Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: GioKDXicW0R++OeGZw5ua5sNVsQ3nFp0GpzDMMMHFjw=
Subject key identifier: 76:9C:F8:1A:F6:ED:9B:2E:EA:F8:80:41:EF:DD:7A:B8:37:FA:D5:A2
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019E20C825239AD188CC7E482E07466DDDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 10:00:48 +0000
Manifest this update: Wed 13 May 2026 10:00:48 +0000
Manifest next update: Thu 14 May 2026 10:00:48 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: 1K2V/e20oqV9m0T3Ugrqz1RQztuCORUGOGE+gXb90AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:25:23:9a:d1:88:cc:7e:48:2e:07:46:6d:dd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: May 13 10:00:48 2026 GMT
Not After : May 14 10:00:48 2026 GMT
Subject: CN=769cf81af6ed9b2eeaf88041efdd7ab837fad5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:52:cf:19:6c:70:a5:30:6c:dd:a9:20:45:
f8:f1:8f:95:ac:08:48:be:22:c9:03:f4:2e:f2:ec:
67:ba:79:1d:39:b7:33:9e:32:10:df:57:7a:53:5a:
b4:53:68:fe:16:5a:30:ab:6a:0a:35:8c:25:04:f8:
cd:63:2e:a2:82:ed:ce:b7:e8:a5:86:ee:6b:1c:cb:
b6:e3:b8:2f:2f:7f:69:d1:3c:6c:31:6d:35:b3:f0:
3a:eb:cb:d4:1b:9d:e4:ee:4f:20:5b:0a:19:d4:36:
99:9b:8e:44:b6:19:6a:97:bd:60:e4:6d:d4:c7:de:
c2:39:a8:46:ce:48:5e:cd:27:f4:ec:e6:f0:f4:c2:
a9:f4:a5:fa:c6:15:d2:94:ed:a7:ac:2f:07:7f:3e:
22:f7:82:63:61:c1:76:09:a1:dd:8f:b5:d6:9c:59:
71:7b:a9:01:12:81:5a:dc:c0:bd:9a:90:7f:4b:f7:
61:de:79:ed:4f:71:82:ed:e6:c0:84:41:cc:0c:f3:
96:1d:68:b0:c3:82:7a:56:36:12:3f:17:4c:5d:63:
0e:ab:37:63:d1:82:95:de:ac:9c:7c:a2:50:a0:e3:
9c:58:d1:61:17:02:7f:83:76:4d:2b:3b:94:4f:60:
b5:7e:f6:08:14:42:6d:74:4e:5c:4e:a8:49:63:1f:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9C:F8:1A:F6:ED:9B:2E:EA:F8:80:41:EF:DD:7A:B8:37:FA:D5:A2
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e0:d2:b9:28:46:51:11:34:13:7d:ef:a4:05:4c:e2:50:99:
b5:4b:93:2b:f9:a3:2c:4f:0a:2e:bc:8e:4b:ef:2e:a9:77:67:
11:c4:13:e1:5d:d4:3e:4a:fc:bf:24:2a:c7:85:8a:cc:e1:a5:
2d:de:21:96:ec:25:60:e9:82:b1:a9:4e:b0:24:22:df:8e:ec:
1e:11:e4:d3:38:d5:49:37:08:3a:fa:35:fa:fd:28:d6:c8:01:
47:f2:80:e6:ff:00:2b:86:32:91:b1:f0:5b:7f:8d:b2:54:88:
66:f7:86:f0:32:ff:eb:7c:30:60:61:d9:e7:45:cf:cf:f9:23:
96:35:a7:a9:78:01:5e:4e:e0:ad:d0:35:22:f9:36:43:75:77:
e4:72:ad:de:d5:97:90:8e:db:fb:b1:f5:24:97:c1:4c:99:53:
5b:ad:0c:20:18:ba:3e:fb:3a:b0:69:98:23:9a:3c:30:55:40:
24:0e:32:fb:c2:e6:2e:2a:a6:9f:ef:7e:91:e0:6d:2d:aa:27:
a7:1e:fa:c0:b2:88:a1:41:23:c5:db:34:8d:be:ce:65:b9:78:
8d:69:79:0f:47:ef:17:7a:20:b5:a4:a3:22:3b:99:e6:b3:64:
13:f0:3d:2c:bb:02:85:80:8a:ad:7d:c0:fa:2b:b4:e3:bc:d2:
3e:fa:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:17:40 2026 by rpki-client