Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: 38MxxTUJIGTcppfWqH/EZM8VKrpX+dY1do80CN9V0tI=
Subject key identifier: 85:78:2D:0D:9F:E8:C8:18:2B:59:D1:DC:07:B1:AD:A8:C7:98:73:19
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 01A199FC88BA8C5229F66A053CEFF6717570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 13AD
Signing time: Mon 02 Nov 2026 02:00:26 +0000
Manifest this update: Mon 02 Nov 2026 02:00:26 +0000
Manifest next update: Tue 03 Nov 2026 02:00:26 +0000
Files and hashes: 1: F4Vgr4L1EbwW3XosQZ_v157FMI4.roa (hash: 9QrlKW7ocjgl0QVizrLrTu8nAqX3uWUTPtBosztTts8=)
2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: Ukmv4n0n2XfYwaPOXSCA19a8+SGrSA3d8H1mLsUdt1o=)
3: onSEzlN4qbxVnjeAw7OET_jQUj4.roa (hash: zvwzfyM/aVXBPPd5eg3knpPI19tvXyvhoAMD+Avyer0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:fc:88:ba:8c:52:29:f6:6a:05:3c:ef:f6:71:75:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Nov 2 02:00:26 2026 GMT
Not After : Nov 3 02:00:26 2026 GMT
Subject: CN=85782d0d9fe8c8182b59d1dc07b1ada8c7987319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:1d:a3:83:2d:50:3c:05:7b:f7:04:8f:88:
b2:cd:9b:ba:4a:08:7e:46:35:71:9d:92:99:d6:59:
b4:59:3e:02:02:47:5b:6c:c6:72:a8:72:98:1f:25:
55:71:0e:1f:cd:a2:47:eb:8c:ce:74:74:1a:e0:18:
87:6a:fa:87:a3:ae:90:18:5d:48:df:6b:62:ec:3d:
d0:1a:cd:15:98:83:d9:bc:f3:42:34:bc:ca:4a:db:
c2:41:ba:2e:03:9d:7c:36:b1:3d:8f:09:d1:e5:df:
0e:f7:bf:e9:53:69:f9:76:14:3f:56:ae:8b:aa:2f:
df:ae:84:24:b0:18:61:8c:a7:46:8d:69:5f:82:c5:
04:47:88:8b:26:10:0f:d6:b9:c9:b2:e1:05:09:dc:
c4:49:d0:7e:72:2b:ef:8e:c2:c3:67:a2:b1:33:54:
8d:bd:27:6e:6e:5e:2a:4b:54:cf:4d:06:7e:b0:fa:
d9:d0:9a:62:bd:30:75:2f:8e:4b:49:b2:48:e9:64:
4e:77:12:ab:36:f9:bb:78:6b:4b:23:0f:ed:84:9a:
2f:1f:15:db:53:dc:6e:94:08:6c:ec:9a:35:ce:d0:
32:18:be:ee:a2:67:ba:40:e8:a0:67:45:f3:f8:24:
b3:3d:a7:4f:93:b1:25:c6:a6:fd:7a:6b:db:33:49:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:78:2D:0D:9F:E8:C8:18:2B:59:D1:DC:07:B1:AD:A8:C7:98:73:19
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:61:0d:c2:41:9f:55:6f:99:f9:dd:5c:f5:02:41:be:df:38:
35:77:0b:91:ee:f6:3d:06:27:06:d4:89:f5:00:af:11:19:5b:
3d:cc:78:4c:d8:83:36:0d:8a:cc:80:f2:b8:67:41:f8:f2:71:
7d:58:30:71:be:47:0e:d4:a6:55:7a:f7:28:ae:b3:7d:9d:91:
d4:41:4e:ed:54:bf:71:13:4e:a4:8b:92:4a:ff:b4:66:0b:a6:
74:cf:42:54:cc:f9:17:13:da:6a:4b:22:c4:c2:eb:9f:81:35:
a2:9e:db:67:00:fa:08:8c:75:27:5c:f5:27:43:28:5f:ad:e5:
f7:8d:b0:e6:e9:bd:fa:a5:37:f8:8f:da:41:16:d9:72:1b:56:
40:72:4f:a1:e4:22:f5:3b:cb:53:9a:46:f6:31:95:98:8e:25:
f7:02:87:bd:8e:9a:3f:7d:f0:e1:2e:f3:f5:de:48:19:30:00:
7d:74:fc:1d:da:59:ff:a2:f4:62:b5:cf:2c:60:64:f2:8b:cd:
80:b2:51:12:bb:6e:eb:0d:df:44:39:c8:6d:b8:a9:23:f4:c5:
d7:04:4a:83:7a:a9:29:25:a6:a3:76:47:b2:80:af:50:5c:cc:
ec:25:3e:09:b5:3d:6a:75:b1:53:d5:fe:95:c1:eb:3a:28:e6:
23:3d:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 11:48:48 2026 by rpki-client