Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
File: IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft (raw, json)
Hash identifier: bT1xKspCaKhraEI90yJEBDTe7CETCTDgvneMcdLa4f8=
Subject key identifier: 21:C1:4F:26:1B:06:80:F8:80:32:0F:B0:09:A9:37:04:26:1D:D0:19
Authority key identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
Certificate issuer: /CN=22f553fef5c1859d952300ad3efb511e58afda01
Certificate serial: 01A1784C3B64168114DCBAB96C8FF130D707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
Manifest number: 1ABD
Signing time: Mon 26 Oct 2026 13:00:24 +0000
Manifest this update: Mon 26 Oct 2026 13:00:24 +0000
Manifest next update: Tue 27 Oct 2026 13:00:24 +0000
Files and hashes: 1: IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl (hash: VPSkZ6RPNL1+X4dB/Ipngm4ze7RmuUeR2g2A81gM5kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:3b:64:16:81:14:dc:ba:b9:6c:8f:f1:30:d7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f553fef5c1859d952300ad3efb511e58afda01
Validity
Not Before: Oct 26 13:00:24 2026 GMT
Not After : Oct 27 13:00:24 2026 GMT
Subject: CN=21c14f261b0680f880320fb009a93704261dd019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:66:6b:8a:ad:89:2b:b0:3f:31:e8:9c:37:
a6:6a:e3:fc:df:5f:5b:75:5f:b9:c4:a7:e1:95:67:
94:94:cd:f5:1e:3f:a6:ae:1f:c8:bf:68:81:cc:1d:
69:4d:bf:34:98:dd:d8:b5:0e:98:b4:39:52:f2:97:
2c:ed:21:6a:8c:94:9b:bd:7f:db:30:ed:61:1d:6e:
1b:3c:23:47:0e:bc:39:da:15:7e:76:0d:7f:1f:3d:
f2:fa:9b:20:41:9e:5c:4b:a7:ca:11:e4:25:45:ba:
a5:4d:cc:7f:eb:08:af:f9:f0:c2:cc:f4:f9:75:5b:
aa:f5:28:47:16:18:51:f4:88:5e:6b:c7:33:6e:d0:
57:20:70:ce:31:94:c6:92:c2:d0:e9:d6:23:2a:e3:
7a:8a:8e:29:b8:5a:86:b2:62:07:1c:65:74:f8:f5:
80:40:08:03:34:9b:f2:b7:b2:bf:a4:e7:c6:df:93:
aa:83:70:af:c5:e0:f1:35:48:ea:bd:69:84:6a:e7:
42:3b:f3:ae:73:1d:32:cf:27:f5:d2:04:0d:ea:d8:
5e:78:1e:a2:16:7f:4c:e2:70:a9:ab:44:e8:79:7c:
82:57:4f:bd:2a:92:ff:62:14:c5:e6:e9:63:f4:ac:
17:6c:72:ec:54:32:5b:80:af:34:29:69:ed:0c:d2:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C1:4F:26:1B:06:80:F8:80:32:0F:B0:09:A9:37:04:26:1D:D0:19
X509v3 Authority Key Identifier:
keyid:22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d6:07:16:ec:6d:0b:09:6a:68:5e:09:6c:ea:fe:cc:de:95:
cc:92:fc:9c:d5:71:df:da:a4:8f:e9:61:04:5e:e4:e9:00:6d:
b2:9d:0c:35:9e:f3:7f:f1:98:74:57:b7:97:08:67:5d:b1:b7:
4c:e3:8a:5f:33:be:e3:a3:13:99:10:d9:74:21:7d:df:d0:97:
ec:af:bd:f9:52:d2:62:c9:7a:e1:b7:30:9b:cc:29:bd:a5:7f:
62:4c:0e:03:8c:de:49:53:95:77:e4:93:91:75:c2:0e:39:f3:
55:bc:da:17:64:95:4d:26:6c:31:08:c8:c6:98:c8:88:85:06:
78:bb:04:92:10:96:75:35:7e:4c:43:c5:eb:0f:c6:e7:98:61:
93:1f:eb:5e:bc:c6:62:a0:c5:4b:75:24:44:30:ec:59:77:3b:
d1:7d:f8:49:8a:9a:0e:1a:9e:89:7b:bd:fc:62:d6:49:49:31:
5a:0e:ec:e1:e6:f6:11:85:b9:ae:9f:d6:19:88:bb:26:a3:01:
29:8d:47:c5:fe:c2:72:bf:bc:b5:af:c9:f6:cc:d5:b8:d5:d4:
30:c1:aa:89:27:7e:ea:dd:12:f0:7a:2c:3e:58:ff:d6:fa:cb:
0f:5d:ee:45:06:e9:c2:de:6c:cb:f1:36:7f:7a:e6:bb:0a:1f:
69:9c:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:44 2026 by rpki-client