Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
File: ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft (raw, json)
Hash identifier: wKLvShFIV/ymd2UrWH1eBCqwDUvcyCF1eUtFjpUfNsk=
Subject key identifier: 8B:D4:FD:A6:18:F2:9F:4A:69:DA:59:3C:2D:E8:51:91:2B:92:9D:D3
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Certificate issuer: /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial: 019FA8998439A719FA08B257079458B4730F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
Manifest number: 0DBA
Signing time: Tue 28 Jul 2026 12:01:00 +0000
Manifest this update: Tue 28 Jul 2026 12:01:00 +0000
Manifest next update: Wed 29 Jul 2026 12:01:00 +0000
Files and hashes: 1: 1gk0sLtkOinOBhMkUiRN6708AVA.roa (hash: qx4BeBMu/olO2Xz1c+ij7UE+dLcw4YvlNY6rUOImv/o=)
2: ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl (hash: 3N1R7XurgXNgI3Ebts+BLA+PM0EstuNorWx/ymF+VCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:84:39:a7:19:fa:08:b2:57:07:94:58:b4:73:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Validity
Not Before: Jul 28 12:01:00 2026 GMT
Not After : Jul 29 12:01:00 2026 GMT
Subject: CN=8bd4fda618f29f4a69da593c2de851912b929dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:b2:ae:d8:1f:c1:03:37:e9:85:a0:c8:19:
e3:9c:e3:c4:3c:c8:66:49:d9:df:1b:ba:1b:34:73:
43:dc:0d:dc:36:ec:55:05:6c:52:40:86:b4:58:9d:
ff:49:30:43:96:a7:cc:7e:b5:f0:8e:3d:55:3e:66:
9b:76:5a:5b:9d:9a:7e:7b:71:39:76:21:19:1b:84:
55:e5:b7:de:4e:57:47:11:e5:01:5c:8d:f1:ab:ed:
4d:72:da:5b:6e:d5:06:eb:a0:41:26:07:d4:af:88:
62:5c:99:f6:24:ef:d6:a9:d7:11:c4:66:5c:d1:39:
12:b7:3c:ec:61:70:0b:13:b3:52:5e:47:3f:c5:c5:
29:51:2b:ee:17:1b:27:0b:cb:9e:1e:86:a3:76:2e:
a5:ac:df:f3:a3:ed:ed:b1:c8:ac:bc:e6:61:15:b0:
81:13:c8:f9:93:7d:27:00:aa:d5:55:eb:c7:1b:7a:
bd:5c:ca:15:88:c9:4d:39:1f:8a:38:cb:93:63:85:
da:7b:28:4a:64:99:c4:7b:1c:1f:3d:56:fa:9e:8e:
ac:79:2f:c9:0f:73:4c:0f:ec:ba:69:75:ca:51:a8:
77:e5:46:84:c9:b3:71:4a:d5:3a:a6:43:83:47:36:
b5:0e:b2:96:38:9e:c5:f6:b5:e6:dc:67:ea:d5:e6:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:FD:A6:18:F2:9F:4A:69:DA:59:3C:2D:E8:51:91:2B:92:9D:D3
X509v3 Authority Key Identifier:
keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:eb:5d:e6:5c:3e:62:81:93:05:2b:a9:07:28:90:22:1d:c1:
10:10:fa:a9:1e:3e:27:70:2a:65:3d:14:63:0b:26:c5:a3:4b:
8b:b9:2e:2b:5f:19:03:f0:06:dc:0b:7c:90:5b:03:97:5e:97:
c9:79:a2:5e:d4:22:bd:1a:88:d5:c3:44:64:59:65:89:03:2a:
87:4f:30:88:f6:e7:2d:1c:77:d8:1b:48:7b:c8:b5:57:79:38:
53:34:5e:4e:dd:de:d6:b5:61:4e:1f:95:1c:8f:eb:33:21:6f:
b2:11:e3:af:2c:33:2e:d4:8d:4e:31:b4:75:cf:4e:d3:e1:c1:
06:55:d6:ad:7c:9b:51:6d:9a:35:33:bc:bc:c5:4e:b6:0c:8d:
f1:c8:3c:50:6a:08:64:11:2f:9f:a3:de:f8:f2:03:ef:0c:f3:
90:58:68:67:b1:50:59:8b:f7:48:7e:25:fe:c3:79:a8:87:65:
84:61:8b:42:0f:cb:b4:e6:2d:b2:4c:67:ec:e8:f9:be:33:14:
9d:d5:bd:4b:61:46:71:83:0d:f7:2b:92:6d:99:5f:03:e2:78:
b9:6c:db:7f:64:80:54:33:e8:77:68:e8:48:17:7e:8a:ba:23:
17:24:0a:05:0d:9c:80:47:ff:7e:33:c2:3b:50:ec:42:9e:02:
dc:d1:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:43 2026 by rpki-client