Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
File: ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft (raw, json)
Hash identifier: UKq4l+0rGGjSD9Fa6b9EMyk3mSVJgrGXwu4Pm4QwY74=
Subject key identifier: 17:8C:8E:16:F6:14:A5:E4:68:FB:F9:50:92:21:07:19:7F:63:5A:24
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Certificate issuer: /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial: 01A0C09FA94A2CDC821CF6B8815A5086897E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
Manifest number: 0E4B
Signing time: Sun 20 Sep 2026 21:01:24 +0000
Manifest this update: Sun 20 Sep 2026 21:01:24 +0000
Manifest next update: Mon 21 Sep 2026 21:01:24 +0000
Files and hashes: 1: 1gk0sLtkOinOBhMkUiRN6708AVA.roa (hash: qx4BeBMu/olO2Xz1c+ij7UE+dLcw4YvlNY6rUOImv/o=)
2: ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl (hash: EejzVKVPEPezu6aOlrGEtgH8fGZcHo09M93YiRNprcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:a9:4a:2c:dc:82:1c:f6:b8:81:5a:50:86:89:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Validity
Not Before: Sep 20 21:01:24 2026 GMT
Not After : Sep 21 21:01:24 2026 GMT
Subject: CN=178c8e16f614a5e468fbf950922107197f635a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:5b:c1:00:c2:ac:27:d0:20:80:77:19:39:
01:4f:b8:be:a1:18:41:a8:db:43:8f:46:7a:f1:7d:
13:55:36:06:be:68:df:fd:5c:ca:5b:08:7c:03:86:
af:82:30:c7:0f:08:8c:8f:b2:5f:72:33:07:ae:8d:
64:35:3f:77:31:10:02:89:ad:3f:c6:56:66:07:73:
47:77:84:78:74:f0:1c:bd:75:aa:47:b8:d3:34:d6:
e1:5a:f1:b3:b0:b6:9f:0e:fc:0b:d0:ff:22:7b:91:
56:95:66:4b:9f:3f:0e:d4:a4:0b:5f:31:1d:2c:53:
ef:b2:cd:af:59:75:1a:69:12:9b:c4:9c:ba:43:54:
bd:bb:1b:c4:9e:3e:4c:70:78:2a:05:f3:c8:1d:64:
ab:21:de:fc:92:8c:4a:4c:45:92:31:2d:a2:59:ea:
7d:20:6b:c8:38:6a:8e:f7:05:6b:6c:8b:0e:a1:a5:
4a:24:d0:70:90:fe:fb:dc:f0:8c:1d:e5:f0:74:b6:
44:70:80:4b:9c:6d:8a:ee:61:ef:85:b0:a2:51:68:
11:f3:8d:a7:06:63:1b:07:a0:69:10:88:9a:de:ac:
5e:0a:e0:0e:e5:27:a8:b2:2f:fc:b4:cc:54:b6:2b:
7f:70:ab:8e:95:07:ca:c7:61:13:2c:49:e3:c6:8c:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:8E:16:F6:14:A5:E4:68:FB:F9:50:92:21:07:19:7F:63:5A:24
X509v3 Authority Key Identifier:
keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:cc:e7:1c:14:9b:c8:f0:ad:99:5a:a4:af:88:ba:59:02:
a8:b4:68:a9:e0:bd:d8:98:7a:02:61:82:97:10:d3:0e:22:75:
27:af:ba:b8:4b:aa:04:37:3f:c3:7d:25:51:7e:2c:2b:f6:aa:
87:ab:b0:cc:f7:fd:22:01:ac:09:f5:b3:72:c7:29:3a:04:d4:
21:29:49:2d:b1:26:e1:4f:b4:f2:a8:9a:4b:e0:a3:2b:a2:58:
f2:3e:d2:d5:55:52:e7:a0:40:10:3f:73:1d:56:c9:b2:0b:e5:
76:e0:a3:ff:95:bf:2a:0d:19:a9:55:af:44:4f:1f:72:60:d0:
42:d1:cc:69:9e:88:3f:34:2e:0d:59:88:28:f4:35:4a:bc:1a:
54:4e:86:2d:69:eb:98:69:57:ee:d6:dc:73:60:16:ce:04:b8:
c4:c7:34:d0:d4:6c:48:1b:bb:6f:d5:79:4c:ee:2e:10:2d:a1:
14:af:c3:57:4b:cd:7c:48:03:2a:f2:43:61:62:54:01:5c:40:
61:ca:f4:27:fa:fe:48:b5:a8:5c:2d:6c:4c:42:c6:ca:01:4f:
59:e7:11:41:13:a4:86:4f:29:52:aa:94:e7:86:ba:85:a7:35:
4a:c9:74:f1:01:c2:6f:e7:4a:71:6c:71:41:dc:0b:85:3e:8d:
98:b0:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:48:49 2026 by rpki-client