Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: /mRDv4x6xTEHcjgFLBiNIlsRfGFNg9CahIfSA416oxE=
Subject key identifier: CE:27:91:4E:7E:A5:14:4E:D9:E0:8F:11:E5:73:56:FB:45:38:88:94
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 019D37C014F5D99D03ED90D162E53870D3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:28 +0000
Manifest this update: Sun 29 Mar 2026 04:00:28 +0000
Manifest next update: Mon 30 Mar 2026 04:00:28 +0000
Files and hashes: 1: 0fY2-frVSg1jq699GFwRUoCBlNc.roa (hash: eUT643x5xx8hSJT1XefBsreuEw6p88bqGvTup19SiEs=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: GbLK52DmnaScFfqtKc2SqOv4IbhK++8nkfhed+VDb+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:14:f5:d9:9d:03:ed:90:d1:62:e5:38:70:d3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Mar 29 04:00:28 2026 GMT
Not After : Mar 30 04:00:28 2026 GMT
Subject: CN=ce27914e7ea5144ed9e08f11e57356fb45388894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:8a:9e:bf:94:7a:cd:1a:c7:c7:c6:cf:30:
15:a1:9e:e5:79:b8:41:b0:0c:74:7a:a8:a0:3d:ee:
23:51:8e:29:25:9b:54:85:e3:f9:fa:70:d0:e4:22:
7a:7e:6b:ef:68:5f:66:60:ae:9b:41:1b:d6:a2:e0:
8b:47:d8:ec:52:2e:fb:b6:58:36:1a:62:94:75:30:
ba:d7:97:b9:53:26:cb:07:fa:f2:95:90:75:b6:1d:
3b:33:79:e9:21:c0:c3:9f:ad:25:53:cf:39:a2:b1:
60:84:4d:49:0f:44:66:8a:b7:c0:d0:ed:d1:e5:d0:
79:4b:09:7d:d1:de:11:6e:04:26:0b:f0:4b:29:60:
00:9a:b9:c6:23:db:59:59:d1:28:b2:96:1f:c4:40:
e7:49:8d:77:2d:8e:f0:64:b0:40:6a:c9:67:96:73:
a7:1e:36:65:de:4e:71:c3:34:9a:be:ab:a6:f3:51:
0f:0e:dd:15:23:61:8a:97:df:fa:2a:93:7d:5b:3e:
6e:84:ae:10:18:26:6f:85:fa:79:c3:53:e6:95:e2:
3a:6b:51:81:18:e9:e4:55:18:9a:82:74:94:b8:64:
bf:67:5d:74:d2:01:ec:c9:1e:02:e8:d8:2f:da:e3:
ad:7f:00:df:01:45:fe:3f:1e:02:80:28:7a:68:0f:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:27:91:4E:7E:A5:14:4E:D9:E0:8F:11:E5:73:56:FB:45:38:88:94
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f8:c1:af:ad:d1:d3:9f:97:61:0b:f3:d9:83:35:fb:0a:d7:
e3:93:72:27:62:46:cc:c5:55:e2:86:21:0a:30:d5:8a:f9:89:
51:49:57:f0:24:5b:5c:c6:a5:49:25:bd:94:4a:a5:cc:bc:2d:
24:b3:a8:58:1b:7d:b4:44:56:6e:a6:78:18:a1:b0:ab:0b:28:
34:29:d6:71:25:39:9e:8a:9d:ae:b6:4e:10:ac:b9:07:28:8d:
33:8e:a9:a6:f9:25:da:7e:46:17:45:e6:05:de:e5:03:c9:60:
ae:ba:9e:32:e4:b0:1c:58:ea:e7:54:29:6c:6a:69:21:fd:d4:
d1:c5:0d:db:99:ef:21:bd:c1:c7:01:6a:c3:a7:a9:ce:d8:98:
a3:79:32:91:95:46:d7:3c:d9:fb:2c:f0:92:ab:29:85:b0:da:
07:e7:10:bf:dd:74:2b:75:61:56:49:c7:21:73:a4:6b:b7:e0:
19:a4:e7:aa:54:f8:ff:46:e1:9c:33:52:33:73:10:50:c4:79:
82:e9:b1:24:ee:17:3d:84:02:4d:95:7e:af:28:b1:3c:42:0d:
61:fa:3f:78:5d:90:63:b0:ea:26:e6:b2:85:8a:0d:8d:8d:33:
40:7a:14:a4:51:66:32:2b:5f:50:79:af:40:14:d3:8c:60:2c:
d3:cc:af:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wBT12Z0D7ZDRYuU4cNPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTIyZjhiZGVkY2JlMTliYjMzZmNlMTRmYzFkYjZhZTNh
NDBlOTAwHhcNMjYwMzI5MDQwMDI4WhcNMjYwMzMwMDQwMDI4WjAzMTEwLwYDVQQD
EyhjZTI3OTE0ZTdlYTUxNDRlZDllMDhmMTFlNTczNTZmYjQ1Mzg4ODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GSKnr+Ues0ax8fGzzAVoZ7lebhB
sAx0eqigPe4jUY4pJZtUheP5+nDQ5CJ6fmvvaF9mYK6bQRvWouCLR9jsUi77tlg2
GmKUdTC615e5UybLB/rylZB1th07M3npIcDDn60lU885orFghE1JD0RmirfA0O3R
5dB5Swl90d4RbgQmC/BLKWAAmrnGI9tZWdEospYfxEDnSY13LY7wZLBAaslnlnOn
HjZl3k5xwzSavqum81EPDt0VI2GKl9/6KpN9Wz5uhK4QGCZvhfp5w1PmleI6a1GB
GOnkVRiagnSUuGS/Z1100gHsyR4C6Ngv2uOtfwDfAUX+Px4CgCh6aA95cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4nkU5+pRRO2eCPEeVzVvtFOIiUMB8GA1UdIwQY
MBaAFCPiL4ve3L4ZuzP84U/B22rjpA6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMt
NzRiZDA0NWIyYWY3LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMtNzRiZDA0NWIyYWY3
LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/jBr63R
05+XYQvz2YM1+wrX45NyJ2JGzMVV4oYhCjDVivmJUUlX8CRbXMalSSW9lEqlzLwt
JLOoWBt9tERWbqZ4GKGwqwsoNCnWcSU5noqdrrZOEKy5ByiNM46ppvkl2n5GF0Xm
Bd7lA8lgrrqeMuSwHFjq51QpbGppIf3U0cUN25nvIb3BxwFqw6epztiYo3kykZVG
1zzZ+yzwkqsphbDaB+cQv910K3VhVknHIXOka7fgGaTnqlT4/0bhnDNSM3MQUMR5
gumxJO4XPYQCTZV+ryixPEINYfo/eF2QY7DqJuayhYoNjY0zQHoUpFFmMitfUHmv
QBTTjGAs08yvNw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:40 2026 by rpki-client