Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
File: IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft (raw, json)
Hash identifier: YcWheIuNJsVfmXO0KCoJ185zX6xUaFPW0ikJ8GI7F5k=
Subject key identifier: 23:B8:38:C2:99:1C:3B:7E:15:EF:01:97:EE:2C:42:92:75:3A:24:E4
Authority key identifier: 21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
Certificate issuer: /CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Certificate serial: 019D371B979FF8EE7D7648BA1B653B1AAA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
Manifest number: 0B89
Signing time: Sun 29 Mar 2026 01:00:48 +0000
Manifest this update: Sun 29 Mar 2026 01:00:48 +0000
Manifest next update: Mon 30 Mar 2026 01:00:48 +0000
Files and hashes: 1: 0zoyQvyQtAcxybJRfWh9GMhsuXU.roa (hash: Nl+JhoxK6phZV0HP8vdC24526xfGx+8fsR9nnmIrPEk=)
2: IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl (hash: AbOr2+ENn845Y2xiszKQGbM2vfvRy4o/R6oAUEC8Uus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:97:9f:f8:ee:7d:76:48:ba:1b:65:3b:1a:aa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Validity
Not Before: Mar 29 01:00:48 2026 GMT
Not After : Mar 30 01:00:48 2026 GMT
Subject: CN=23b838c2991c3b7e15ef0197ee2c4292753a24e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:9a:29:6c:b1:4c:ea:ba:3f:5e:c8:40:40:
19:e8:ff:6d:05:ff:95:25:62:9b:e6:2f:a0:3a:15:
5d:80:c5:04:40:3c:82:7a:aa:32:39:ae:7d:4d:68:
c2:7a:41:c5:11:e4:9b:ac:ad:9d:11:0a:b1:7f:8f:
34:c9:d1:ea:25:44:92:59:02:66:00:8b:4f:7f:3f:
1d:02:0f:79:18:c8:cd:16:3f:58:c1:52:88:34:44:
af:0d:44:0a:5f:94:5d:1c:cc:80:8f:4c:06:34:4b:
5d:96:34:de:29:11:44:f6:0f:9b:62:fa:51:b9:ad:
c7:75:ad:1d:16:99:e1:3d:83:a9:d5:63:f1:7d:07:
b8:b2:3d:3a:f7:35:84:f0:bd:f9:48:42:4a:00:2a:
13:cd:54:aa:2c:55:14:13:4e:c8:96:5d:3e:2d:eb:
27:36:78:e8:48:5f:43:67:fb:73:1e:9a:b7:80:ec:
a9:39:06:de:8b:b1:93:1a:75:fe:4a:4c:c2:5b:14:
c8:41:19:45:fa:1f:ce:5d:2a:ec:e4:d3:48:19:88:
1a:29:9d:bd:36:72:31:9e:9f:59:cc:17:0b:0f:e6:
81:c4:af:d3:a0:3e:3f:f1:73:72:4b:9e:05:ec:5a:
ab:ef:49:d4:04:6d:a8:10:ad:6d:3c:16:13:9c:d7:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B8:38:C2:99:1C:3B:7E:15:EF:01:97:EE:2C:42:92:75:3A:24:E4
X509v3 Authority Key Identifier:
keyid:21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8c:69:cd:7d:9b:2c:14:10:44:b3:5b:96:8f:50:2f:ea:f5:
7f:27:80:19:30:60:7d:5e:74:8a:43:71:05:6c:b4:97:a0:cd:
0f:fe:72:ec:e2:ca:fa:57:f4:95:58:3b:e8:99:21:66:d0:06:
4f:f0:35:5c:36:37:82:af:80:cb:f6:29:34:b2:17:32:80:17:
8f:6b:47:f2:2c:33:24:83:94:bd:99:69:25:31:dd:d8:89:4d:
59:74:48:ad:88:f6:42:ca:ee:18:68:db:cc:9c:c5:9e:11:11:
78:a7:f7:c5:a1:f4:44:d4:16:c5:27:67:75:9d:d6:a6:ed:f0:
a7:20:82:1c:34:a8:3e:b1:28:b7:8c:a8:0a:b2:64:7a:68:79:
c4:8b:ba:c1:4e:01:ad:e9:13:b1:1a:bc:a3:6f:fe:e6:d5:e2:
d8:c6:0c:3f:89:e3:d8:bc:8c:90:f9:d7:7b:76:5c:64:48:fe:
b7:0f:dc:7c:ee:0e:3e:4c:5c:ae:53:58:64:86:04:16:80:41:
5e:c9:f4:2c:6d:07:b7:41:39:d5:6d:d4:18:c9:36:3f:ff:dc:
e7:18:5a:bf:de:32:30:11:80:83:2f:dc:0e:1f:3e:5e:af:ee:
ab:07:28:e9:5c:f7:a9:7d:c5:e7:3c:5e:e5:ae:12:8a:6b:ac:
a5:70:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:31 2026 by rpki-client