Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: ntXWhJZH614drpgb3e9ngvlAWdKh+DKPK/Lt0QXey2I=
Subject key identifier: E1:2D:7F:B5:4B:85:F5:EA:D7:1C:09:FC:36:8E:9E:C9:4C:10:B8:A7
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 01A130D843623AFE1F2F4705CA410A578048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 16:00:41 +0000
Manifest this update: Mon 12 Oct 2026 16:00:41 +0000
Manifest next update: Tue 13 Oct 2026 16:00:41 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: 3NHbD0w3iOf8JYr1umkZCNGySi9z4AwJw9DQGM/MH/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d8:43:62:3a:fe:1f:2f:47:05:ca:41:0a:57:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Oct 12 16:00:41 2026 GMT
Not After : Oct 13 16:00:41 2026 GMT
Subject: CN=e12d7fb54b85f5ead71c09fc368e9ec94c10b8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:ca:c2:50:33:9e:1e:fa:a9:42:46:7c:41:
db:77:de:7b:cf:48:95:62:59:6a:64:48:af:9a:98:
c9:c7:19:4c:30:fd:96:b7:73:4c:68:a2:fa:6d:2a:
55:fc:83:0c:8c:c8:eb:0c:12:9b:d6:93:a7:17:49:
7f:00:84:79:a8:0c:8b:6e:e1:23:d0:58:84:37:77:
2e:9d:bc:2d:42:eb:c0:8c:ab:9b:e6:f0:d5:58:e3:
76:a2:62:f6:a8:31:61:76:a6:8a:10:86:e8:0e:19:
f8:36:d9:52:61:38:02:2f:ca:1b:af:b4:be:ce:68:
5b:8a:d4:9d:1b:82:ad:44:25:65:ce:7a:71:86:96:
fd:ea:4f:70:ea:72:55:b7:5d:ae:e1:86:3a:b9:ea:
60:60:c9:cc:0c:95:80:0b:2d:0e:25:22:8a:0b:7e:
44:91:23:1f:da:73:60:ef:30:89:6c:91:61:d9:49:
8d:e6:c4:aa:66:87:94:a3:49:3a:5e:8e:e7:65:da:
b9:dd:de:38:dd:80:b1:5e:44:b4:e4:a3:e2:3c:8d:
43:39:03:5b:83:b5:1c:9e:36:af:19:5e:94:3c:b6:
33:b9:20:1b:ee:7e:28:86:56:be:ac:ba:8c:14:40:
14:3d:d2:6d:75:b2:1e:f4:1f:78:99:18:34:cb:60:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:7F:B5:4B:85:F5:EA:D7:1C:09:FC:36:8E:9E:C9:4C:10:B8:A7
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:58:ae:20:70:51:f1:3a:9e:df:fe:44:cd:32:6b:5b:f7:b3:
cd:4a:47:d3:fb:24:29:f4:e3:d6:c0:6a:fb:48:47:97:f6:2a:
ea:75:64:b1:3e:63:3a:89:fc:78:31:f4:f3:34:5f:9c:77:ce:
90:64:88:0e:c9:bc:89:e7:60:75:f5:ce:eb:41:67:0f:e6:3f:
cc:d2:ca:46:06:0b:fc:22:87:6f:db:09:2b:02:32:f4:9d:0e:
30:68:e5:b0:ca:b3:fa:52:3f:d0:3b:9c:b2:d7:6a:14:4b:fe:
94:49:da:24:08:39:d2:31:9a:16:cf:59:dc:80:e0:cd:63:d0:
0f:92:4b:59:47:fb:0f:10:70:ad:25:b0:5d:39:c1:e5:af:40:
d8:56:fc:4e:0a:9c:93:7d:6e:b0:86:d5:6d:49:41:83:c9:07:
ca:51:83:a9:53:ed:7e:dc:8b:19:3f:de:bd:c8:4d:c0:78:54:
c3:92:5f:02:61:4a:c1:c3:55:2d:12:65:a1:d2:32:6a:dd:5b:
cc:ca:91:6b:de:d5:e5:0e:f3:50:66:03:e7:9d:b4:a0:ee:cc:
64:c3:d2:70:9f:00:60:d2:bf:09:00:ce:57:4e:83:dc:65:42:
b5:84:be:0e:85:2b:40:f6:b2:91:af:93:82:96:b0:1e:47:55:
b9:00:ed:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 21:53:10 2026 by rpki-client