Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: qS7Dy+IthbA2DgWavIknWBBii05utH/HRfPXFYbTLbk=
Subject key identifier: D2:EA:82:13:4C:45:B6:93:F7:86:8C:6D:67:2F:D1:29:48:1A:99:DC
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 019D284D5778EA0D6182CADB47BB82CFDA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:00:50 +0000
Manifest this update: Thu 26 Mar 2026 04:00:50 +0000
Manifest next update: Fri 27 Mar 2026 04:00:50 +0000
Files and hashes: 1: 0fY2-frVSg1jq699GFwRUoCBlNc.roa (hash: eUT643x5xx8hSJT1XefBsreuEw6p88bqGvTup19SiEs=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: SQSYETHh+m9MzdVc2ubetef6wdHQiNT2oZkGMkqVVkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:57:78:ea:0d:61:82:ca:db:47:bb:82:cf:da:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Mar 26 04:00:50 2026 GMT
Not After : Mar 27 04:00:50 2026 GMT
Subject: CN=d2ea82134c45b693f7868c6d672fd129481a99dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:40:58:71:4b:10:eb:5d:69:b3:e6:45:0e:
fd:fe:96:af:0e:19:25:f1:22:71:ea:a3:9c:e0:30:
8e:9b:f1:03:2f:48:db:1e:56:78:08:66:70:4f:d5:
df:3d:41:28:e9:70:89:6b:58:0a:ce:9d:a1:af:f5:
38:f2:fb:cc:6c:65:e7:28:b9:bc:3d:2d:95:e3:ee:
be:4e:f2:5e:21:0a:c5:7e:f5:01:a4:b8:38:3e:31:
e5:80:f7:e6:16:02:b5:36:bf:51:93:2b:af:6b:10:
f1:fb:24:4a:0d:a7:b6:68:97:39:64:06:5a:11:f2:
bc:57:c9:cd:19:1f:62:0e:5f:08:ae:f0:5d:7e:d8:
25:03:95:1b:ce:3d:58:a7:9a:a4:6f:8b:65:a7:bc:
10:1c:03:8e:a8:78:52:bb:7e:00:c8:d3:f6:42:fb:
56:0c:1f:7f:77:30:54:27:95:15:52:12:39:a7:a8:
a2:e6:7f:84:07:31:67:11:60:e8:e0:7e:ba:e8:b0:
e3:c9:09:8b:09:f8:31:4c:4f:ec:0f:2a:9e:f0:f2:
d9:62:06:e2:f5:40:c4:6e:10:9b:e3:e9:54:ea:a3:
f4:4f:09:a6:64:9a:26:9e:43:59:50:a5:ba:0b:8c:
6b:98:8c:34:f4:cb:07:8c:d1:c0:90:85:e5:f2:f2:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EA:82:13:4C:45:B6:93:F7:86:8C:6D:67:2F:D1:29:48:1A:99:DC
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:40:38:87:6a:34:32:6c:ad:dc:fc:60:86:91:67:39:17:4e:
37:2d:18:0f:9c:cd:9f:02:79:44:a5:de:3e:32:a7:9d:4c:76:
37:ab:05:ae:2a:4a:4b:dc:ff:61:f5:07:ba:b0:3a:22:ed:78:
c0:b0:b6:f6:3d:d6:d5:e1:03:05:53:63:f2:07:49:df:cc:c8:
53:ab:a6:cc:1e:1e:c7:00:16:0a:18:3f:d9:39:ac:35:9d:34:
92:a1:dc:e3:82:9a:a9:97:9c:d6:00:95:fc:3f:93:1f:56:fe:
9f:90:fb:65:6a:eb:ff:92:91:c6:86:66:c7:ff:b5:1f:5f:64:
ee:14:ea:63:62:bd:e4:df:ca:55:df:d0:ba:42:92:64:e5:7b:
0b:0c:68:ba:42:07:1b:ef:a4:9f:b1:37:d9:31:df:b4:ee:24:
2b:da:49:5e:3c:d3:89:10:42:b6:01:fa:5c:d8:3d:0f:6b:e5:
f7:b3:f2:46:95:39:ef:b0:73:08:f7:60:8e:81:59:78:b7:7b:
18:4a:0e:59:dc:3e:00:2d:a8:3a:52:16:cf:2a:e0:65:88:c9:
64:32:6b:ec:bc:a8:94:e5:aa:5f:cf:f3:f5:75:c9:91:bd:e0:
f2:35:32:47:42:48:a0:7b:d4:8b:56:3e:56:3c:cf:f4:3f:df:
2d:f5:e5:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTVd46g1hgsrbR7uCz9pFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTIyZjhiZGVkY2JlMTliYjMzZmNlMTRmYzFkYjZhZTNh
NDBlOTAwHhcNMjYwMzI2MDQwMDUwWhcNMjYwMzI3MDQwMDUwWjAzMTEwLwYDVQQD
EyhkMmVhODIxMzRjNDViNjkzZjc4NjhjNmQ2NzJmZDEyOTQ4MWE5OWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j5AWHFLEOtdabPmRQ79/pavDhkl
8SJx6qOc4DCOm/EDL0jbHlZ4CGZwT9XfPUEo6XCJa1gKzp2hr/U48vvMbGXnKLm8
PS2V4+6+TvJeIQrFfvUBpLg4PjHlgPfmFgK1Nr9RkyuvaxDx+yRKDae2aJc5ZAZa
EfK8V8nNGR9iDl8IrvBdftglA5Ubzj1Yp5qkb4tlp7wQHAOOqHhSu34AyNP2QvtW
DB9/dzBUJ5UVUhI5p6ii5n+EBzFnEWDo4H666LDjyQmLCfgxTE/sDyqe8PLZYgbi
9UDEbhCb4+lU6qP0TwmmZJomnkNZUKW6C4xrmIw09MsHjNHAkIXl8vIFRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLqghNMRbaT94aMbWcv0SlIGpncMB8GA1UdIwQY
MBaAFCPiL4ve3L4ZuzP84U/B22rjpA6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMt
NzRiZDA0NWIyYWY3LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMtNzRiZDA0NWIyYWY3
LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0A4h2o0
Mmyt3PxghpFnORdONy0YD5zNnwJ5RKXePjKnnUx2N6sFripKS9z/YfUHurA6Iu14
wLC29j3W1eEDBVNj8gdJ38zIU6umzB4exwAWChg/2TmsNZ00kqHc44KaqZec1gCV
/D+TH1b+n5D7ZWrr/5KRxoZmx/+1H19k7hTqY2K95N/KVd/QukKSZOV7CwxoukIH
G++kn7E32THftO4kK9pJXjzTiRBCtgH6XNg9D2vl97PyRpU577BzCPdgjoFZeLd7
GEoOWdw+AC2oOlIWzyrgZYjJZDJr7LyolOWqX8/z9XXJkb3g8jUyR0JIoHvUi1Y+
VjzP9D/fLfXlUg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:26 2026 by rpki-client