Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: Ov/E5rqcyvxuretFeBTvuDpbcCSuzqtyq5+joZOKl88=
Subject key identifier: BD:2B:4B:87:62:C1:EA:50:0F:CB:7B:67:E4:88:5D:A5:51:C6:AB:71
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 019D9999A00A186C123191AF4D7C410EDB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 14A0
Signing time: Fri 17 Apr 2026 04:01:15 +0000
Manifest this update: Fri 17 Apr 2026 04:01:15 +0000
Manifest next update: Sat 18 Apr 2026 04:01:15 +0000
Files and hashes: 1: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: PgVGvKJ6DxomktUb3wdgopz3sOYHLGS38icsHR3/fPI=)
2: kUi761JvorzxQPc6oroU7qaYtPw.roa (hash: XgXtN6YXvVkYUj2ZwJZH9OZFn2FFfJDscz2MToxQBsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a0:0a:18:6c:12:31:91:af:4d:7c:41:0e:db:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Apr 17 04:01:15 2026 GMT
Not After : Apr 18 04:01:15 2026 GMT
Subject: CN=bd2b4b8762c1ea500fcb7b67e4885da551c6ab71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:d6:c2:e5:61:be:a6:46:83:63:1b:9a:e1:
aa:ae:de:31:53:d3:a5:93:f6:74:6e:b5:4e:98:d3:
fc:e8:e2:0e:43:1e:70:1f:5e:a5:89:6e:9a:46:44:
fc:d0:fd:b0:40:8e:2e:3c:4f:3c:96:0f:6e:e2:f3:
0f:a8:f5:0f:97:d9:3a:5b:f9:b2:2f:11:19:51:75:
d5:2d:e6:99:5b:91:23:fe:e8:01:60:ee:7e:1f:48:
69:64:db:77:91:e4:ff:76:90:5b:d4:77:de:c2:4c:
8f:87:73:7c:48:a7:33:a9:6f:22:02:00:47:e3:30:
c8:d3:1f:75:b0:ba:b8:fc:26:80:d3:04:75:3c:21:
c5:e7:83:27:98:3a:45:39:cd:04:c6:82:b5:6e:62:
5a:a8:d7:5b:4d:05:a9:c0:38:00:da:8c:87:3d:1c:
d3:a0:32:eb:9d:70:77:81:b7:59:b1:6f:61:9e:ed:
91:a4:4f:75:c4:bf:b2:d4:12:26:a8:93:cb:f9:bc:
1b:ff:e7:7d:52:45:c2:9a:57:d6:93:61:78:a1:ea:
66:6c:5a:b7:d4:d2:59:b9:85:ae:cf:48:c4:31:b4:
29:2e:f6:c9:cf:25:13:db:98:a8:65:40:80:c6:62:
2b:27:96:b8:90:87:f1:50:aa:8f:dc:90:2f:7b:76:
04:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2B:4B:87:62:C1:EA:50:0F:CB:7B:67:E4:88:5D:A5:51:C6:AB:71
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c1:c0:87:d5:4f:f1:de:b4:63:da:56:dd:31:af:23:d7:a5:
dc:48:8c:8e:0b:0a:6e:f5:da:f9:b3:30:a8:ae:d5:59:4c:70:
5a:e5:a7:58:21:78:a5:bf:df:3b:98:c5:1c:49:14:1f:56:39:
97:45:02:ac:2f:e3:d6:32:0b:f6:11:50:d6:f4:0d:e4:14:85:
38:c4:98:7a:01:53:f6:58:d7:2b:22:c5:6c:1f:f0:23:de:d4:
87:6a:4b:3d:b2:65:f1:e4:32:7a:ed:5f:56:df:4e:ca:02:cf:
c4:cd:b7:2f:cf:de:46:39:57:76:d2:c7:59:04:4b:de:c9:b1:
fc:8a:20:55:b0:88:61:8f:cb:f6:e6:90:fa:5c:56:f5:b5:af:
a8:0a:e0:ab:44:29:6b:b6:a1:d7:be:d0:66:d9:cb:65:86:d1:
25:00:a0:66:5e:c7:70:78:a4:f8:a6:99:64:b6:0c:c3:6f:e3:
6a:1f:39:fd:6c:12:1f:0a:bd:36:cb:61:c4:d6:9e:a6:93:4f:
53:19:05:e1:83:ed:33:1a:1e:8c:b7:20:26:ea:a2:c1:59:f2:
4b:51:f3:f9:e8:2c:92:c1:cd:c0:48:7c:05:89:80:9d:a5:b9:
59:97:d0:05:86:20:68:0f:db:ae:d1:1c:21:1a:47:43:85:12:
66:46:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:25 2026 by rpki-client