Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier: 7SDe/nandiovdeYtOnnM9NDjgu9W890U82Q9CwJ6saM=
Subject key identifier: 20:0D:68:98:ED:2A:56:C1:91:34:90:8C:58:B0:A6:D2:BC:E5:3F:D9
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 019D375333C25F2A7C223853FF0AC3CD63CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number: 1479
Signing time: Sun 29 Mar 2026 02:01:32 +0000
Manifest this update: Sun 29 Mar 2026 02:01:32 +0000
Manifest next update: Mon 30 Mar 2026 02:01:32 +0000
Files and hashes: 1: AXDbFHRRURCQerpRgnAggK7Ta-Y.roa (hash: p8zZBqBwXmRPjDHpTUw1CzO1XmAgl9lFsGmMaXiazxE=)
2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: Pp8+lfxi6m/GvwV3W174AY9FvwD7frbbM7R9A6ivogQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:33:c2:5f:2a:7c:22:38:53:ff:0a:c3:cd:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Mar 29 02:01:32 2026 GMT
Not After : Mar 30 02:01:32 2026 GMT
Subject: CN=200d6898ed2a56c19134908c58b0a6d2bce53fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:61:60:40:85:a8:0d:c6:29:15:41:1a:38:
e4:61:d5:b7:97:04:d0:74:e4:16:b5:3c:e4:5e:32:
54:7d:9e:2a:ec:70:b4:28:73:2f:7d:24:a3:2b:9b:
ba:dc:33:61:4b:5c:9a:09:56:94:22:0a:19:58:77:
20:aa:12:96:d2:5e:50:b8:3c:1f:91:33:04:fd:12:
12:44:a0:79:92:6c:1d:28:41:35:38:64:45:a3:e4:
09:dc:cd:49:0b:a4:04:af:ba:97:a8:57:96:4b:0b:
c3:63:99:d8:5b:d8:08:a4:6d:8d:9c:1b:0f:ce:71:
74:af:8c:a8:82:95:8b:4e:bf:89:ee:86:b9:49:c9:
95:19:1f:92:5d:cf:66:ae:03:a9:a9:33:28:66:e2:
41:bd:b1:57:45:02:a7:8a:79:15:cb:23:de:87:70:
0f:54:da:75:cc:28:95:bf:6d:3e:d3:c9:ce:55:5d:
b7:83:79:e8:59:de:2f:fa:b6:b0:81:10:9e:83:72:
fb:95:c4:de:f6:b0:21:28:7b:56:60:02:ac:11:f0:
fa:0e:cd:5a:6b:10:74:2c:e9:b9:c1:34:12:cc:bf:
1b:45:73:ce:0c:a7:07:65:35:b7:c3:fe:3b:bd:18:
93:c1:f1:00:e7:20:aa:b2:f7:7e:f6:75:76:cd:44:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:68:98:ED:2A:56:C1:91:34:90:8C:58:B0:A6:D2:BC:E5:3F:D9
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5f:c6:95:cb:c9:57:b2:57:33:f5:6f:4e:f0:9d:20:a4:61:
bc:11:c1:c5:aa:a2:e5:47:6a:51:fa:64:27:2b:57:d0:a9:17:
98:80:f9:d5:38:09:f5:a9:16:a4:87:14:89:25:e6:f8:cd:93:
5e:74:3f:d7:30:3d:2f:2f:d4:77:9f:28:03:36:4c:99:a4:e7:
a6:13:10:8c:49:d3:87:bd:47:b4:0c:31:1f:c0:60:3e:cb:2c:
5b:34:8e:72:b2:50:5b:e4:01:50:40:8f:c0:5b:1c:e2:7e:20:
99:04:2d:1c:e2:9c:57:4b:e2:50:ff:8e:05:39:03:c1:1c:4c:
6f:f1:56:da:78:cb:46:a5:21:c3:cb:0e:3b:ff:7f:2f:6d:9d:
23:cd:a2:de:40:d2:0f:00:7a:bc:c4:a0:65:73:81:be:67:b4:
79:b7:69:2e:f3:c7:08:82:44:0a:92:e9:20:bf:7a:72:9f:32:
ab:b1:a4:85:f5:32:fe:91:46:7f:40:6f:32:33:30:e7:68:97:
71:4c:4e:10:62:ad:04:e6:2b:36:3b:84:2e:f6:c5:8d:27:cf:
13:0a:27:78:df:09:ba:a5:e5:12:85:7e:f1:c8:5e:13:26:6b:
62:1b:81:06:82:27:df:76:40:4d:49:d8:c8:31:94:8e:2d:92:
2d:18:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:42 2026 by rpki-client