Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
File: ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft (raw, json)
Hash identifier: Tjbz5K0SGBB+pMRnzTCdj5YD0vJ9cIDgLavegjlpFKM=
Subject key identifier: D3:8C:FB:8A:6A:D8:CD:A2:71:FE:55:77:BD:11:7E:83:28:13:7D:45
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Certificate issuer: /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial: 019F954963E0A1ADBA2E5AC56DBBB8C27918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
Manifest number: 0DB0
Signing time: Fri 24 Jul 2026 18:00:42 +0000
Manifest this update: Fri 24 Jul 2026 18:00:42 +0000
Manifest next update: Sat 25 Jul 2026 18:00:42 +0000
Files and hashes: 1: 1gk0sLtkOinOBhMkUiRN6708AVA.roa (hash: qx4BeBMu/olO2Xz1c+ij7UE+dLcw4YvlNY6rUOImv/o=)
2: ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl (hash: /XV3oW4R1GohiTxeZMWuP3CBScEE2mZm8fv5UZjIrRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:63:e0:a1:ad:ba:2e:5a:c5:6d:bb:b8:c2:79:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Validity
Not Before: Jul 24 18:00:42 2026 GMT
Not After : Jul 25 18:00:42 2026 GMT
Subject: CN=d38cfb8a6ad8cda271fe5577bd117e8328137d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:93:91:06:2d:2a:8f:57:36:f5:bb:05:94:
58:2f:49:c5:8c:b7:eb:01:2c:ca:7a:1f:0b:31:93:
70:e0:f0:bd:43:38:bd:a3:63:46:b7:29:40:06:2b:
78:46:f4:bd:5b:71:6f:c8:6f:25:d9:07:9f:cd:a2:
25:f3:db:8f:db:ee:92:22:dd:44:c3:15:ae:76:d8:
8d:31:e6:c9:65:4b:a3:98:75:65:78:db:92:21:dd:
01:38:53:0e:8d:98:84:79:6b:28:91:7e:21:4d:6f:
38:02:57:ae:33:0b:5c:de:09:55:a7:e3:77:de:8a:
57:8c:cf:81:30:1e:75:8d:9f:12:97:f4:00:ef:36:
a8:09:b3:9a:2f:15:5e:78:1e:6d:a1:56:6a:d5:d8:
e4:fd:1d:6a:84:f6:3e:18:b5:96:b6:b4:7c:e8:37:
f3:c6:84:d7:af:2f:36:43:8c:8e:92:9d:27:ec:a0:
fe:64:3e:2d:45:eb:91:a6:b5:9b:17:67:d2:ff:3e:
40:3c:aa:5b:d8:75:72:ca:ab:d4:0c:4b:01:4a:e1:
f2:3a:31:99:42:4b:34:2e:ce:b4:d8:55:31:c8:1a:
f8:f4:18:07:98:72:1d:a7:95:bf:8e:16:0c:8e:4a:
68:6f:24:74:1c:8f:ed:73:c0:98:df:7d:6c:4e:5a:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8C:FB:8A:6A:D8:CD:A2:71:FE:55:77:BD:11:7E:83:28:13:7D:45
X509v3 Authority Key Identifier:
keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4d:0a:48:03:e9:e5:18:55:94:73:bb:9c:22:7e:37:c3:5e:
33:38:eb:28:62:12:35:3a:dd:1d:86:04:58:57:31:94:ff:63:
82:0c:f4:7a:28:e7:20:d1:2a:d5:c7:c1:c0:06:8b:37:59:e5:
5b:aa:69:d0:82:62:fe:2a:7c:a8:f8:a3:dd:0f:9e:09:12:bf:
0b:7c:91:29:8f:ab:7f:68:0b:fa:1b:3e:95:33:9b:9e:f6:77:
1a:5b:42:32:d2:12:2d:99:20:25:88:3a:ca:63:96:a7:9a:fb:
8b:3d:f6:8d:a5:b2:54:59:03:3a:6d:7f:2c:3e:ad:75:b7:fc:
9f:58:cb:a6:c6:a0:d7:37:c1:bb:20:ab:13:79:ec:1d:e7:f4:
2d:99:67:66:7e:4b:f3:09:7a:01:8d:b1:16:49:a9:b3:d2:56:
4b:df:83:89:26:b4:94:60:12:1c:4a:fc:70:8b:ac:59:65:ad:
bf:5f:60:59:a8:59:82:89:04:67:9f:55:de:ee:b6:53:f5:ad:
06:ee:6a:df:73:f4:f8:f8:9a:bc:1f:35:e5:ff:2d:c2:76:e8:
cb:40:cd:30:64:f2:30:01:d4:b9:6f:6a:1a:80:b0:33:dc:7d:
a0:a6:20:7e:40:1a:2b:97:8f:4d:e0:9a:7b:4f:48:c1:2a:7b:
bb:61:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:08 2026 by rpki-client