Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: +xeGWhGS9qEOB0FpaPmxuLom6pjaS3USSUfG8tmmx8U=
Subject key identifier: EA:55:72:7A:6B:A0:5E:6E:AB:E4:D7:6F:A4:1E:7F:DF:4A:37:26:DA
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019D25BAEE653BEAAF355D485515726607C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:01:40 +0000
Manifest this update: Wed 25 Mar 2026 16:01:40 +0000
Manifest next update: Thu 26 Mar 2026 16:01:40 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: qTOmZFEWw7M7QqVD/Uo0RrhjbtjVnItoX2Bea4Jzxzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ee:65:3b:ea:af:35:5d:48:55:15:72:66:07:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Mar 25 16:01:40 2026 GMT
Not After : Mar 26 16:01:40 2026 GMT
Subject: CN=ea55727a6ba05e6eabe4d76fa41e7fdf4a3726da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:2f:01:e2:27:1b:16:48:45:4b:96:0b:74:
01:21:68:21:51:e0:f0:1d:91:58:2c:ee:bc:e0:50:
5e:6d:25:86:fa:2b:9f:26:4f:13:a3:70:ef:3b:16:
b8:e3:45:b6:c2:c8:d9:f4:1c:80:50:3a:16:40:26:
c0:0d:4c:ea:a2:48:f2:ab:ff:48:11:af:20:30:6f:
f1:d2:b0:2e:50:0f:16:91:a4:22:cb:a3:d6:e8:6c:
79:58:6a:0b:d5:5e:6e:13:1d:ee:5e:47:78:b0:0c:
e3:f0:98:69:66:fa:3a:41:d0:83:16:c0:bf:85:1f:
8e:3f:76:58:00:fb:09:f6:cd:1c:ad:af:dc:66:67:
c3:3f:66:02:2e:9d:1f:3c:0a:b2:c8:a8:e7:13:b3:
ae:11:5d:8e:76:6b:5c:a1:e6:ee:0c:f0:ec:85:bd:
f9:2e:5e:26:23:7c:69:f1:08:d0:05:b5:09:61:bc:
51:31:4f:c4:21:72:ad:11:c1:a1:a1:2e:62:d2:06:
83:99:4e:7e:12:c7:e4:22:62:79:d2:59:c3:cf:69:
84:26:92:00:80:5f:1e:c3:38:fa:8f:ed:79:b4:96:
81:a8:8a:a6:bd:54:a6:ab:5c:0d:23:16:e0:45:6d:
f3:7b:08:68:5d:59:3d:13:93:a0:89:e3:ad:f8:c6:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:72:7A:6B:A0:5E:6E:AB:E4:D7:6F:A4:1E:7F:DF:4A:37:26:DA
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:a1:26:c6:b2:19:9f:ed:98:aa:d9:32:35:67:3b:79:23:
67:15:c7:43:79:1a:fb:dc:d2:eb:d8:a5:ad:c4:b5:da:83:80:
18:4d:e1:eb:d0:5a:06:c4:f3:1a:b1:44:6b:1f:55:26:b6:3a:
1c:46:3e:f1:ea:0c:5f:76:19:31:ba:08:e2:ba:4f:65:29:53:
6b:b9:d0:d0:0e:e5:03:d1:19:77:28:c9:05:d6:e1:0a:e3:ca:
a5:25:08:7a:11:ba:44:10:17:d6:af:c2:d0:65:94:01:84:66:
3c:76:26:ea:91:87:40:21:d9:e6:a3:d9:23:44:40:e2:b0:ee:
9e:50:02:0e:ef:09:dc:14:7f:e9:85:30:1e:82:4f:2b:21:5f:
d3:3b:f8:37:8c:e5:5a:49:9d:c2:53:fb:71:95:8d:4c:ce:42:
0b:5a:4d:5e:68:ed:f9:31:7f:f0:e9:e2:91:36:26:c0:9d:f3:
d9:7e:d3:18:f4:11:5a:4a:f7:65:65:c9:86:93:79:d1:e8:b0:
53:9d:eb:78:3f:86:95:17:71:12:54:32:40:c9:bb:81:34:a4:
aa:6e:46:2b:83:d4:46:46:09:fe:e1:bd:7c:38:8d:a7:23:ee:
03:d5:32:42:b9:b0:5a:7b:bc:16:fe:ce:e2:51:12:33:8a:2e:
01:a3:b6:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luu5lO+qvNV1IVRVyZgfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZmMzMWYzNmM5Nzc3N2Y5MDZiOTNlODNhZTY1N2YwMGFl
YjMwOTkwHhcNMjYwMzI1MTYwMTQwWhcNMjYwMzI2MTYwMTQwWjAzMTEwLwYDVQQD
EyhlYTU1NzI3YTZiYTA1ZTZlYWJlNGQ3NmZhNDFlN2ZkZjRhMzcyNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf0vAeInGxZIRUuWC3QBIWghUeDw
HZFYLO684FBebSWG+iufJk8To3DvOxa440W2wsjZ9ByAUDoWQCbADUzqokjyq/9I
Ea8gMG/x0rAuUA8WkaQiy6PW6Gx5WGoL1V5uEx3uXkd4sAzj8JhpZvo6QdCDFsC/
hR+OP3ZYAPsJ9s0cra/cZmfDP2YCLp0fPAqyyKjnE7OuEV2OdmtcoebuDPDshb35
Ll4mI3xp8QjQBbUJYbxRMU/EIXKtEcGhoS5i0gaDmU5+EsfkImJ50lnDz2mEJpIA
gF8ewzj6j+15tJaBqIqmvVSmq1wNIxbgRW3zewhoXVk9E5OgieOt+MbSdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpVcnproF5uq+TXb6Qef99KNybaMB8GA1UdIwQY
MBaAFIr8MfNsl3d/kGuT6DrmV/AK6zCZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQt
MDcxMTY5NDAwMGEwLzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQtMDcxMTY5NDAwMGEw
LzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyWhJsay
GZ/tmKrZMjVnO3kjZxXHQ3ka+9zS69ilrcS12oOAGE3h69BaBsTzGrFEax9VJrY6
HEY+8eoMX3YZMboI4rpPZSlTa7nQ0A7lA9EZdyjJBdbhCuPKpSUIehG6RBAX1q/C
0GWUAYRmPHYm6pGHQCHZ5qPZI0RA4rDunlACDu8J3BR/6YUwHoJPKyFf0zv4N4zl
WkmdwlP7cZWNTM5CC1pNXmjt+TF/8OnikTYmwJ3z2X7TGPQRWkr3ZWXJhpN50eiw
U53reD+GlRdxElQyQMm7gTSkqm5GK4PURkYJ/uG9fDiNpyPuA9UyQrmwWnu8Fv7O
4lESM4ouAaO2TQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:42 2026 by rpki-client