
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier: VC0kWibB1JA5JIweVWVP5hQW574HiUbHOOiWX6yN1oc=
Subject key identifier: D5:6D:9D:B5:02:3B:52:84:2E:DA:12:AB:B2:23:F6:7E:8A:25:3D:90
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 019FA14E0F70752CA533288FA8C5D26DBD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number: 15B9
Signing time: Mon 27 Jul 2026 02:01:15 +0000
Manifest this update: Mon 27 Jul 2026 02:01:15 +0000
Manifest next update: Tue 28 Jul 2026 02:01:15 +0000
Files and hashes: 1: AXDbFHRRURCQerpRgnAggK7Ta-Y.roa (hash: p8zZBqBwXmRPjDHpTUw1CzO1XmAgl9lFsGmMaXiazxE=)
2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: zoOcaqsQOkWniXiS/WjKaF8AgdAHQruFggzvuXO6ktI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:0f:70:75:2c:a5:33:28:8f:a8:c5:d2:6d:bd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Jul 27 02:01:15 2026 GMT
Not After : Jul 28 02:01:15 2026 GMT
Subject: CN=d56d9db5023b52842eda12abb223f67e8a253d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:e3:31:0e:3a:40:77:4f:f4:23:a2:84:52:
38:d7:75:78:db:b5:47:89:3d:bf:05:d7:0d:62:39:
94:71:df:92:97:20:57:9d:d3:35:62:4f:2b:53:5f:
7a:cf:27:31:4a:cf:07:bd:60:cb:3c:4e:02:ed:55:
b7:7a:af:b1:a7:13:59:8a:48:9d:40:ba:4c:66:2e:
e0:e1:ee:b4:aa:ad:08:17:79:e5:62:6d:fd:d6:be:
e0:91:91:35:d4:ac:74:3a:13:23:85:df:8f:e7:2a:
7c:c2:6d:c5:9c:64:e5:6a:eb:d2:0c:a8:c5:e0:0a:
b8:02:c7:37:fb:08:cf:83:55:1a:07:ef:ab:b6:3a:
dc:0d:c4:1d:95:84:e0:2e:3e:b3:ad:a8:9a:6e:13:
33:62:4f:ba:57:9e:8b:97:8d:60:eb:a3:64:43:c1:
d6:63:1f:95:cc:c5:95:a8:a5:01:27:52:8c:db:4d:
4a:9c:6a:d4:3a:0c:d3:b2:cf:3d:fa:3d:49:11:ff:
cc:5c:8b:47:76:cd:5a:74:b9:8f:26:cf:e4:f5:af:
a0:7f:09:0f:9a:61:89:fb:a3:d9:ad:74:b1:91:67:
39:c7:ce:99:b8:47:11:d4:09:84:be:63:43:93:bc:
3d:2a:fc:55:0d:9e:9c:90:33:2b:df:9d:5b:52:8b:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6D:9D:B5:02:3B:52:84:2E:DA:12:AB:B2:23:F6:7E:8A:25:3D:90
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:18:4a:05:03:49:64:69:1b:3e:6d:35:68:04:da:69:69:79:
0e:a4:aa:2e:18:23:35:d0:d0:6f:58:2c:90:3e:8a:39:85:ad:
a4:39:fc:6e:1f:03:57:21:57:de:c9:e3:74:6e:31:cd:68:7b:
a1:93:09:cf:2a:4b:ff:96:bb:a9:9f:47:26:ab:40:d0:75:62:
c0:6e:79:ca:31:8f:18:fe:bc:6c:bb:31:16:d6:03:e6:2f:b9:
2f:a6:09:66:f2:6e:10:da:af:85:05:a4:25:22:ce:8c:fc:e5:
d7:32:a2:78:55:f1:a9:43:29:e8:b0:9a:82:69:2a:40:fd:24:
0e:76:5a:15:e0:91:80:1b:f9:64:8c:57:ea:02:59:46:0a:3c:
70:96:95:a9:4e:97:42:a2:36:96:1c:36:59:7f:61:12:69:29:
87:4e:bc:09:c8:bf:af:66:73:3f:1c:18:cf:5d:85:d7:24:8d:
93:9d:c3:79:cb:05:9b:75:a3:a5:82:01:f1:49:07:bd:d3:78:
21:56:42:8a:f7:ca:c1:92:67:8e:fb:a0:84:77:ac:e4:27:09:
c3:30:d7:d7:dc:fb:c2:08:43:a8:c6:e5:3b:6d:22:6f:d2:06:
81:b3:ee:49:01:bd:fc:6a:d1:76:d7:3f:d1:61:9f:3e:a1:b9:
ea:9f:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:55 2026 by rpki-client