Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: Uc/hXHSWkRBb3cmWDvhImKHeUTWdz9dK5nzdIJ4ExQY=
Subject key identifier: BF:F5:01:2D:2B:55:DC:FA:E8:EA:91:84:85:27:A3:57:24:31:BB:55
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 019CAA21382D536BE94C74B297AAFA41CAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 1424
Signing time: Sun 01 Mar 2026 16:00:29 +0000
Manifest this update: Sun 01 Mar 2026 16:00:29 +0000
Manifest next update: Mon 02 Mar 2026 16:00:29 +0000
Files and hashes: 1: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: Nr60Wq7t6kd/1vs4K0v/EEWN1fmSG95iyMLOnZZXXVg=)
2: kUi761JvorzxQPc6oroU7qaYtPw.roa (hash: XgXtN6YXvVkYUj2ZwJZH9OZFn2FFfJDscz2MToxQBsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:38:2d:53:6b:e9:4c:74:b2:97:aa:fa:41:ca:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Mar 1 16:00:29 2026 GMT
Not After : Mar 2 16:00:29 2026 GMT
Subject: CN=bff5012d2b55dcfae8ea91848527a3572431bb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:37:5f:6b:d2:fd:3f:8f:5e:f9:14:05:7e:
e4:ab:24:1c:e2:84:c5:48:12:b8:e4:cb:6b:3d:65:
56:4b:0d:cd:e3:6f:71:dc:9f:be:10:46:af:85:a0:
81:4a:bf:22:7a:da:48:98:ea:2b:19:f7:40:e6:f7:
34:61:7c:c5:3f:92:0c:f5:d8:d2:54:0b:36:23:8e:
06:7d:8c:c3:cb:00:cb:a0:11:91:a8:01:e7:7d:55:
0d:c1:20:d7:01:fa:58:95:92:c2:30:d6:c3:df:74:
f5:a9:e1:e0:87:ed:01:2b:fe:e8:c6:6a:a2:2d:7e:
34:64:0d:75:30:ad:fa:03:54:46:72:92:5d:0e:16:
cd:d3:3d:79:36:19:b8:36:f2:46:f5:d7:f3:b2:df:
99:39:8e:91:59:0b:48:87:9b:b1:ea:3f:7c:1c:8b:
5e:ec:4d:7f:35:45:96:e2:13:a9:a5:b6:05:a7:fa:
b7:06:eb:68:20:2b:43:51:bf:96:a0:80:21:20:77:
53:30:e7:e5:42:76:c5:28:b8:c9:f0:52:49:c2:ed:
fa:d5:12:ff:60:e7:44:e6:9d:5d:64:95:3a:a8:d0:
d9:72:61:d0:b0:62:5a:dc:9e:6c:fd:f3:e4:85:3e:
4f:c3:9e:11:d7:24:19:fb:37:cb:78:7f:5b:a9:bb:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:01:2D:2B:55:DC:FA:E8:EA:91:84:85:27:A3:57:24:31:BB:55
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:14:22:38:b7:b0:07:54:b1:f8:7d:2e:9c:40:eb:9e:c6:c5:
6f:a7:35:17:ba:f6:b8:72:3b:c1:3f:31:df:ff:73:6a:a5:e6:
10:14:3f:1e:31:24:4e:3f:cb:96:1c:d0:a6:eb:e5:52:6f:a5:
1e:f8:da:68:01:17:59:86:67:d0:56:5f:50:2f:fa:95:c9:3a:
cf:e1:5d:66:d0:23:23:a0:f7:7e:09:82:de:42:e3:92:b5:0d:
c0:b2:51:04:95:2a:b9:84:9f:5e:7d:c5:a7:e7:33:2b:4f:6f:
72:f5:f0:76:7d:36:da:01:a6:a0:81:13:58:cb:d1:ea:83:ec:
70:a7:df:8d:2a:32:b2:19:35:a1:a8:86:a6:8f:88:5e:4c:8f:
b4:2b:99:28:aa:8c:f1:d3:ba:7d:57:07:f7:c6:a3:ca:ef:12:
14:5a:e0:78:c5:f0:1e:ac:f5:ff:cf:e8:4a:99:28:ae:1e:16:
e4:72:36:a2:0a:ac:04:34:86:fe:64:ca:5b:6d:62:32:a3:46:
b5:81:3a:c7:23:d2:e4:8e:6f:53:5c:8b:54:68:a3:c9:c7:07:
a6:fc:92:3c:99:32:8b:63:3e:91:ac:6a:7e:0a:b9:7d:7e:d4:
15:b1:56:24:07:a6:67:dc:8c:16:ab:ff:6c:59:79:c6:a2:de:
70:e3:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:29 2026 by rpki-client