Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: 7DR6q0dOWrEvU4olqEPpuRYnPa/0sW/6ei/TD5y0a/A=
Subject key identifier: 9A:25:5C:5B:C3:DC:DB:10:41:74:09:45:E0:C2:21:A5:80:32:94:A7
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 019D9B19CFDE5BEDE77BBA69F8FA6CC4D0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 1681
Signing time: Fri 17 Apr 2026 11:00:53 +0000
Manifest this update: Fri 17 Apr 2026 11:00:53 +0000
Manifest next update: Sat 18 Apr 2026 11:00:53 +0000
Files and hashes: 1: 3oGVu0O8WvuLGv8f2Jt9dxPSv2A.roa (hash: 4mJ9zwVzZQxqJbzR75wLCS8IQ+/ppt2TeN93BoHL9DY=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: BYTFL/XXnFynkgGD4Tuhjdmc2bdcOgoWUfYr23HQQp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:cf:de:5b:ed:e7:7b:ba:69:f8:fa:6c:c4:d0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Apr 17 11:00:53 2026 GMT
Not After : Apr 18 11:00:53 2026 GMT
Subject: CN=9a255c5bc3dcdb1041740945e0c221a5803294a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:71:91:a2:c3:0a:c0:1f:95:ff:3c:45:a0:61:
12:64:3f:7d:51:f8:b4:64:7b:11:91:4f:36:04:9f:
dd:cf:00:92:b6:48:be:e3:e7:4d:cb:37:97:7a:42:
95:0c:e7:ed:bc:44:f5:e3:96:20:3f:f7:bc:7f:a4:
b6:9f:08:33:7d:7c:94:e8:73:22:c5:65:cb:32:6e:
51:1b:7a:98:cd:d3:15:c7:ed:37:37:82:8a:4a:1a:
04:09:2a:be:ac:e3:eb:52:ab:64:a6:ba:bf:cd:4e:
8a:0f:2c:7c:38:20:a5:e0:23:5c:37:df:91:ff:87:
7e:bd:d6:8c:c3:90:16:07:59:c6:02:06:02:a1:35:
6c:e5:ca:43:51:0b:10:2c:0a:de:3b:9b:44:54:e7:
31:9f:72:0b:9d:90:79:b4:fd:96:9a:ca:6e:43:bd:
89:a4:a7:32:14:65:7b:71:3f:cf:33:83:62:79:b3:
09:b6:68:6f:b1:70:60:5f:ac:e3:7f:4e:15:9e:d5:
4d:56:aa:34:4f:ee:dc:95:45:fe:91:f4:ce:42:f3:
f2:31:5c:f7:41:8d:38:f0:dd:2d:55:7c:01:48:d4:
e9:e6:ea:3d:d6:3c:91:9f:34:eb:e9:84:bf:4c:2e:
d5:b8:20:b5:de:8d:03:4f:68:66:f9:b8:86:e2:a5:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:25:5C:5B:C3:DC:DB:10:41:74:09:45:E0:C2:21:A5:80:32:94:A7
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:75:fd:82:14:56:9f:a8:25:be:37:fe:4d:b5:4d:90:f4:ac:
bd:c9:d2:da:d5:12:3e:c0:99:31:d0:85:7a:e3:c3:35:0a:eb:
3c:39:bb:09:80:a7:a7:89:83:dc:24:75:dd:3b:c5:b4:26:41:
b8:f0:eb:80:0f:ba:60:56:e5:39:74:7b:71:d7:ea:5f:1d:7b:
c1:63:49:de:19:3f:6f:f0:be:b6:88:3b:c1:08:33:24:01:93:
2b:8c:7b:63:73:8e:3a:ab:77:23:89:a6:83:93:e1:ea:4e:83:
59:2e:1c:8e:64:d9:a9:d0:c7:47:7c:59:52:eb:42:93:27:47:
97:22:e9:fd:d0:3e:5a:c1:8c:65:79:08:fe:2b:e1:90:05:11:
1c:d0:7f:e2:87:10:73:a9:bf:2c:a5:12:13:c1:b7:42:73:1c:
7b:94:85:57:2f:72:d7:a8:15:19:d3:15:3d:77:ec:6a:d8:63:
62:60:24:f5:3c:27:e5:c7:3c:af:19:3a:83:42:70:03:18:0d:
0e:32:2d:17:7d:e5:6c:3b:6b:11:09:c7:60:76:48:a3:8d:3b:
fc:2c:09:2f:9e:f9:08:ed:d5:8e:6b:58:92:98:72:28:67:9b:
20:47:d0:e3:25:65:fd:5e:bf:29:c9:aa:a2:d5:36:4c:a5:e6:
d0:9c:23:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGc/eW+3ne7pp+PpsxNCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZmJjNjRkNTkzZmMwNzNjNjkzMTQzNTY2MzEwMjk1ZGUw
YTgzMzcwHhcNMjYwNDE3MTEwMDUzWhcNMjYwNDE4MTEwMDUzWjAzMTEwLwYDVQQD
Eyg5YTI1NWM1YmMzZGNkYjEwNDE3NDA5NDVlMGMyMjFhNTgwMzI5NGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nGRosMKwB+V/zxFoGESZD99Ufi0
ZHsRkU82BJ/dzwCStki+4+dNyzeXekKVDOftvET145YgP/e8f6S2nwgzfXyU6HMi
xWXLMm5RG3qYzdMVx+03N4KKShoECSq+rOPrUqtkprq/zU6KDyx8OCCl4CNcN9+R
/4d+vdaMw5AWB1nGAgYCoTVs5cpDUQsQLAreO5tEVOcxn3ILnZB5tP2WmspuQ72J
pKcyFGV7cT/PM4NiebMJtmhvsXBgX6zjf04VntVNVqo0T+7clUX+kfTOQvPyMVz3
QY048N0tVXwBSNTp5uo91jyRnzTr6YS/TC7VuCC13o0DT2hm+biG4qXsoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJolXFvD3NsQQXQJReDCIaWAMpSnMB8GA1UdIwQY
MBaAFIr7xk1ZP8BzxpMUNWYxApXeCoM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQt
MTA5N2RhOWRkZjI3LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQtMTA5N2RhOWRkZjI3
LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnX9ghRW
n6glvjf+TbVNkPSsvcnS2tUSPsCZMdCFeuPDNQrrPDm7CYCnp4mD3CR13TvFtCZB
uPDrgA+6YFblOXR7cdfqXx17wWNJ3hk/b/C+tog7wQgzJAGTK4x7Y3OOOqt3I4mm
g5Ph6k6DWS4cjmTZqdDHR3xZUutCkydHlyLp/dA+WsGMZXkI/ivhkAURHNB/4ocQ
c6m/LKUSE8G3QnMce5SFVy9y16gVGdMVPXfsathjYmAk9Twn5cc8rxk6g0JwAxgN
DjItF33lbDtrEQnHYHZIo407/CwJL575CO3VjmtYkphyKGebIEfQ4yVl/V6/Kcmq
otU2TKXm0JwjZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:15 2026 by rpki-client