Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: WB0dzuADTbFlmtOmzgC7ELAU4ANEVQAM49iUT0LZpg0=
Subject key identifier: 4E:58:FE:DF:A6:7C:9E:20:A1:A5:B7:0A:99:F3:22:C5:82:23:2D:A3
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019F9580783C3486B83B9879ACD59109FBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 19:00:52 +0000
Manifest this update: Fri 24 Jul 2026 19:00:52 +0000
Manifest next update: Sat 25 Jul 2026 19:00:52 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: OG+C47QPMppWlHQWeIumZthfUhJYEoC/0PFTKTPdcY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:78:3c:34:86:b8:3b:98:79:ac:d5:91:09:fb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jul 24 19:00:52 2026 GMT
Not After : Jul 25 19:00:52 2026 GMT
Subject: CN=4e58fedfa67c9e20a1a5b70a99f322c582232da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:e7:97:e5:8c:85:a0:ec:9d:da:d4:b5:23:
e5:85:1a:b8:50:e9:64:78:aa:ab:18:c7:ee:b9:8b:
17:38:77:e5:dd:39:de:89:2a:d2:36:cf:48:1a:65:
da:cf:54:f0:fb:fd:52:ef:e5:9a:ab:3a:c7:f7:08:
b0:33:10:f4:57:eb:8c:c6:14:77:01:fc:e0:f3:5d:
96:19:24:ce:62:e6:f0:8a:6c:57:73:1a:6e:81:74:
50:75:8d:00:89:bb:87:00:9c:c8:8c:e3:8e:ab:77:
ba:32:34:bd:09:93:ea:36:e9:15:3f:8a:df:cc:4d:
2a:09:de:6c:ae:03:99:8c:2b:70:67:5e:25:cc:40:
1f:49:7d:55:40:11:4b:88:c1:e1:fc:95:5c:e3:c6:
4d:6c:1d:96:4b:64:25:2d:68:9a:08:52:48:6d:04:
64:29:1b:ad:e5:5d:39:57:ed:a6:6e:b2:29:19:0f:
f4:84:a6:87:46:ac:bd:e6:6b:b2:4b:57:96:52:91:
78:1e:1a:be:fc:b3:6c:22:41:9d:1e:25:cd:14:24:
40:2f:69:40:f1:fa:99:02:10:c4:57:40:a2:87:51:
16:59:d2:76:99:ec:3b:4c:99:9b:87:25:86:eb:d5:
f7:8d:9f:eb:87:8a:43:58:fc:e6:a8:17:e9:71:c8:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:58:FE:DF:A6:7C:9E:20:A1:A5:B7:0A:99:F3:22:C5:82:23:2D:A3
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e8:81:39:db:74:ab:94:47:73:3b:ec:83:d4:44:df:56:ed:
67:33:d1:59:64:ad:8f:54:38:be:a8:ab:d6:b2:de:fb:df:06:
e5:83:8d:4a:1f:19:ed:7a:8f:bc:0a:09:d5:8d:e7:31:55:6e:
bf:47:e1:7b:48:8e:f7:a6:45:7e:0e:6f:8e:07:86:a1:81:01:
11:3e:b3:43:77:1b:85:92:f5:49:f8:d6:35:5b:0a:68:0b:0d:
d8:66:43:a6:8d:45:eb:42:64:00:1b:bb:97:cc:8f:7b:9d:4d:
02:00:ba:67:40:f5:fa:7f:02:6e:24:4c:d2:2e:18:cb:2d:ef:
41:d8:2f:fe:24:3b:0c:a9:88:31:1c:66:65:75:50:1a:5c:30:
50:3c:6b:9b:e9:70:f1:88:38:6c:da:db:1b:43:76:03:f0:b9:
a3:65:64:34:bb:44:8a:18:f6:ba:c2:39:63:35:b9:c4:75:8b:
49:ed:d2:51:d5:36:7f:88:be:fb:aa:31:96:3a:3c:62:35:30:
b6:19:10:25:75:9f:85:7c:a7:17:96:06:66:b6:dd:a2:e4:d8:
9a:dd:89:4c:b8:46:84:e8:df:75:75:11:16:28:a7:a7:6c:cd:
49:32:fa:8f:ad:33:00:31:2e:71:ec:a8:4e:e3:b1:58:34:1f:
39:35:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:52 2026 by rpki-client