Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: N9cTAoSoZADliAuAthf+zln61C+/clZ40IyTOr9k2NQ=
Subject key identifier: BB:E0:D2:13:87:30:64:C8:AD:33:8E:B6:BC:17:AC:DD:8B:02:41:9B
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 01A12B0DACBD72BE044BF94EF438A14CAF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 13:01:18 +0000
Manifest this update: Sun 11 Oct 2026 13:01:18 +0000
Manifest next update: Mon 12 Oct 2026 13:01:18 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: 1KUqHZToB3CWNcP1AhEzmjlyiZcZJOBUvcc6hRJsPKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:ac:bd:72:be:04:4b:f9:4e:f4:38:a1:4c:af:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Oct 11 13:01:18 2026 GMT
Not After : Oct 12 13:01:18 2026 GMT
Subject: CN=bbe0d213873064c8ad338eb6bc17acdd8b02419b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d3:de:f9:b4:8c:61:b7:46:bb:49:2b:ce:57:
48:ed:56:a5:a1:7e:a6:c8:56:9b:c6:9d:1b:e2:24:
e7:35:91:40:6a:9f:5a:77:73:91:0e:9d:c7:37:df:
9f:c4:2b:3e:1f:b5:cc:0f:db:74:6b:2b:6b:51:20:
44:c6:98:3c:5d:fc:f1:1f:0e:16:a7:98:19:69:c3:
7c:34:09:37:d7:e1:07:33:22:f4:ce:76:66:21:ce:
06:08:9b:da:f9:43:56:06:4e:ac:f7:14:e6:a4:ca:
7f:f9:e1:cd:86:65:15:01:6a:95:b6:10:bb:02:b5:
23:3a:73:91:f5:c2:93:94:d0:00:3b:74:7c:e5:4c:
12:37:a4:8d:c1:e3:05:ba:ab:9a:03:5f:42:29:29:
25:d6:35:65:d3:b6:f3:1e:e3:c0:35:d2:ea:c5:29:
5a:8a:ad:60:c3:14:c9:03:b8:d0:a5:3a:b6:25:be:
00:ef:38:84:ce:a2:c0:99:c9:64:24:1b:8c:f8:05:
ab:d0:ac:74:1e:84:00:25:f1:3e:22:fd:be:a5:0c:
c2:48:b9:20:6c:69:9f:35:1b:c0:2c:c8:04:97:eb:
bf:aa:72:67:8e:84:62:e6:a2:ed:a7:7b:97:ac:42:
84:45:2b:db:2d:43:60:08:0d:c2:52:15:db:92:68:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E0:D2:13:87:30:64:C8:AD:33:8E:B6:BC:17:AC:DD:8B:02:41:9B
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f8:0b:99:39:3f:d2:09:1b:b6:cb:20:5b:e3:04:ce:a1:56:
4b:ba:4e:cd:77:35:78:49:d5:c3:48:c1:0f:f2:ca:c7:81:4b:
a7:45:b9:01:8c:48:a8:30:c9:b2:20:4f:a7:4d:48:0a:b7:58:
fc:c7:e8:d4:1a:ee:0f:ea:01:6f:ce:f3:b2:51:5b:56:0f:6a:
fa:fe:95:af:e1:34:a4:4b:da:4c:3e:14:5a:b6:0f:3d:e7:c4:
ca:ab:f6:b4:2d:0a:d0:6e:5e:57:2c:f3:a6:d5:73:25:a4:5f:
ff:4d:4e:41:e2:22:a4:d3:de:be:45:e0:ed:ed:62:ad:ba:7e:
7a:2c:47:74:b4:29:7f:5c:8e:94:38:39:b1:c9:16:ce:6e:29:
df:ec:fc:ba:ef:67:40:9f:eb:e0:d8:6f:28:fe:33:1b:50:6b:
37:aa:89:4e:29:c4:72:46:d7:72:0d:0a:95:18:8d:1a:9e:24:
41:d8:b6:f1:48:72:28:d7:38:2a:fa:6f:6e:a9:41:df:4c:b0:
07:e8:91:75:e7:e1:17:4a:df:28:04:92:29:0c:4a:68:39:03:
bf:30:c2:3f:af:33:24:93:4b:c0:2b:3d:7d:f1:ad:4b:bc:b8:
34:c8:09:49:46:04:8c:06:90:19:99:80:b0:54:8e:82:f6:f1:
1f:6f:d2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:27:47 2026 by rpki-client