Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: u6vfOFchmv+Ghwdv+Abgl0+tlrg78tG5QWgAtHJvuRY=
Subject key identifier: 50:49:C6:62:CE:5D:41:E2:ED:D1:9F:05:99:AF:50:86:0A:5F:86:AD
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 019D9B87AE0E8A4FD957F71152E3068E45D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:00:53 +0000
Manifest this update: Fri 17 Apr 2026 13:00:53 +0000
Manifest next update: Sat 18 Apr 2026 13:00:53 +0000
Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=)
2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: iHFBWB7kE5QWG6tiVxomZ9vMqdIPNx3W7KTDQFdZWno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ae:0e:8a:4f:d9:57:f7:11:52:e3:06:8e:45:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Apr 17 13:00:53 2026 GMT
Not After : Apr 18 13:00:53 2026 GMT
Subject: CN=5049c662ce5d41e2edd19f0599af50860a5f86ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a9:57:94:43:a7:ad:5d:47:fe:c0:3c:d4:06:
55:4a:68:fe:c1:72:2e:ca:7f:f4:ae:6d:25:0f:69:
9c:97:45:5e:c0:87:3a:9b:7d:fb:21:d6:9d:4a:2e:
fc:f8:7c:3f:a5:a3:2c:66:91:e8:0a:e1:d0:67:7b:
ec:46:c9:c7:4d:e2:10:fa:e7:b0:b9:0c:71:22:c0:
6b:e3:0b:30:ef:92:f1:19:9d:0e:2a:b5:cb:30:7d:
aa:f4:5f:df:a7:ca:5d:d2:98:86:61:a8:6c:3b:87:
1c:d7:6f:ed:60:6f:9b:22:42:37:a3:a3:76:9c:bb:
38:6b:6d:8d:96:de:ea:b9:11:38:6a:4c:a2:eb:c0:
5f:83:85:77:9f:a5:2b:f2:ef:b6:bc:dc:2b:7d:62:
92:a5:d0:e6:c7:04:aa:da:f3:51:5d:87:0d:77:77:
7b:31:58:a5:10:55:87:22:05:23:0e:a5:e8:86:8a:
ce:c9:b6:c8:2d:26:0c:a3:06:78:f2:74:57:fa:40:
ba:79:77:c4:df:27:4f:0f:ab:55:fc:e2:f8:79:30:
69:7d:5c:b0:4c:5f:ef:5b:d8:dd:d3:7b:a2:3e:3d:
a2:a6:c8:9d:10:d1:c4:0f:d3:66:21:06:1c:61:b2:
80:c3:7b:59:64:e7:60:46:ab:18:58:4f:72:b2:84:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:49:C6:62:CE:5D:41:E2:ED:D1:9F:05:99:AF:50:86:0A:5F:86:AD
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4d:36:6e:50:04:24:75:5d:2a:23:3d:c7:2b:29:91:03:6c:
62:9f:42:17:60:10:18:7e:1d:dd:17:27:47:77:af:e3:27:dc:
70:42:f2:ab:a7:15:71:09:32:25:b8:24:d6:aa:ca:05:61:50:
5d:f8:c8:8c:ec:1e:71:9f:40:9a:d6:46:76:6e:24:4c:8d:26:
ce:a8:70:b3:d6:bd:ef:a6:23:f7:6c:5a:5c:0c:c8:88:83:ff:
fe:21:35:15:d7:b0:55:d7:97:ea:c1:a1:6c:5e:4b:70:d6:60:
b9:61:51:93:e7:a4:ff:f8:20:2d:6f:4e:15:83:85:63:4c:8b:
e9:8d:bf:16:19:04:63:1e:93:aa:09:2f:5b:6f:5a:b2:45:01:
d1:75:eb:ce:2b:c6:16:ce:47:74:91:c2:ee:2f:5f:3d:2e:61:
f4:7f:4d:34:91:80:ce:09:3b:2f:64:ec:2b:18:e5:d0:85:49:
be:24:28:90:0b:a8:4f:11:e8:ce:63:6e:19:3e:b0:ef:c8:5e:
ed:b7:66:2f:7d:54:19:69:5a:f7:48:21:b1:78:5d:1a:58:75:
14:28:fa:e3:31:d7:ac:9d:f1:1f:83:9c:34:7b:dd:ee:ba:f9:
bc:37:ae:78:a5:06:5e:94:86:0a:51:e1:c4:8b:a5:a6:e3:6d:
5f:7a:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:49 2026 by rpki-client