Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: 7UNhstJoi57HKJS/baATmd/W5qIOWwKTkGdADvC/RQk=
Subject key identifier: 8D:3B:17:31:DF:CB:1A:79:58:52:37:72:CB:B2:68:2A:F0:B1:03:01
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 01A18C410CDF2FF438A0337AFBF61002AA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 1ACD
Signing time: Fri 30 Oct 2026 10:00:35 +0000
Manifest this update: Fri 30 Oct 2026 10:00:35 +0000
Manifest next update: Sat 31 Oct 2026 10:00:35 +0000
Files and hashes: 1: 0fY2-frVSg1jq699GFwRUoCBlNc.roa (hash: eUT643x5xx8hSJT1XefBsreuEw6p88bqGvTup19SiEs=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: TzuJwRSp0tvBbfgZWH6kYuqARdmwXvokiHC+wqMw0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:0c:df:2f:f4:38:a0:33:7a:fb:f6:10:02:aa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Oct 30 10:00:35 2026 GMT
Not After : Oct 31 10:00:35 2026 GMT
Subject: CN=8d3b1731dfcb1a7958523772cbb2682af0b10301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:3f:fe:77:da:c3:45:c2:13:1c:c4:5a:a9:
a0:86:86:5e:54:89:a0:2f:b2:31:d6:22:33:57:34:
13:70:1a:a5:60:7d:6b:4c:76:45:2b:4d:00:24:3a:
4f:14:00:e4:f4:cc:d6:d2:bf:df:42:f7:79:57:e9:
3a:09:8b:4a:ff:65:f9:8d:f0:c8:ef:d9:9f:80:6b:
03:27:25:0d:0e:c9:76:13:15:f9:ad:33:81:4c:48:
e3:a4:da:5f:d6:96:5f:14:3e:e9:e8:ad:e3:f1:88:
88:81:47:4f:7c:29:0f:c4:6c:98:96:3e:e8:55:70:
98:e6:87:01:30:7a:82:13:ec:a5:fe:82:5c:ee:09:
81:7f:5a:b8:17:28:69:62:e3:39:3c:f1:a7:81:af:
2a:a1:c6:cd:ba:f2:4a:65:7a:f2:1a:d6:68:58:7a:
d0:13:57:7f:d2:ca:b9:f7:a5:1a:d3:9b:31:18:2e:
83:a9:99:c6:ea:da:f2:4e:2b:53:f4:60:40:01:f0:
3b:82:c8:ab:69:ff:08:60:4f:6c:21:c4:29:38:36:
a6:92:fd:f6:22:34:80:99:25:bf:c6:0f:b5:11:17:
8b:0b:9c:00:33:4e:26:9e:34:d5:73:78:b8:a6:dd:
ce:93:28:5d:31:4a:2b:6c:86:9d:1b:78:cf:fb:39:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3B:17:31:DF:CB:1A:79:58:52:37:72:CB:B2:68:2A:F0:B1:03:01
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:38:9d:91:54:d5:28:1d:34:0b:bc:a0:1e:ab:64:82:54:f4:
a0:be:cb:e7:b2:d8:90:a1:98:6f:23:98:19:f5:a4:8c:15:ff:
eb:f6:3a:e1:9b:ed:fb:5d:ce:5f:ec:2c:bc:30:8f:94:3b:29:
48:9d:95:46:03:4a:31:19:4a:00:89:28:9f:21:a8:6d:2f:80:
f4:66:e0:0a:82:e3:99:c6:6d:88:c8:46:ce:fd:fa:12:43:94:
71:09:c1:b8:95:65:c4:50:81:94:42:71:48:04:36:42:4f:a0:
f7:b3:0c:e4:21:ac:e2:64:0c:65:29:eb:51:74:d6:1f:5b:e5:
3b:e3:a7:60:6b:e6:d9:e1:d1:e6:f7:8d:86:d8:df:c9:70:a8:
99:ee:2b:fa:fd:8e:af:84:e9:1d:86:6c:e8:09:a7:68:52:3e:
d8:30:8b:5f:a5:ee:fa:15:b1:48:4f:9c:52:31:9f:d1:27:de:
10:43:42:3d:6e:30:c4:9b:a2:03:3d:93:f4:c6:b9:17:cc:ae:
08:58:21:44:e2:08:d6:62:db:4d:63:e0:76:72:ba:46:c0:b1:
eb:3e:aa:8d:9e:07:49:aa:dd:e2:d2:d6:c1:aa:25:49:9e:b4:
c9:2a:85:8d:cf:fb:c1:97:b7:37:91:5e:cb:a6:65:8b:6d:82:
3b:76:bf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:22:24 2026 by rpki-client