Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
File: 20IFnOKR1Jpmkgcxx2faVj7yESQ.mft (raw, json)
Hash identifier: JXE3gZaF7CQMN7lr5xUuS0V33pd7/aRRXSjVtbb5fAU=
Subject key identifier: 47:FC:03:2A:E2:78:3E:BE:E8:65:79:D0:01:52:5D:93:DB:A6:F2:AC
Authority key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
Certificate issuer: /CN=db42059ce291d49a66920731c767da563ef21124
Certificate serial: 01A0CE23C039C5C24C5C394FA994AD49E79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
Manifest number: 0D67
Signing time: Wed 23 Sep 2026 12:00:44 +0000
Manifest this update: Wed 23 Sep 2026 12:00:44 +0000
Manifest next update: Thu 24 Sep 2026 12:00:44 +0000
Files and hashes: 1: 20IFnOKR1Jpmkgcxx2faVj7yESQ.crl (hash: 2t1sLbvlR0lqT9yVYeWLwHjqJIW74zLb6p3XEEz7hw8=)
2: K_G3q1oHoFkLaOnMyEVLIcn7Qmw.roa (hash: /NaxyStNTlcpIpTarZjjR+9kQ6m4FlTTRFr5N6+rcrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:c0:39:c5:c2:4c:5c:39:4f:a9:94:ad:49:e7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db42059ce291d49a66920731c767da563ef21124
Validity
Not Before: Sep 23 12:00:44 2026 GMT
Not After : Sep 24 12:00:44 2026 GMT
Subject: CN=47fc032ae2783ebee86579d001525d93dba6f2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:c5:ba:bd:6d:a9:d6:29:d6:cc:bd:f8:cc:
5b:e0:63:88:ee:34:58:13:fd:3e:45:54:df:eb:52:
45:11:94:a3:4b:97:22:e9:bd:ae:ce:8a:fc:b2:58:
4f:ba:06:ec:28:73:73:7b:50:eb:2c:b5:1b:25:22:
12:91:7e:40:dd:62:cd:92:f5:e5:9a:49:6e:b8:2e:
8b:44:dc:2f:ed:19:d5:01:dd:1c:8b:cc:d7:83:5a:
0b:fd:b6:58:86:7f:e0:aa:aa:ba:7d:32:8a:88:cd:
99:14:30:cb:f8:51:4c:8e:0c:e4:ca:7a:68:d9:49:
09:15:a1:db:43:58:d0:3d:cb:18:f0:8b:ec:90:60:
66:d8:ca:f8:d1:2b:f3:83:60:6e:4d:54:44:19:81:
d2:1b:95:c1:2e:fe:f9:df:73:78:fa:b1:31:ce:17:
0e:90:ff:75:18:b7:db:3a:f6:f8:35:d6:07:b3:ed:
fc:5d:ad:47:3e:da:53:f9:39:c8:45:5a:71:d4:54:
65:08:7b:99:c6:d2:5a:ce:ee:f6:7d:fb:a8:46:8d:
1a:fd:14:c2:ba:06:98:08:4e:b7:15:15:d1:6b:02:
81:7f:9d:d6:09:73:7d:75:c9:23:6d:e0:0b:7b:ef:
18:6f:1d:04:43:6e:cc:d1:9b:98:cd:f9:46:3a:d3:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:03:2A:E2:78:3E:BE:E8:65:79:D0:01:52:5D:93:DB:A6:F2:AC
X509v3 Authority Key Identifier:
keyid:DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5a:5b:1f:33:b3:29:15:62:b6:7e:9a:ce:5d:cb:da:3f:16:
8a:09:39:a5:d5:28:42:93:65:01:5b:32:47:69:fa:6e:7e:57:
ee:5a:f3:96:1d:01:fe:37:b4:60:f8:82:10:66:fd:f3:81:ec:
29:19:6b:9a:e5:01:60:06:b9:4a:fd:5a:7b:47:d3:ae:eb:83:
f9:7e:39:3b:b0:0a:1a:5c:83:e6:a0:33:ae:e6:3b:ca:9a:fd:
9f:12:80:2b:79:81:45:4a:67:f3:26:f5:f3:4f:aa:d5:e8:49:
9d:12:09:3a:dc:70:e5:e6:3a:f0:10:f5:26:82:66:5f:83:24:
de:e4:e1:f0:55:70:25:34:7c:32:7a:22:7b:c8:6c:a2:75:bf:
1c:41:01:57:b1:fa:77:77:1d:20:bc:0b:cd:0f:b4:73:86:a1:
bd:9c:12:42:a7:20:98:4d:b0:ee:1e:47:e2:17:34:ac:95:af:
10:96:45:d7:03:83:22:43:c5:7a:55:a1:ab:10:37:dd:af:7c:
83:9c:bd:29:d6:dd:ac:e6:25:1b:c3:f0:96:f8:44:63:9a:91:
d2:7f:ff:46:7b:12:b0:2a:e9:1b:e7:e7:b6:1b:82:64:b3:33:
42:24:01:c1:74:61:1d:b8:b0:71:6b:21:0f:86:6c:5a:e8:ec:
99:bf:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:56:51 2026 by rpki-client