
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json)
Hash identifier: Z9vTMbNbYkprbLOIkK2ApEqQwLUvu/f5dRMeu9OT8ww=
Subject key identifier: F5:4C:59:62:9F:DC:CB:27:04:AD:AA:0D:C8:E2:9B:6A:76:73:7A:77
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01A0E36332E6D17D5EB14DEFAF38A2DC4C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
Manifest number: 15E7
Signing time: Sun 27 Sep 2026 15:02:04 +0000
Manifest this update: Sun 27 Sep 2026 15:02:04 +0000
Manifest next update: Mon 28 Sep 2026 15:02:04 +0000
Files and hashes: 1: 5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa (hash: E+HPw/BSZoy+FRt+tdA/pl0xYJ8cBINy/SV66sa2K/Q=)
2: 5VJALfhFe7o_AUDjHLN1heHmdsg.roa (hash: 1gHtL7JZ6Kw9aV9pDDeqj4dLmT+0UP21NwOVssRKidM=)
3: 6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa (hash: IggBLq2a8EpveAoDyReWvG833q0pjf83jxc+h1sihOI=)
4: DKzQQ-3c9fOllLADXKp3F81W6-A.roa (hash: jw/mwS4Ak7mqrGqRDzGrcRqXeDj4kvRniZLDaz5MSF8=)
5: Hs7JKhJtwC6A36Kjs-_4TZrgnpk.roa (hash: 099VsdRInIr4UycUi5XaCXZzdZOiho1gkx4lV1EIJOk=)
6: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: k6OPRboDd+GMsTJhIgHxRaRAXEznl6tvCIoyKzwlTFE=)
7: M8WsoMnGPVNmkP0_GRgTxjZRJnE.roa (hash: +25YQ0hNnRgpLZqiohuE6AMcgCqjkbxQlkrhVlizZHg=)
8: PXFNsoTvcWLxutWM2U5o07bf39c.roa (hash: cG54vwBTWhTGlpn6HVoksrAbeIW3ITTreN2nYOiUpbE=)
9: PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa (hash: FIh/JLPct1tPMk6cZXHr49IFJ+6jWnbcJViSmXmQnYI=)
10: V7PWzU2t3vkVAV89dEpwUD3smfA.roa (hash: NqsbYJcQ3xvsOoac8r1+2QIWje6UGU60aNdH7WHDSQo=)
11: VJ5x4bTZ9uK9NTcParFas1iO94c.roa (hash: YUotaVqMnXNqH2dTVeK+ioLm7GFUTiyLmJLQkyPf5rU=)
12: XetavruOlmwPuDQkb37aWeTU5Gs.roa (hash: OVMRMjZpXUWp7zeiQKGZgTeIS0wuW8Tr2m6fFrqkMg0=)
13: r3n82DH_kgDzSCiIox4JVvtuuKs.roa (hash: GscB1Y7vMXzC56pZeD7dY6Lb7cyydY/SgoKF16qKY1A=)
14: tgbG7zzhd0TpX7VXUJAj4569L48.roa (hash: XrlNtaTTKiEVZlZoi4ceAdhJeiK4Z6r68mciWuydsEY=)
15: uo5w_hamUoonPJRV5DL4G24KROY.roa (hash: aLK0bMT0B6Nh4M0ukHsojn4vtUCdZ1/I4BO6p+c6iOw=)
16: w2zfAC9OFoRmjotH_tHfZysWNMM.roa (hash: a05kJJ6+2j1m7iM1OBjj6aSX+sB+ZxnLme7+mqcwB44=)
17: xO4PnwUl40-LplCi16rGoCZS9YU.roa (hash: /JSxXf/o8DRoe32IgSj2KVEoIDnrUXVHn3+S3v/zp1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:32:e6:d1:7d:5e:b1:4d:ef:af:38:a2:dc:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Sep 27 15:02:04 2026 GMT
Not After : Sep 28 15:02:04 2026 GMT
Subject: CN=f54c59629fdccb2704adaa0dc8e29b6a76737a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:41:3b:af:fb:7f:f6:91:1e:40:55:7b:33:
0e:71:d2:f2:b5:5d:11:81:65:4d:cd:36:8a:80:f2:
1b:60:3e:97:d0:f0:8c:d7:ef:17:e6:29:c7:85:7a:
13:da:f8:26:fb:6f:8d:42:df:a8:be:73:99:7c:15:
5f:b4:11:4b:ea:6b:66:d3:6c:99:23:16:8b:0c:9c:
87:12:c0:ad:e8:11:f7:57:37:a4:72:a9:62:5c:69:
9a:ff:56:a4:ef:04:52:ed:73:be:10:7a:c5:85:a1:
f2:4b:41:ab:98:e4:6f:e9:98:9f:7c:5b:80:7f:89:
52:89:0a:db:ba:54:be:60:f3:0c:07:11:99:4b:fb:
9e:e6:b5:87:10:c7:dc:f0:1d:9a:ee:45:f2:e1:bf:
aa:87:34:bc:f9:35:25:a7:95:70:ca:49:0c:1a:0d:
c0:c8:47:a8:8c:48:a8:07:41:fe:cb:7d:77:ba:05:
11:d2:28:f6:84:e6:d0:de:b9:2f:95:7f:b5:18:09:
95:e0:80:28:e3:4e:e5:72:d9:03:02:b6:02:02:c0:
f0:65:d9:11:91:69:22:1c:2b:0b:ee:31:19:63:34:
85:e4:e5:1e:d1:6d:8a:76:1e:2e:46:cc:99:1b:18:
ef:9a:c8:9d:98:86:25:b4:1e:ab:04:2b:aa:55:28:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4C:59:62:9F:DC:CB:27:04:AD:AA:0D:C8:E2:9B:6A:76:73:7A:77
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:81:02:1d:f9:eb:8e:86:24:0d:f4:8f:8a:c5:54:50:c0:a6:
8e:5f:f8:c4:3b:51:5e:6b:0e:da:0e:70:c1:89:ca:e1:b5:87:
a9:a6:1e:33:ed:1b:d5:1c:ce:34:c1:94:b7:59:0a:01:67:cd:
a3:29:69:d8:2b:97:35:61:8d:63:21:9d:c9:25:f4:cf:d2:2f:
c0:89:0c:96:b6:49:a1:a7:87:a5:c3:35:cb:6e:68:df:86:6d:
5f:86:28:1b:d2:62:bf:42:43:6e:97:29:51:87:c5:ab:16:9f:
c3:26:e1:00:1d:0d:ab:0e:bc:79:00:e5:da:0a:4f:73:a5:38:
79:3b:6e:31:1a:77:e4:9e:0a:92:0f:1d:e9:3a:e9:22:d6:39:
48:ae:22:1d:46:25:47:fb:80:6a:90:3d:72:09:29:bd:f4:8d:
5f:93:bc:a1:a0:c1:67:2f:a5:90:3f:bd:c0:f1:71:50:7a:2b:
43:e8:27:ee:20:79:9d:fe:cd:98:b2:9a:5e:6f:1e:bc:ee:0a:
fb:ed:ce:27:05:17:24:0a:c8:dc:3a:9a:1f:cb:2a:2a:61:5c:
57:bf:ee:50:58:f0:8e:fc:40:ab:a1:4b:00:4d:aa:4e:c6:a3:
82:14:06:85:2b:34:01:71:24:e7:aa:5d:a6:37:07:35:8a:de:
55:34:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:30:42 2026 by rpki-client