Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: RCA7OviWWOFpf1klBvYtaurcwy/AwwoDq61ZlNitikc=
Subject key identifier: C5:62:DD:05:F4:B6:87:C0:8D:05:DD:61:2A:2F:E5:F9:6D:26:D3:FF
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019CADFEC205092DE4E73900FDD80612614F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:01:19 +0000
Manifest this update: Mon 02 Mar 2026 10:01:19 +0000
Manifest next update: Tue 03 Mar 2026 10:01:19 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: tM6mNtAVvywMuzmAStldIwoe7XhHxaoQ958SRDPOAps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:c2:05:09:2d:e4:e7:39:00:fd:d8:06:12:61:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Mar 2 10:01:19 2026 GMT
Not After : Mar 3 10:01:19 2026 GMT
Subject: CN=c562dd05f4b687c08d05dd612a2fe5f96d26d3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:af:e5:25:19:93:6d:c6:3a:da:e0:25:c8:
24:69:86:26:7e:fc:7f:da:82:46:a9:88:fa:60:71:
af:0f:ec:1c:56:07:ad:e7:03:d2:9f:4d:af:4b:8f:
d1:dc:55:8e:47:8c:49:80:1e:fa:48:6e:ee:f9:6f:
5c:3d:a1:1f:56:df:d0:48:3b:17:3d:ed:1e:29:02:
54:d5:6f:1f:2c:63:71:8c:3a:47:80:d0:6e:ba:1f:
fd:99:7c:37:d8:e5:f5:b1:86:77:03:14:66:4f:5c:
d6:84:e2:f8:5c:da:69:0a:52:d8:fb:3d:0a:d1:8c:
32:61:66:63:a8:6b:82:9d:ff:2b:cf:47:3b:c3:84:
ab:22:c2:81:d0:8c:66:58:34:23:f5:25:e9:06:05:
3d:e3:e7:74:b1:c9:49:a5:1e:d5:77:8d:97:ea:95:
db:f5:1d:7d:0b:da:f5:af:82:3f:7f:6f:89:d5:24:
9c:61:12:fb:49:d5:b9:0a:c5:61:d3:4c:0e:28:3a:
d0:f9:60:0e:31:22:7a:20:07:fc:df:10:55:c2:b5:
c5:18:e0:97:b3:a3:4b:cf:fc:64:8a:8c:57:e8:74:
5b:26:70:b7:4e:be:53:fc:b5:ea:07:f6:90:6e:f5:
bf:cc:03:eb:d3:34:79:ab:c9:b0:88:13:e9:74:91:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:DD:05:F4:B6:87:C0:8D:05:DD:61:2A:2F:E5:F9:6D:26:D3:FF
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6b:5d:90:d4:e4:d1:ed:cf:07:b0:2c:dd:ed:5d:58:ed:ca:
27:7f:96:e3:8d:7c:02:7e:d5:3b:b2:d9:28:e2:49:5f:6c:bb:
6d:71:c8:7e:4c:24:9a:5a:fa:35:d9:b5:5a:5e:a6:4d:54:6d:
67:7d:eb:ed:3e:02:ac:1a:39:34:e6:2d:42:56:4b:47:73:fc:
02:37:19:03:4e:b2:3b:1a:56:e2:c3:82:89:0d:c6:8d:92:6e:
ad:b3:d3:82:ef:5a:27:dc:aa:9e:dc:22:92:85:25:b6:1b:d8:
05:6f:cc:e7:3b:35:ba:7d:1f:69:f2:a4:5d:ac:31:dc:f9:56:
aa:a7:47:2d:ea:28:02:f1:64:a7:81:1e:34:55:17:95:34:16:
eb:4d:79:31:aa:a8:ec:6b:a5:f4:c9:a6:b4:7f:21:96:de:23:
24:a9:60:b9:4c:c2:b2:fb:f5:51:62:9d:35:90:89:03:da:2a:
05:7a:1b:b4:f9:80:2a:42:54:31:0c:b5:9a:ba:02:f3:03:c5:
dc:fb:a8:9d:77:03:b1:60:de:cc:ef:48:a7:c6:e7:7d:d2:dc:
71:6a:9e:60:9d:59:da:76:3b:c3:36:7e:3c:2d:af:45:66:60:
6f:1c:fd:ca:0f:02:d0:3b:7a:9d:f9:ff:67:1e:33:55:95:06:
8e:1f:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:42 2026 by rpki-client