Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File: ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier: RBkuN38dR7x8nHLysr0UAVK0jSXG1T8C6YhPk17XBnM=
Subject key identifier: 40:A4:9B:D5:76:C8:6C:90:2B:DC:9C:ED:71:7D:94:EF:83:01:F0:02
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial: 019D36E5424274D05915E5F49A285C74E5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number: 06ED
Signing time: Sun 29 Mar 2026 00:01:27 +0000
Manifest this update: Sun 29 Mar 2026 00:01:27 +0000
Manifest next update: Mon 30 Mar 2026 00:01:27 +0000
Files and hashes: 1: DbhDBOu-4RlIo0LqivfKmdkWxlg.roa (hash: x5EChnPdDWgKtRO63MP5f9gNs9e/wtDm0vinLAhafF8=)
2: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: BRnzEA6ynMgQzsXNpmAOT32SRO5WYAiOukRbzlwSnoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:42:42:74:d0:59:15:e5:f4:9a:28:5c:74:e5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Validity
Not Before: Mar 29 00:01:27 2026 GMT
Not After : Mar 30 00:01:27 2026 GMT
Subject: CN=40a49bd576c86c902bdc9ced717d94ef8301f002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:0f:84:a3:d9:20:9e:3d:1e:2b:f9:7c:66:
99:5e:39:3e:8a:79:1c:db:a9:84:ad:ca:a4:e0:9d:
91:eb:f7:9b:4e:a5:b7:d4:19:4f:f8:33:c1:05:3e:
7a:40:76:5a:91:6b:d6:5c:bf:f9:ce:2f:56:6b:5f:
06:3d:52:cb:4d:dc:62:7e:e1:3d:d4:5b:80:bd:8f:
8f:62:0a:59:32:ac:bb:9b:0e:fd:6c:19:b4:d0:ef:
87:ea:57:7a:d1:c8:16:46:5d:2c:9c:32:ec:56:59:
a2:2f:d6:2d:f3:63:da:2c:8d:f9:3f:d5:94:5e:9a:
ca:55:2a:77:69:1f:a3:24:16:5d:c8:22:02:65:a5:
85:9e:f7:a5:89:a7:e8:a1:57:83:d3:90:d8:ff:eb:
87:2c:b0:d4:4e:21:4e:bd:db:3d:19:17:55:a1:98:
1a:9f:5c:43:c5:8e:3e:ce:3a:63:29:b8:f6:ce:d9:
d9:4a:ce:02:69:d2:33:90:aa:bf:d3:0b:93:ad:8d:
df:f5:a5:71:d7:a8:39:69:e4:90:7c:71:1d:59:7e:
41:d6:73:72:3d:cb:72:cb:36:03:4e:b7:b4:11:2f:
21:6c:4e:f2:42:be:00:c7:d5:9d:da:4a:c4:1f:c1:
74:76:ad:42:18:a2:af:9c:69:14:43:ff:7a:db:39:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:9B:D5:76:C8:6C:90:2B:DC:9C:ED:71:7D:94:EF:83:01:F0:02
X509v3 Authority Key Identifier:
keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4f:06:2c:20:ed:33:ea:2d:ea:cf:17:ef:c9:36:fe:54:af:
d0:90:c7:db:8c:c7:b5:ed:3a:02:22:cf:59:a4:2c:54:5a:4e:
22:a0:de:b5:89:ed:64:0c:5e:eb:be:d2:40:3f:77:b5:6d:50:
fd:01:01:60:a4:61:9a:c8:a4:54:8a:a3:5f:8b:f3:87:0a:f5:
49:e2:7d:c3:1a:08:48:5b:36:ac:9c:dc:0b:75:55:47:1a:c6:
69:20:e8:4e:c9:4c:4a:cc:e7:66:19:12:67:cf:5c:49:a5:a9:
5a:07:f0:1f:4b:19:cd:28:40:6e:c1:62:5b:8f:44:b0:c4:66:
ec:cb:21:e7:4f:64:00:04:66:63:49:30:26:66:98:2c:5f:09:
4c:14:c5:da:f3:1b:d6:12:01:fc:87:aa:95:ad:07:8e:80:91:
f0:f5:81:2e:60:b4:92:96:27:a8:9f:c4:70:6e:4c:2b:5f:de:
98:ad:6f:8c:61:7e:49:6d:8c:39:34:9d:bd:a8:de:88:ee:f8:
81:66:b7:a8:e3:2a:22:9b:2d:12:64:44:c2:e3:c0:34:24:4a:
30:e3:0b:18:02:73:69:72:25:50:d1:cd:26:c9:82:b2:2e:aa:
d2:6d:0f:b1:10:dd:c2:61:b2:ea:02:47:b1:a6:30:3c:25:4c:
b0:f1:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:06 2026 by rpki-client