Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: HJ2QOEXZvL7We1SKtfGbItrTulnkrDuPYe3na7FiGlc=
Subject key identifier: 83:DA:E4:7B:57:6B:73:A0:72:1E:E4:8F:A4:34:70:BE:F7:93:6B:62
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 019CAC1013EC403E05EF8B767FFC60CE001C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 1308
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: A0vguZeSZvjbO1iAp7ep30taXaU.roa (hash: OFdk7Efqg14eKcFzGkyEl7CmU/rQu1LKkHn7D4lTfd0=)
2: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: 74khCI+kSNhkJEGvOxdrmwWLvqcAvjdT9ixA86gix9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:13:ec:40:3e:05:ef:8b:76:7f:fc:60:ce:00:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=83dae47b576b73a0721ee48fa43470bef7936b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:7c:9f:c8:d9:e2:47:09:c5:64:ab:09:95:
ce:ef:c1:07:08:c1:9e:01:40:8e:71:ce:16:a0:23:
63:98:57:01:6d:31:6a:ac:2b:3a:4c:5e:98:0b:d9:
d6:fa:c2:09:56:03:70:e6:9b:de:52:23:f4:c6:d4:
8d:45:7b:0d:1d:47:bb:44:14:58:41:89:4a:20:27:
31:89:ec:3f:1b:ec:86:7b:be:81:d1:ab:8d:01:62:
f3:cb:46:9e:cc:3c:db:2c:e6:f6:6e:3e:ac:43:9f:
e5:bb:d9:62:97:d9:9d:ee:8d:71:33:d9:09:34:fc:
f0:2c:cd:89:c7:01:df:72:e5:6c:6d:38:8f:33:e6:
51:cb:c2:56:91:84:2f:20:7e:85:c7:e1:5c:d1:d3:
07:83:42:e4:f3:70:9b:4c:97:73:69:b4:85:da:de:
3c:48:15:d5:da:79:6d:a6:3d:3e:2d:0a:9b:41:34:
ce:92:7d:d6:ae:b8:86:07:1c:0b:c0:be:1d:97:f2:
8a:32:d2:1e:33:e4:d3:b5:53:9e:45:0c:8e:7b:3a:
ff:4a:10:91:ff:29:72:42:35:47:d4:55:11:de:a4:
87:48:6f:6e:b1:f0:be:d4:a5:d2:03:1c:24:7c:fa:
1a:a8:ec:86:68:41:82:32:b2:39:48:61:5c:67:18:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DA:E4:7B:57:6B:73:A0:72:1E:E4:8F:A4:34:70:BE:F7:93:6B:62
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:de:29:94:79:aa:f8:ef:d5:2c:48:1a:0a:3b:61:e9:b6:19:
09:e5:3d:4b:94:92:b9:69:92:28:07:4a:f5:1c:b3:a6:6a:ef:
46:15:cf:07:f7:c0:26:7b:9e:32:c3:bc:bf:6a:6a:65:35:77:
ab:e7:67:49:f1:8f:4a:40:69:f0:ac:ff:36:a1:25:f2:b3:c8:
fc:81:18:bd:25:6d:93:8f:bc:6f:18:6d:86:a9:c7:43:e4:61:
9a:f3:5b:0e:c6:bb:81:80:e7:aa:fd:b7:0c:43:3c:8b:59:a6:
0c:66:77:f1:b4:21:fd:ae:91:b8:b6:d5:96:ab:ae:a8:a2:4c:
8b:1f:11:11:9d:74:3a:2b:8d:5d:2a:a7:ec:82:28:45:c1:87:
0e:e8:cc:0d:31:93:b9:01:fe:1a:8e:4a:bf:aa:83:63:27:58:
78:5a:c0:48:81:a8:8c:59:4b:e9:93:17:d6:cb:34:24:ca:f5:
de:94:90:b0:09:f5:50:f3:8b:dd:34:73:a9:38:21:07:06:f6:
b8:5c:42:f7:70:fc:9b:6a:d9:67:a8:eb:17:d3:80:b4:c8:9b:
9d:b8:36:13:ac:dd:19:e2:fe:3d:59:e0:54:0a:bb:7b:45:17:
97:07:1d:4e:4b:da:70:20:4e:90:40:e6:2a:82:05:cb:98:25:
4d:d7:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:43 2026 by rpki-client