Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: 4tm2+IX/VU06mtB94ygeMNkF+Fu38NoXzBPUvYcMXGI=
Subject key identifier: 8A:00:D8:55:87:53:4F:13:E6:01:4B:68:F8:C4:86:C7:A0:ED:BF:DA
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 01A0ED421511DABFF00013E90AD2ED0D0F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 153C
Signing time: Tue 29 Sep 2026 13:02:05 +0000
Manifest this update: Tue 29 Sep 2026 13:02:05 +0000
Manifest next update: Wed 30 Sep 2026 13:02:05 +0000
Files and hashes: 1: A0vguZeSZvjbO1iAp7ep30taXaU.roa (hash: OFdk7Efqg14eKcFzGkyEl7CmU/rQu1LKkHn7D4lTfd0=)
2: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: W/hXs/F0XAMySD0lbI5tnuht3WUrVF0kt16ah9v0Mac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:42:15:11:da:bf:f0:00:13:e9:0a:d2:ed:0d:0f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Sep 29 13:02:05 2026 GMT
Not After : Sep 30 13:02:05 2026 GMT
Subject: CN=8a00d85587534f13e6014b68f8c486c7a0edbfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:18:09:35:24:af:e1:f3:dd:a8:20:6b:60:
c4:66:c8:09:21:75:07:19:23:29:aa:35:e3:eb:8e:
f6:09:a8:40:b1:0e:5f:3b:63:ee:8e:83:06:bb:48:
4e:2f:4a:0a:65:86:e8:5e:b5:9c:48:ca:92:22:7a:
02:6d:a2:0b:d9:b0:78:67:b2:08:41:4e:f7:c0:1e:
a8:6c:03:a6:12:7d:c1:ba:a2:7e:48:4f:06:0e:96:
08:92:3e:ab:05:e8:2b:a3:bd:5f:6e:2e:aa:be:de:
86:91:87:93:d8:6f:c9:72:d2:ae:3e:5d:ae:77:18:
e8:19:23:a4:42:1c:a3:db:70:62:24:f1:3d:c0:e1:
63:b8:74:99:8c:e8:7e:75:02:b9:2c:6f:dd:f7:9c:
98:9c:51:89:27:39:2d:80:8d:87:1d:e3:4f:11:3d:
ab:d3:3c:f4:f5:5c:eb:89:57:da:f7:04:6f:cf:6f:
4a:6a:f3:11:5b:55:35:f3:cf:22:48:a3:b8:b0:74:
4c:e0:d8:70:62:43:6e:84:e8:c1:6f:7e:9d:86:ac:
03:08:4c:9e:c3:53:63:af:be:0f:f0:54:dd:7a:0b:
64:71:87:57:5b:80:ec:f7:5a:a1:58:ec:05:ea:76:
4f:b0:6b:fe:c2:18:a4:3d:da:a3:e9:f3:51:24:4d:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:00:D8:55:87:53:4F:13:E6:01:4B:68:F8:C4:86:C7:A0:ED:BF:DA
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:89:2c:b3:6f:06:d9:0a:90:60:78:53:9a:8c:d4:7d:05:9d:
8f:cc:7e:f0:8e:9a:d1:7d:69:08:f4:36:01:bc:dd:bc:6f:26:
2f:60:22:8c:97:d7:35:5e:a4:c6:0c:e1:2c:05:dc:df:e8:5b:
c0:8a:10:a1:1a:a4:b3:24:1b:3c:b7:5e:35:7d:53:04:f7:9d:
26:eb:c7:8c:87:22:26:77:49:e7:b4:f7:54:82:76:d2:93:39:
04:8c:9f:e7:a8:a5:7d:81:2d:d5:63:02:50:2a:5c:c3:b2:08:
c8:39:a3:fd:8e:99:fd:13:92:f8:5a:e1:b3:a8:d7:45:e8:de:
22:d1:df:0e:c3:7e:ec:76:0b:28:37:ba:3c:fc:1d:d9:52:b0:
f0:96:c1:60:89:bb:1b:a4:43:63:f6:44:cb:a8:4d:62:4c:db:
99:12:8f:ea:d5:7d:23:a5:93:34:95:27:8b:8c:2a:dd:c4:fb:
9a:9e:6f:7a:57:7c:d0:56:10:7f:28:40:cf:12:d8:a6:08:d1:
53:e6:ed:b1:56:77:23:46:fb:0b:af:27:0b:72:cd:bb:aa:fd:
c3:c2:94:47:42:0b:d5:4d:7a:9b:3c:b2:35:06:57:61:60:b4:
e0:c4:22:9a:12:90:19:8e:e1:14:bb:88:a0:db:92:c3:b9:2c:
99:da:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:13:45 2026 by rpki-client