Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: JVTzF4VQweVfFKgbsTH+dqXBrm2Wz4GGhtQGe+uQntQ=
Subject key identifier: BA:21:68:C0:B9:7D:39:77:36:DC:0E:49:B9:7C:91:C6:25:4E:48:90
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 019CABA1E66C15ACDDB39E3C3E961E4E2328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 1605
Signing time: Sun 01 Mar 2026 23:00:40 +0000
Manifest this update: Sun 01 Mar 2026 23:00:40 +0000
Manifest next update: Mon 02 Mar 2026 23:00:40 +0000
Files and hashes: 1: 3oGVu0O8WvuLGv8f2Jt9dxPSv2A.roa (hash: 4mJ9zwVzZQxqJbzR75wLCS8IQ+/ppt2TeN93BoHL9DY=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: GR4CNDNGGgjVzicZc5Xp7rIbQtGZsP2zGJoMFjHSoXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e6:6c:15:ac:dd:b3:9e:3c:3e:96:1e:4e:23:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Mar 1 23:00:40 2026 GMT
Not After : Mar 2 23:00:40 2026 GMT
Subject: CN=ba2168c0b97d397736dc0e49b97c91c6254e4890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:23:74:a6:20:90:81:38:61:92:09:fc:b8:e6:
b5:0f:48:46:d9:a8:34:3f:b6:72:c1:42:65:c3:1c:
04:3e:ef:95:b4:f5:54:88:69:c4:23:cb:76:84:2f:
6a:1d:eb:19:79:f6:d7:eb:5a:93:a0:c1:0e:b5:2e:
4f:2b:af:df:8d:c8:59:96:62:34:dd:a0:ac:5d:75:
2b:09:79:11:3c:02:36:1f:b9:eb:35:e0:dd:ae:c6:
3f:68:eb:5c:ea:c7:01:1f:41:ae:84:d2:8d:5c:0a:
c7:fb:ee:fe:35:81:65:60:a2:35:4e:29:81:ff:6f:
a9:7b:ea:ef:c2:d9:5c:71:da:a1:7f:70:3f:c8:a2:
52:2a:e8:49:91:27:39:94:3f:63:b1:6d:46:5f:f5:
12:9e:8b:e1:d1:4e:02:95:c5:36:8b:ff:88:b1:4f:
81:d4:05:17:7c:b3:39:c3:74:34:46:64:4b:ed:2e:
27:81:ff:95:82:7c:03:ed:56:c2:9d:07:46:83:bf:
cf:84:82:11:4f:b4:fa:4d:76:b9:f9:4c:e7:84:81:
4f:67:c1:81:b3:8d:16:91:7b:ab:5a:d9:a8:2b:2a:
77:fe:37:8a:82:9b:06:74:bd:0f:d6:a0:1d:1d:0c:
71:65:27:41:7d:b6:f5:07:b7:67:45:5e:ce:d6:26:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:21:68:C0:B9:7D:39:77:36:DC:0E:49:B9:7C:91:C6:25:4E:48:90
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2f:34:3a:7a:8f:1a:26:0a:57:73:38:54:ec:e8:88:e5:21:
f2:3d:c6:e8:2c:91:18:31:16:b6:01:15:33:dd:e0:3a:87:8d:
06:46:f4:05:10:7e:8a:74:6d:6c:ae:34:c3:83:8a:0a:7c:08:
71:9c:fb:7c:1e:6f:3c:c4:66:f6:35:9e:9d:63:4a:f2:90:47:
d2:a3:2f:d6:b5:9f:57:dd:a0:e2:b4:c1:18:a9:4a:8c:a3:b9:
bf:e4:5d:fd:c0:fa:3b:c9:fe:c5:ad:50:81:04:5b:74:d1:d4:
7b:5d:f0:5a:b3:f1:75:79:3d:ed:ca:69:f2:ea:f7:7c:ca:a5:
82:59:4b:24:c2:32:01:73:a7:59:9b:73:46:d1:2c:03:92:ab:
2e:f9:92:bd:f2:4e:cd:80:89:24:70:ee:f2:09:fd:33:1d:09:
ca:7b:76:c5:07:5c:d5:56:3b:7c:48:ab:9c:32:8a:ae:af:21:
5c:7b:6a:e6:9a:d4:97:88:b0:41:18:74:2b:1f:a0:66:7a:80:
95:26:9e:04:21:f6:f7:65:f9:12:40:df:d9:ce:6d:ae:6c:39:
1e:72:5f:5f:0e:9d:f8:ea:b3:0d:7f:3e:ee:74:7d:e4:7e:f0:
8d:d3:32:e0:c3:1f:ab:28:70:21:ad:54:e4:9f:4d:54:d2:54:
8b:4f:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:03:00 2026 by rpki-client