Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
File: IVxS75fj1VeY7-g0dNIDAIK5s6I.mft (raw, json)
Hash identifier: qlUbldK+IyGL6BZIKSqGn66vWr5u+nkCo2j2A753u1c=
Subject key identifier: 3A:5B:40:2E:5B:87:FA:44:10:CC:4B:70:31:AA:EE:28:7E:A9:02:54
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial: 019DDDD64BC44B53889F91FB6DDB5836BFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
Manifest number: 08A3
Signing time: Thu 30 Apr 2026 10:01:41 +0000
Manifest this update: Thu 30 Apr 2026 10:01:41 +0000
Manifest next update: Fri 01 May 2026 10:01:41 +0000
Files and hashes: 1: H8HSputPSN9Cls2-aaHKk-qMV3c.roa (hash: BonRmDJ9cgpRsYMcsSITVW9rPDB5KlfByqpBGb76lfA=)
2: IVxS75fj1VeY7-g0dNIDAIK5s6I.crl (hash: J8x9Wm8sBX+6FY3X6GAGbdaJBQm3mvvVASKvYyLFSZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:4b:c4:4b:53:88:9f:91:fb:6d:db:58:36:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Validity
Not Before: Apr 30 10:01:41 2026 GMT
Not After : May 1 10:01:41 2026 GMT
Subject: CN=3a5b402e5b87fa4410cc4b7031aaee287ea90254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:c8:41:9f:b9:99:72:5b:c3:d0:f3:01:8b:
1c:fb:20:70:d6:24:ac:5f:d5:ce:89:d6:77:8b:e6:
6e:52:e3:ef:8d:40:7d:48:10:2a:ed:f3:8c:42:87:
d4:56:07:c2:40:8c:64:e1:59:c0:56:a8:8b:96:0f:
97:a5:5f:17:85:95:c2:83:2a:36:1a:8d:70:9e:00:
17:75:a9:b9:24:cc:c2:96:5e:77:59:3f:16:6e:e1:
05:7e:be:1d:81:82:7f:91:3d:67:64:c3:20:e1:2d:
33:61:31:1e:9c:31:59:0d:c7:e8:3e:56:9a:e7:ab:
a2:a7:d9:1b:bd:02:e1:8d:8f:3f:dc:56:d6:1f:2b:
f8:61:f4:f3:cf:53:23:39:27:06:89:f6:36:47:fe:
a0:19:cf:cc:51:46:b1:7e:3d:82:08:0f:16:44:26:
f1:e4:3f:11:ca:63:6f:81:3a:3e:06:b0:15:13:a7:
ba:7e:60:8b:86:e9:f1:cc:82:e6:34:86:86:c6:4b:
be:30:d9:fc:c8:67:d2:b8:3a:be:3f:4c:fc:cb:f2:
00:4b:b2:40:d0:8f:6f:67:00:27:02:74:b2:e5:0b:
7a:78:29:f4:20:1b:b7:d0:08:93:ff:54:87:82:0d:
d6:3a:5c:d1:c8:54:cb:ec:a9:0e:9d:46:a2:05:4f:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:40:2E:5B:87:FA:44:10:CC:4B:70:31:AA:EE:28:7E:A9:02:54
X509v3 Authority Key Identifier:
keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:81:1a:7f:32:17:bb:eb:bb:13:0d:a0:94:e7:dd:03:18:87:
9a:9d:65:bf:78:33:28:07:dc:c9:6e:fd:9f:90:2c:99:c7:0c:
71:11:a5:7e:6b:76:26:49:d7:00:8b:51:c3:75:b7:ab:be:94:
33:b3:2b:31:ce:60:38:22:38:1e:6f:ea:45:04:ab:10:77:99:
c6:25:cc:83:37:67:02:0e:46:6b:c8:dc:27:1f:a5:37:cd:4d:
7b:05:87:08:98:60:14:f1:89:dd:03:1c:fa:af:d8:73:c4:e1:
2b:a2:d9:ff:4d:08:55:85:bc:37:2a:94:86:f4:d6:87:ed:7c:
6d:5f:29:8f:d1:a7:fa:90:0b:22:b3:98:96:98:d1:51:64:f2:
9f:9d:79:6b:a9:38:0f:3f:80:b6:d0:bf:fc:32:ca:68:03:e1:
c9:e3:50:00:dd:99:e2:bb:14:69:ce:4e:12:46:ea:8d:45:38:
db:eb:8d:47:ed:ff:1e:f4:e8:da:c7:bb:47:d4:72:85:4e:31:
c2:4e:91:71:a4:6d:df:78:86:c8:2f:ff:38:23:3c:bb:7b:22:
c2:29:29:d4:d7:11:dc:4e:c0:8b:06:b1:9b:4d:0e:8f:1b:50:
94:54:9d:a0:1b:aa:2e:11:5f:35:fa:42:bd:cf:65:f1:88:76:
65:ad:f1:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3d1kvES1OIn5H7bdtYNr/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNWM1MmVmOTdlM2Q1NTc5OGVmZTgzNDc0ZDIwMzAwODJi
OWIzYTIwHhcNMjYwNDMwMTAwMTQxWhcNMjYwNTAxMTAwMTQxWjAzMTEwLwYDVQQD
EygzYTViNDAyZTViODdmYTQ0MTBjYzRiNzAzMWFhZWUyODdlYTkwMjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukzIQZ+5mXJbw9DzAYsc+yBw1iSs
X9XOidZ3i+ZuUuPvjUB9SBAq7fOMQofUVgfCQIxk4VnAVqiLlg+XpV8XhZXCgyo2
Go1wngAXdam5JMzCll53WT8WbuEFfr4dgYJ/kT1nZMMg4S0zYTEenDFZDcfoPlaa
56uip9kbvQLhjY8/3FbWHyv4YfTzz1MjOScGifY2R/6gGc/MUUaxfj2CCA8WRCbx
5D8RymNvgTo+BrAVE6e6fmCLhunxzILmNIaGxku+MNn8yGfSuDq+P0z8y/IAS7JA
0I9vZwAnAnSy5Qt6eCn0IBu30AiT/1SHgg3WOlzRyFTL7KkOnUaiBU8eiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpbQC5bh/pEEMxLcDGq7ih+qQJUMB8GA1UdIwQY
MBaAFCFcUu+X49VXmO/oNHTSAwCCubOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hMmYyMTEtODYxOC00M2MzLTkxMTct
N2FlZWUzYWQ3NDM2LzEvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hMmYyMTEtODYxOC00M2MzLTkxMTctN2FlZWUzYWQ3NDM2
LzEvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoEafzIX
u+u7Ew2glOfdAxiHmp1lv3gzKAfcyW79n5AsmccMcRGlfmt2JknXAItRw3W3q76U
M7MrMc5gOCI4Hm/qRQSrEHeZxiXMgzdnAg5Ga8jcJx+lN81NewWHCJhgFPGJ3QMc
+q/Yc8ThK6LZ/00IVYW8NyqUhvTWh+18bV8pj9Gn+pALIrOYlpjRUWTyn515a6k4
Dz+AttC//DLKaAPhyeNQAN2Z4rsUac5OEkbqjUU42+uNR+3/HvTo2se7R9RyhU4x
wk6RcaRt33iGyC//OCM8u3siwikp1NcR3E7Aiwaxm00OjxtQlFSdoBuqLhFfNfpC
vc9l8Yh2Za3xhg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 17:06:49 2026 by rpki-client