Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: ghx+FVxhdgFOL5EI1/PO5s/ZgJ/wXsQjAF4P5n1FqE4=
Subject key identifier: F9:B1:B1:6C:EF:E2:6B:D7:44:AB:0F:1E:01:DA:8F:57:31:FE:BC:DF
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019FA9756B77FE3C0DA4A732600C7389A3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 16:01:12 +0000
Manifest this update: Tue 28 Jul 2026 16:01:12 +0000
Manifest next update: Wed 29 Jul 2026 16:01:12 +0000
Files and hashes: 1: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (hash: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk=)
2: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: Kf0HaqABbY6lonbJk3iscWX/Yoxt0YSBYHWhaxfcL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:6b:77:fe:3c:0d:a4:a7:32:60:0c:73:89:a3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Jul 28 16:01:12 2026 GMT
Not After : Jul 29 16:01:12 2026 GMT
Subject: CN=f9b1b16cefe26bd744ab0f1e01da8f5731febcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:23:ed:d3:1f:da:77:81:3a:8f:b7:e6:7c:
74:b9:32:95:f3:c3:38:97:8a:7a:f8:48:4e:e4:5a:
fa:22:cd:f0:b1:0f:28:89:71:af:d4:4a:f3:18:75:
1e:e5:b1:4a:83:37:ae:13:ac:7c:ff:f1:bf:bc:6e:
4f:78:28:30:53:15:60:ab:75:32:7d:e1:bc:70:cd:
08:76:82:fa:11:a4:ca:34:80:a0:5e:a6:f6:93:2c:
46:63:c5:5d:39:27:7a:6b:26:03:46:7a:2c:c4:05:
d4:c6:41:0b:9c:22:c2:c8:ab:26:c6:f9:44:d7:e3:
d9:c9:18:58:39:f7:37:4c:f8:99:25:d2:46:e9:d6:
3c:ab:50:13:2a:33:09:7e:61:e6:81:e6:d9:5a:fe:
bb:f9:2a:2c:88:44:ef:5c:f7:0a:5a:aa:c5:ae:d3:
16:d0:3b:40:a1:e7:ab:46:eb:cd:2c:1e:ee:e2:ee:
cf:c4:67:82:3b:25:4d:70:6b:50:49:6b:ac:4f:04:
1f:2c:41:f8:28:1f:b2:04:77:54:ff:cb:8b:b6:fb:
6f:ff:2c:a9:dd:cf:60:00:f8:94:8a:67:9c:58:60:
1a:ba:d8:ae:83:11:5b:b0:e7:98:c4:c4:d7:5a:13:
7f:32:3f:5f:7a:a0:b0:a1:05:a4:b7:00:85:b5:c1:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:B1:6C:EF:E2:6B:D7:44:AB:0F:1E:01:DA:8F:57:31:FE:BC:DF
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5f:57:de:20:f2:f1:84:30:e2:62:d9:af:9b:55:de:5c:76:
7c:5d:89:b9:13:ea:84:a0:52:76:b4:c6:b0:a2:0b:d7:e8:86:
f4:fd:c5:ae:96:89:fb:24:a0:7c:de:3e:35:b6:e2:72:5f:3c:
cd:2f:e1:95:20:f0:09:42:4e:2a:1a:65:d6:eb:16:af:4a:07:
47:a6:c4:31:c5:31:d5:86:a5:98:5a:a5:e3:d0:0b:b5:9f:50:
20:92:ad:7f:7d:71:d4:d4:40:63:4b:fd:7f:0a:cd:b9:ed:cf:
09:46:71:6c:ee:76:a2:b3:b7:d7:16:9a:c1:b2:6f:59:2b:68:
d5:eb:c2:6d:de:c6:5a:07:12:29:f2:e4:c5:9f:28:9d:fa:44:
5c:2e:c0:5d:97:6d:44:c9:4d:84:c0:75:9d:ac:7c:08:09:bd:
59:7c:d0:25:9e:81:7e:13:77:3d:0c:cc:5c:d2:a8:53:4e:fc:
5e:c5:aa:b6:1f:37:57:63:ec:b2:9c:f2:a3:83:25:b4:1b:20:
75:82:10:32:63:e0:e5:f0:92:aa:23:90:1d:f3:52:6e:e8:20:
24:9d:1c:12:27:4c:c0:58:89:1d:e0:40:d8:1d:a1:76:53:a6:
95:36:34:db:fc:f1:bc:a3:d8:b3:c5:e2:d9:35:1f:47:db:a6:
5b:ba:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:32 2026 by rpki-client