Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: tx6y4HP0JpYEzkHAVRZGOfv7eANL54aQtUASXWXLimg=
Subject key identifier: 6A:9B:E5:02:40:A2:40:02:F1:F3:60:47:E3:26:98:C2:2D:0E:4E:71
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 019D299727ECDA6728AA6BAD32AD4C0DEF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 1349
Signing time: Thu 26 Mar 2026 10:01:05 +0000
Manifest this update: Thu 26 Mar 2026 10:01:05 +0000
Manifest next update: Fri 27 Mar 2026 10:01:05 +0000
Files and hashes: 1: A0vguZeSZvjbO1iAp7ep30taXaU.roa (hash: OFdk7Efqg14eKcFzGkyEl7CmU/rQu1LKkHn7D4lTfd0=)
2: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: Ayo5Dk9lC/vP75L5mpOALaSfGV4tIprgN6b89KvT6tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:27:ec:da:67:28:aa:6b:ad:32:ad:4c:0d:ef:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Mar 26 10:01:05 2026 GMT
Not After : Mar 27 10:01:05 2026 GMT
Subject: CN=6a9be50240a24002f1f36047e32698c22d0e4e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:0c:e0:f4:cc:a7:4d:11:07:5a:25:53:78:
c1:c4:8c:50:6d:c9:5d:92:89:b6:3e:c6:e8:21:47:
a1:39:4f:41:0d:b1:e0:01:8e:9a:19:75:8f:85:28:
39:9d:ff:a8:c0:92:e5:dd:31:29:2c:2f:6d:ae:41:
f2:ba:d9:33:e0:8f:50:cc:dc:ee:a7:01:ce:30:c1:
f1:ab:18:53:7c:15:f1:7d:0b:77:69:c2:6f:86:fa:
fa:dc:0f:2a:49:6c:c9:35:93:f7:eb:58:6f:56:1e:
b9:75:fe:68:e3:88:f7:2d:ed:1a:b1:c3:c8:f4:1b:
8c:1b:7f:47:b5:d6:ee:61:0b:c8:52:95:6d:92:5d:
12:3f:9e:bd:71:d5:be:52:b5:7d:1d:3a:41:b3:f0:
14:82:a7:6c:19:6f:00:10:a1:c7:8b:14:1d:2f:77:
f6:49:bb:cc:2e:66:8c:69:4c:e7:7d:c0:ef:67:82:
44:08:cd:19:cc:b7:f0:18:c6:9d:f1:f7:e7:4d:b9:
02:e5:da:bf:7a:88:4a:0d:fe:93:ea:f0:1a:62:87:
2f:82:54:17:a8:c5:72:54:e6:06:7c:49:b7:86:a6:
34:69:ae:7b:a0:19:3f:31:9d:50:92:09:db:0e:ed:
3b:7e:80:e6:60:79:d2:7d:1d:de:7a:f8:9a:a1:20:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:E5:02:40:A2:40:02:F1:F3:60:47:E3:26:98:C2:2D:0E:4E:71
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:01:b1:53:ba:12:61:14:05:8f:29:74:b7:1e:fc:ac:85:85:
6e:0a:21:1c:5f:6e:ef:77:87:6d:24:76:38:b9:bd:0d:f0:45:
d8:cb:24:4b:db:2c:f2:2f:89:f7:c9:bb:d9:d0:dc:4a:5a:14:
2e:da:bc:4c:8b:e4:b5:65:8c:e3:a7:35:2b:90:2c:1b:a1:d8:
2a:b0:e6:69:fc:be:14:67:e1:e7:72:56:d5:47:16:bb:f7:c2:
52:2b:99:35:69:94:ad:cf:e5:8f:95:34:fc:97:82:b6:ee:7c:
28:16:a3:ed:e9:e3:05:8f:cf:b2:70:cc:7c:ec:46:7e:22:ed:
7b:e8:27:bd:fe:b1:54:78:fd:1a:d5:cd:d9:ce:79:df:fe:93:
52:cb:54:cf:13:77:aa:db:cd:cd:6f:4b:55:7e:c6:ab:1b:a2:
eb:e0:c6:ef:c3:f4:46:44:e3:9b:88:17:54:83:19:09:27:1b:
96:3e:61:8d:52:0e:22:c5:81:a8:c9:1a:dc:e2:31:8a:34:45:
8b:98:af:28:89:ba:10:21:8b:f2:87:be:eb:d2:ec:a4:81:ad:
5d:51:d4:88:de:ee:46:81:8b:84:df:d9:ef:09:46:87:75:a2:
6c:c9:4b:1e:00:e7:2b:c4:d6:b1:89:03:b1:4e:c1:ff:78:f8:
7e:d0:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:56 2026 by rpki-client