Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier: cwWJKL4yWKQ6l7Q1uD0qKi5csStvL0dcOdm5gY6+7cE=
Subject key identifier: D3:B2:73:36:71:E4:85:47:CD:2A:F7:79:80:FA:E6:43:FB:E3:37:8B
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 01A0CAB500E7B28AB898C3E56EA6D85B9101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number: 1653
Signing time: Tue 22 Sep 2026 20:00:54 +0000
Manifest this update: Tue 22 Sep 2026 20:00:54 +0000
Manifest next update: Wed 23 Sep 2026 20:00:54 +0000
Files and hashes: 1: AXDbFHRRURCQerpRgnAggK7Ta-Y.roa (hash: p8zZBqBwXmRPjDHpTUw1CzO1XmAgl9lFsGmMaXiazxE=)
2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: Atwhffus1Jo86sPI/4MfEsUIj5f6p9PQebFTjgOPdK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:00:e7:b2:8a:b8:98:c3:e5:6e:a6:d8:5b:91:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Sep 22 20:00:54 2026 GMT
Not After : Sep 23 20:00:54 2026 GMT
Subject: CN=d3b2733671e48547cd2af77980fae643fbe3378b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:c5:ca:af:b4:b8:be:d1:e4:db:9f:c0:d6:
e4:bd:fd:36:40:ab:5e:57:93:10:3b:f9:8e:b3:a4:
00:96:4b:31:ec:33:a9:75:38:fb:fd:3b:cd:ec:29:
e8:87:02:99:7f:6b:14:cf:ba:c4:0c:ce:d6:13:c0:
94:9d:59:5b:fc:fe:8e:10:0e:3e:10:39:0c:78:4a:
24:5e:36:c6:cb:df:58:3a:00:ee:89:8f:1f:18:58:
59:b7:54:8d:42:c8:3f:3b:0c:d3:99:c5:04:4d:3e:
64:77:f2:c5:b4:1e:83:fe:67:3b:10:02:76:b1:d5:
f8:91:4b:ae:47:3a:41:54:c8:9f:4f:15:26:76:73:
b1:54:5f:66:18:54:5e:7f:71:f6:1f:bd:f3:c8:03:
81:67:f5:1e:82:f9:b3:98:08:c8:eb:5a:17:c9:05:
78:88:e6:80:09:b5:3b:69:e2:ae:d0:c3:ea:70:25:
00:c5:67:33:82:65:6a:fe:e3:5b:c7:6b:62:03:72:
60:f4:09:68:17:0d:7a:a3:c2:8d:d9:95:dd:8e:92:
37:07:c2:d3:3a:15:85:25:2a:be:e9:b4:64:2b:1b:
31:62:55:3e:73:4a:a7:dd:66:8a:7d:9c:8d:89:e4:
ce:4a:70:ad:59:c2:d7:82:3c:09:c8:f5:95:a4:ad:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:73:36:71:E4:85:47:CD:2A:F7:79:80:FA:E6:43:FB:E3:37:8B
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b0:d7:93:c6:1b:71:27:5c:08:ff:4c:45:f6:12:40:56:5a:
9c:65:15:d4:f7:66:56:ba:51:6f:4a:d8:17:35:1a:8d:ee:2e:
db:b5:b6:91:f5:cc:57:17:fa:aa:80:bd:24:c2:c7:39:5c:a8:
e8:e2:b3:d9:11:9f:cf:cf:82:72:d7:73:dd:4b:55:af:69:28:
dd:7e:df:fa:f2:f1:03:3f:e3:4a:ca:16:df:81:32:6d:fb:9d:
df:53:8c:09:3f:79:87:34:cc:dd:c2:9f:53:2f:53:8a:bb:52:
fe:01:b9:93:a0:d4:16:94:87:4f:9a:ec:a6:35:a5:cf:89:2d:
79:53:6f:cd:05:3e:11:e5:76:d9:3c:3f:9f:48:32:0f:45:ac:
78:70:f9:38:7e:c1:63:e5:0a:ad:8e:e2:6e:7c:f1:d6:a8:78:
f7:de:fb:b7:cb:79:8d:3b:77:b3:d3:5f:01:14:f3:51:0b:fb:
c0:e8:f6:c0:3e:e1:a3:a0:95:f4:21:ba:66:cb:de:97:1d:c9:
e0:4a:5d:f8:ef:0f:ee:b9:45:25:16:b1:c5:3e:f1:d3:6e:be:
f7:7f:7a:91:75:d8:3d:f9:fe:60:f7:15:af:12:56:ee:c3:cf:
e6:ef:71:70:9b:7a:81:51:21:9d:50:a3:5a:88:65:93:bd:6d:
da:4d:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:14:27 2026 by rpki-client