Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: I5C8QBDy5AgZnLWBQ6+d+KVWUhsGUY+LHSpc1UcpfYY=
Subject key identifier: A2:52:D0:FC:1B:44:4B:D7:FD:55:30:DA:1B:0E:D1:DD:4B:14:4F:0A
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019F9248CD6CD65DEB98B28CA8D1DD7C875F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 04:01:12 +0000
Manifest this update: Fri 24 Jul 2026 04:01:12 +0000
Manifest next update: Sat 25 Jul 2026 04:01:12 +0000
Files and hashes: 1: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (hash: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk=)
2: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: /4u7FSZFmHjRXXQj/x/NQTVXDT4eKmMdepHPh7WAfWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:cd:6c:d6:5d:eb:98:b2:8c:a8:d1:dd:7c:87:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Jul 24 04:01:12 2026 GMT
Not After : Jul 25 04:01:12 2026 GMT
Subject: CN=a252d0fc1b444bd7fd5530da1b0ed1dd4b144f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:b6:62:fa:2c:ab:c9:1f:79:9c:1f:b7:02:
ad:f1:6c:ff:07:d5:43:96:7f:79:42:42:19:b7:2c:
4a:f2:cd:b1:47:ef:0b:83:4e:88:55:81:8e:f6:d5:
a3:c0:71:85:44:7e:37:f8:83:45:a8:1e:43:3b:0f:
95:20:e5:86:53:1d:93:88:d5:e1:5c:fd:af:01:98:
a2:b5:e8:2a:42:ff:53:d6:cb:33:3c:b7:e0:47:53:
d2:37:e5:4e:e5:49:1a:78:67:cf:f2:42:7c:4c:66:
9d:a5:61:6b:2b:3e:08:db:f3:4c:02:9b:da:b8:35:
5c:0d:3d:1a:2f:9b:be:96:a9:9b:d0:76:74:e8:61:
2a:40:bb:09:95:da:12:fc:3d:f9:8d:77:f6:8b:6b:
a3:58:8b:fa:ba:93:71:85:ca:b3:43:47:e7:db:59:
86:19:1e:68:14:60:60:54:a5:e6:37:86:17:59:7e:
a7:32:7c:8c:a4:e5:66:21:e3:17:2c:ba:6e:eb:cb:
ed:d7:54:2c:2b:da:e8:a9:4c:09:35:c2:d6:79:5f:
e3:83:86:2a:a3:64:59:aa:1d:32:32:5a:7a:42:65:
17:fa:aa:cc:dc:d7:68:40:8f:7f:b8:9e:39:82:19:
aa:3f:b7:dc:ff:03:b4:e2:4a:cc:6f:16:ce:01:27:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:D0:FC:1B:44:4B:D7:FD:55:30:DA:1B:0E:D1:DD:4B:14:4F:0A
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f4:f7:bc:40:10:b2:6c:91:63:f1:a3:8e:f6:9b:38:e2:bf:
2d:70:be:fb:fb:d0:71:1d:a8:35:4d:b0:7d:55:15:e7:1c:75:
2f:80:1a:f4:1b:17:28:b8:4f:f6:73:ce:90:c2:42:5d:12:cc:
c6:7a:c6:65:de:34:27:ee:57:39:d6:9b:1a:5c:1e:6a:6c:49:
15:27:de:52:03:64:22:c3:6a:e7:dc:5f:8f:25:0f:80:a9:c5:
a8:0d:35:c3:5b:f3:5d:53:10:83:5e:61:3e:f4:8a:f4:b2:ce:
bd:a7:1e:92:96:88:a4:0f:7c:5c:4b:b0:60:26:3a:95:95:9a:
0b:78:5d:e1:0e:d4:25:c7:14:2c:c0:68:2f:6e:66:33:dd:50:
50:a1:b2:48:76:67:f2:4f:79:ea:9d:b8:a8:f6:95:0b:df:82:
13:cb:3a:73:fe:4d:31:7d:b5:41:96:ae:dc:4f:73:04:3a:75:
6b:e9:3f:c6:ec:d3:aa:6f:80:07:4d:9f:9d:82:ac:ce:68:f3:
ee:48:a7:9a:5c:25:da:96:b2:e4:6d:eb:c8:7e:e4:ab:de:ae:
39:69:20:5b:08:59:b4:dc:a1:24:d8:6b:5b:33:df:7f:3f:46:
0f:d7:86:5e:72:2a:11:74:1d:43:f2:75:b7:0b:dd:a2:6e:23:
a0:78:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:53 2026 by rpki-client