:E1:A5:55:65:C0:D3:C3:A7:11:14:E5:E2:5F:4C:EF:21:F8:19:C4
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 019CEDB9263861DC271D2672209803881CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 1447
Signing time: Sat 14 Mar 2026 19:01:00 +0000
Manifest this update: Sat 14 Mar 2026 19:01:00 +0000
Manifest next update: Sun 15 Mar 2026 19:01:00 +0000
Files and hashes: 1: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: 5wEwop7HXORJ7J8FvbGoCsW0nzX8a63eFdqSQzsDGMs=)
2: kUi761JvorzxQPc6oroU7qaYtPw.roa (hash: XgXtN6YXvVkYUj2ZwJZH9OZFn2FFfJDscz2MToxQBsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:b9:26:38:61:dc:27:1d:26:72:20:98:03:88:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Mar 14 19:01:00 2026 GMT
Not After : Mar 15 19:01:00 2026 GMT
Subject: CN=b4e1a55565c0d3c3a71114e5e25f4cef21f819c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:0b:a2:f8:74:d9:88:05:0d:d7:6b:87:c7:
ed:3f:2c:13:3a:27:b6:9c:8a:3d:4a:65:8e:ff:ea:
fc:12:0e:d1:c5:19:2e:0d:c7:0c:65:65:28:79:0d:
39:c0:67:6d:f1:36:15:73:37:bf:5b:14:b2:b2:48:
c8:2b:af:b3:fb:d4:13:2e:c4:47:4a:57:13:70:cb:
0c:49:d9:59:ca:9b:3d:c4:42:fc:df:8e:58:54:88:
e0:db:a7:9d:5c:c2:96:92:a0:08:81:13:f7:5e:f3:
69:89:03:8c:d0:0e:5f:b1:fc:d1:89:82:90:fa:ee:
93:2a:30:11:b7:5a:af:d9:37:b9:e2:e7:ce:9d:a6:
9a:14:4c:cb:f6:fb:4b:fd:f8:45:ae:61:de:5b:4c:
b9:e8:f7:b9:4c:82:9c:ab:cd:fd:ad:62:05:b7:fa:
4d:19:eb:c3:09:e0:75:9d:e2:d1:2a:f5:40:af:a1:
fe:cb:e3:d3:7f:10:17:7f:1a:ae:3c:ba:c0:4b:43:
61:83:80:05:92:51:fb:41:80:9b:b7:7a:12:63:bb:
81:08:0a:af:06:96:13:da:97:3a:52:18:34:11:c2:
82:fa:36:8b:66:2e:ea:97:51:f5:af:20:f6:af:81:
23:e3:52:26:58:a3:89:02:47:d7:41:7e:8c:3c:ce:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E1:A5:55:65:C0:D3:C3:A7:11:14:E5:E2:5F:4C:EF:21:F8:19:C4
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:11:5f:4e:98:e6:06:72:2b:c8:18:da:be:ae:86:02:7f:55:
b4:78:24:40:6d:d6:e3:31:e0:7a:4c:98:ea:ea:b7:e8:a2:3e:
fc:e3:f9:18:e7:b8:96:3a:58:18:10:90:48:59:c9:83:d6:8a:
45:c0:19:ce:1c:78:c0:be:2e:33:9c:2c:75:da:77:e6:d4:b4:
39:75:21:94:8c:72:bd:83:8e:fe:15:76:ed:e3:be:06:a0:10:
93:4f:fe:e2:52:1b:f0:8d:19:36:ad:35:e9:a6:2e:4c:2d:6f:
ff:61:7a:21:52:4b:49:68:d9:dc:a8:7c:b5:46:0d:aa:fc:04:
87:b4:f9:1d:bb:20:43:70:36:ce:9c:85:b2:ea:a1:ba:d4:6f:
25:d0:59:48:45:d6:ab:e2:0b:c9:d8:a5:e8:0b:11:7e:56:96:
ba:9e:d2:2b:7c:0b:ff:40:64:29:7c:d5:7a:80:14:78:16:16:
58:01:97:1f:4f:df:7f:27:df:d1:95:db:ba:11:2f:fd:af:4f:
82:a3:93:c8:49:bc:a5:a4:e6:e2:8b:50:a2:a5:0e:f7:f9:30:
6c:40:86:d1:7b:3f:12:75:41:9e:dc:20:f6:90:7c:c1:4c:10:
f5:a6:46:cb:f2:8c:a3:38:7c:8b:6d:3b:49:24:82:c4:12:61:
2f:8b:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:51:49 2026 by rpki-client