Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: lQUOqSPuAKqM7xbC4cbSq/hfqun4pces3xnZ48anFL4=
Subject key identifier: 13:04:F1:35:C8:30:3A:36:4A:40:42:05:E4:6C:67:F3:F4:4E:E7:54
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 019D27728251A17F364DCF8CAD50D22EC2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 1595
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: 1-oqQDuXU3K5CZv2Qy4Ieua3t1Jo.roa (hash: R7GPYpVp1dyvlb0NN1rHpBA6geWOtPajE+4IU6AxFW8=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: U7IDCrpS+mOI+TqkCnG5+GKu/jB1YieYzCJhmVXOjyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:82:51:a1:7f:36:4d:cf:8c:ad:50:d2:2e:c2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=1304f135c8303a364a404205e46c67f3f44ee754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:e8:28:81:20:14:e4:d5:1a:ff:df:d5:f7:
ad:33:50:04:2c:2a:de:15:2b:f7:9b:20:55:a6:eb:
ce:50:81:b6:30:98:e1:37:22:99:47:7b:23:04:af:
a7:13:07:24:95:4b:f9:5e:b7:59:33:bd:03:ea:90:
47:b9:76:9a:31:b5:03:83:eb:26:dd:db:9b:18:a3:
02:ae:53:d4:d0:5d:4e:d4:42:4c:e2:67:37:14:4a:
e9:7d:4a:b9:b7:30:8a:0d:03:42:3d:8c:5e:7e:a0:
58:e8:29:ea:02:82:3d:e0:db:46:be:2c:82:1a:b8:
7b:f6:9b:ec:0f:2d:eb:8f:df:95:44:52:80:73:b7:
2a:85:fd:15:1d:f5:6a:7d:e7:aa:b8:fa:89:67:31:
0b:aa:2f:ff:dc:84:3d:b0:cf:8c:5c:89:32:df:55:
69:de:89:33:96:69:80:e9:41:0e:64:10:3b:93:2a:
67:07:35:cf:04:09:7f:a4:bd:89:94:ee:98:02:81:
ef:6a:63:93:b4:f6:b8:b9:87:a7:8d:5c:1a:95:94:
6f:a7:b9:34:f5:21:ff:b0:76:14:56:43:d6:dc:6b:
c9:e3:fa:fc:6c:15:41:39:2c:a5:29:f4:05:a3:a8:
e5:d6:f9:21:ea:6f:2a:0a:21:6c:27:66:57:92:92:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:F1:35:C8:30:3A:36:4A:40:42:05:E4:6C:67:F3:F4:4E:E7:54
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9e:29:e5:30:59:a2:c7:5f:fa:c3:89:03:c1:4e:05:1b:60:
6f:fe:77:36:17:af:f8:a6:7a:8e:57:27:0a:fb:13:f6:0d:32:
b9:11:fa:72:1e:6a:61:f0:2f:da:76:61:80:78:63:aa:13:bd:
78:a9:b8:8b:ea:71:5c:26:26:87:7d:c0:b7:7c:f6:ea:a7:79:
b3:57:ed:a1:30:2f:79:8f:2b:15:72:dd:b3:84:07:1c:75:13:
cb:72:00:33:33:bf:17:34:03:13:ee:94:b0:5c:68:4f:77:50:
0c:a5:a9:9e:48:4a:af:2d:46:dc:f9:dd:e0:e2:35:04:9e:47:
e4:e2:87:f2:f8:72:79:27:e0:b0:a5:a4:21:8b:5d:e2:2e:8f:
a4:db:bf:23:a7:47:d3:3a:6d:7a:1d:61:5a:34:46:76:2c:58:
70:c6:15:78:1c:b6:1b:6b:df:af:aa:94:68:40:83:f4:3a:23:
2c:f9:15:5d:86:91:05:0e:6b:8c:8b:61:6f:88:07:37:92:f4:
23:9e:69:19:4f:ab:16:46:66:e3:f7:07:f4:c9:e6:ec:ac:64:
ae:3a:9a:d6:d3:aa:93:a1:dc:27:ac:c9:39:42:41:3a:d4:7c:
02:02:73:ac:e0:55:b0:0e:36:3f:bf:84:80:ca:04:05:7e:79:
13:b2:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:51 2026 by rpki-client