Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: x9kVTxHXx+80W6Fl9ukfMxnJ97YmhwgnjUYWL87nNgY=
Subject key identifier: D7:D7:88:5C:5A:8F:E3:BD:89:9F:D0:BA:41:AC:D2:00:70:EE:91:BF
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 01A0C3689D802EFF0D1DDCD7B54D03D647E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 19F8
Signing time: Mon 21 Sep 2026 10:00:08 +0000
Manifest this update: Mon 21 Sep 2026 10:00:08 +0000
Manifest next update: Tue 22 Sep 2026 10:00:08 +0000
Files and hashes: 1: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (hash: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk=)
2: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: qPLFsEebIhFeAHxMudWDYjm/YQIogAm3m5ztDKdM7lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:9d:80:2e:ff:0d:1d:dc:d7:b5:4d:03:d6:47:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Sep 21 10:00:08 2026 GMT
Not After : Sep 22 10:00:08 2026 GMT
Subject: CN=d7d7885c5a8fe3bd899fd0ba41acd20070ee91bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:3e:f5:9b:46:06:09:40:c1:38:09:b5:92:
cc:42:c8:9e:af:21:12:46:24:4f:58:37:f6:80:b1:
0b:b4:5e:71:1e:f1:f8:9a:f1:41:a6:b9:d1:9b:6c:
03:ff:8f:e7:24:ef:93:69:13:de:5c:41:64:7d:81:
4e:fe:c7:3c:63:f1:0f:b7:64:c3:d4:3a:d2:3e:83:
20:2e:d8:53:39:c9:8a:8a:a9:ee:6d:89:a9:96:2e:
6b:1e:b3:f7:19:eb:e3:b0:24:86:1c:38:0c:37:52:
8d:5e:9d:ca:66:f2:1b:f4:d1:ea:50:9f:34:ba:fb:
43:e2:65:1b:c4:55:8d:b4:d3:db:9b:9b:79:e0:1f:
d0:d0:35:83:05:88:d9:1f:34:a3:0d:cf:b0:70:53:
7a:5e:2d:1c:2e:59:e2:2f:f2:7c:f2:4c:05:73:d2:
21:a1:26:5f:52:a2:c2:ee:78:19:19:ad:46:22:cf:
3a:7f:ed:1e:88:96:19:59:aa:91:2f:bd:4d:19:42:
96:6a:27:e2:3a:a3:2f:ed:c0:cb:c3:08:d0:03:44:
02:b7:75:b5:6f:55:5d:59:2d:e0:5e:7d:8e:03:c4:
d8:e8:14:e2:7b:51:86:0d:35:59:27:12:a4:b1:4b:
ac:6f:44:84:7e:93:9c:66:40:46:98:09:6c:ce:1c:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D7:88:5C:5A:8F:E3:BD:89:9F:D0:BA:41:AC:D2:00:70:EE:91:BF
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:04:1a:e7:73:14:50:eb:17:4a:13:46:ab:58:65:77:e0:94:
83:63:c5:a6:b7:e5:83:1f:9e:1f:32:28:bc:b4:75:23:ed:3e:
28:47:17:82:43:44:a7:f1:e8:a2:40:b7:57:e3:60:fe:b2:c5:
bb:d8:d4:0e:98:39:83:9d:f9:02:9c:50:d8:71:1f:26:f3:f1:
bf:d8:ad:f3:82:1c:1e:a4:ff:35:cc:7f:c8:e1:cc:1a:12:73:
4d:67:87:00:ab:bb:74:18:4f:19:dd:6c:b8:e3:3a:5f:23:7a:
a6:69:76:97:74:5d:4d:2e:23:03:f6:f9:f3:43:58:69:af:3b:
d6:70:2c:46:2b:1c:ba:aa:38:e3:95:d2:4e:d6:7b:a9:5f:c3:
2d:a2:bf:71:38:ee:10:f0:cb:0f:8c:07:cc:84:18:b0:e9:b7:
3b:f0:bf:b7:48:47:c4:09:58:d0:29:eb:48:32:40:91:77:75:
00:fc:9f:5c:57:2f:a4:5f:36:bb:e5:da:78:20:fa:8a:42:af:
c9:88:21:eb:8c:57:3a:bb:de:0e:a8:48:47:9c:fe:28:f9:06:
89:e9:ed:6d:4b:f3:01:95:35:ea:3d:66:1e:e8:e9:ec:a1:c2:
84:24:66:ce:88:0b:25:fc:4f:4f:27:1e:f4:51:64:5a:25:dd:
32:30:27:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaJ2ALv8NHdzXtU0D1kfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMThlZjA4YjU1ZGRiMjBjODgxNmE2MjFhNDU5Y2RiOTI3
YjMyMDEwHhcNMjYwOTIxMTAwMDA4WhcNMjYwOTIyMTAwMDA4WjAzMTEwLwYDVQQD
EyhkN2Q3ODg1YzVhOGZlM2JkODk5ZmQwYmE0MWFjZDIwMDcwZWU5MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd8+9ZtGBglAwTgJtZLMQsieryES
RiRPWDf2gLELtF5xHvH4mvFBprnRm2wD/4/nJO+TaRPeXEFkfYFO/sc8Y/EPt2TD
1DrSPoMgLthTOcmKiqnubYmpli5rHrP3GevjsCSGHDgMN1KNXp3KZvIb9NHqUJ80
uvtD4mUbxFWNtNPbm5t54B/Q0DWDBYjZHzSjDc+wcFN6Xi0cLlniL/J88kwFc9Ih
oSZfUqLC7ngZGa1GIs86f+0eiJYZWaqRL71NGUKWaifiOqMv7cDLwwjQA0QCt3W1
b1VdWS3gXn2OA8TY6BTie1GGDTVZJxKksUusb0SEfpOcZkBGmAlszhwo/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfXiFxaj+O9iZ/QukGs0gBw7pG/MB8GA1UdIwQY
MBaAFCAY7wi1XdsgyIFqYhpFnNuSezIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDIt
YTBhYzQ5YWQzNDNmLzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDItYTBhYzQ5YWQzNDNm
LzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAQa53MU
UOsXShNGq1hld+CUg2PFprflgx+eHzIovLR1I+0+KEcXgkNEp/HookC3V+Ng/rLF
u9jUDpg5g535ApxQ2HEfJvPxv9it84IcHqT/Ncx/yOHMGhJzTWeHAKu7dBhPGd1s
uOM6XyN6pml2l3RdTS4jA/b580NYaa871nAsRiscuqo445XSTtZ7qV/DLaK/cTju
EPDLD4wHzIQYsOm3O/C/t0hHxAlY0CnrSDJAkXd1APyfXFcvpF82u+XaeCD6ikKv
yYgh64xXOrveDqhIR5z+KPkGientbUvzAZU16j1mHujp7KHChCRmzogLJfxPTyce
9FFkWiXdMjAn8w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:48 2026 by rpki-client