Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
File: ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft (raw, json)
Hash identifier: M3NN2YTzaDnRYGyQACb8sdrk2mqBr2PsQ99iUGxBzUk=
Subject key identifier: 58:0F:4C:90:12:8E:39:81:D9:04:96:62:1A:65:84:4D:F8:46:12:F0
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Certificate issuer: /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial: 01A0D200CB0C0C54A9FD9E12186164B335D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
Manifest number: 0E54
Signing time: Thu 24 Sep 2026 06:01:02 +0000
Manifest this update: Thu 24 Sep 2026 06:01:02 +0000
Manifest next update: Fri 25 Sep 2026 06:01:02 +0000
Files and hashes: 1: 1gk0sLtkOinOBhMkUiRN6708AVA.roa (hash: qx4BeBMu/olO2Xz1c+ij7UE+dLcw4YvlNY6rUOImv/o=)
2: ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl (hash: zyWoimKW/7VMUt+6WS76oS26Tqlkj40Yc4uj1tpNQFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:cb:0c:0c:54:a9:fd:9e:12:18:61:64:b3:35:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Validity
Not Before: Sep 24 06:01:02 2026 GMT
Not After : Sep 25 06:01:02 2026 GMT
Subject: CN=580f4c90128e3981d90496621a65844df84612f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:4e:d6:9c:40:33:e0:a6:e4:8e:a4:02:36:
05:92:c6:63:4c:99:14:50:28:23:68:7b:60:75:19:
b0:ce:cd:35:72:8b:f1:c6:a5:3c:25:e1:a4:e0:ed:
08:9b:a9:ef:0f:29:52:9a:77:70:29:70:74:28:09:
5f:5d:ad:0c:11:3d:07:2f:ad:41:f2:14:d3:95:0d:
22:b4:48:d4:82:e4:87:d2:e9:fd:b0:45:3e:28:94:
18:d6:bf:47:bb:20:37:1d:76:16:ed:ca:56:f1:b0:
05:ca:54:0b:b1:9c:f7:73:bc:b4:31:5a:9a:06:63:
a4:fe:9f:98:6a:b0:b8:55:63:90:33:dd:f2:50:32:
01:ab:3c:87:63:40:23:f1:36:99:48:c1:4b:54:19:
5b:f2:0f:e5:cd:3a:a2:6d:ac:ab:fa:70:87:bc:cc:
1b:cf:bc:09:e2:13:dd:b3:3c:91:ec:ac:69:d2:8b:
46:2c:4c:74:1e:d3:d5:65:86:ab:c1:d3:d1:12:bf:
c7:0c:69:9c:0f:32:68:8d:73:81:21:88:7b:8e:a1:
fc:43:33:69:2d:44:f2:9b:3f:03:14:d1:f9:e6:55:
62:a2:0c:78:80:cf:22:51:29:1d:3c:8c:d5:e8:bb:
7d:ce:9a:f4:65:cb:81:71:f7:9e:c7:70:31:6b:be:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:4C:90:12:8E:39:81:D9:04:96:62:1A:65:84:4D:F8:46:12:F0
X509v3 Authority Key Identifier:
keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:aa:be:9e:f1:57:48:9c:53:01:c3:99:63:9e:28:09:36:fa:
fd:58:a5:0a:fa:f5:b7:94:fa:64:ba:42:d8:f8:d9:e0:29:18:
6a:8c:de:68:7d:bf:10:2c:d0:e9:5d:10:e5:47:39:59:f0:8e:
4a:27:af:c4:69:10:d6:ae:08:ef:e4:c5:79:78:54:2d:b3:6d:
80:13:e5:d5:a0:a3:4c:a4:49:1c:8f:26:df:ec:d7:37:67:dd:
6c:03:2b:ae:42:de:e8:cb:08:28:12:af:5c:59:74:7f:0e:91:
8a:60:c7:3d:45:4c:32:27:5a:a0:d8:e1:cb:ba:47:86:f7:a6:
1b:aa:df:0d:7c:49:f9:a7:a9:fa:ec:82:96:02:01:82:7f:fb:
4d:b8:a6:b2:97:7f:77:71:eb:4a:d7:50:5f:31:bc:ba:84:8d:
d3:20:4b:81:a8:35:54:d1:15:be:11:a4:b3:ca:4b:5f:83:86:
63:c8:f9:75:b5:86:ea:e1:21:ce:69:d3:ba:31:44:5c:68:1a:
8f:bd:38:58:0e:8e:20:5d:51:ae:af:e3:a7:91:76:d6:98:f5:
ac:f0:c2:ed:a5:7e:0a:39:09:d3:b0:d9:3b:ed:ba:41:45:f4:
07:de:37:cd:c8:4a:5c:41:17:91:0b:95:5b:34:66:c7:b0:7e:
9b:8a:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:30:17 2026 by rpki-client