Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: Wh8yHpMQwggSaTlvWP8IMwTSNjN3FZX7IQVT6Spxu2M=
Subject key identifier: B2:6C:19:86:C6:ED:64:1F:0A:90:DA:4E:E2:59:98:E8:66:CC:1E:48
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019D9B50A4817071ACB33CBAB5C3C884B035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 023D
Signing time: Fri 17 Apr 2026 12:00:46 +0000
Manifest this update: Fri 17 Apr 2026 12:00:46 +0000
Manifest next update: Sat 18 Apr 2026 12:00:46 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: Od1R6Y6xXVMv+XHebgmSgsSgVDm06txjBTWLZ9bGpqk=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a4:81:70:71:ac:b3:3c:ba:b5:c3:c8:84:b0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Apr 17 12:00:46 2026 GMT
Not After : Apr 18 12:00:46 2026 GMT
Subject: CN=b26c1986c6ed641f0a90da4ee25998e866cc1e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:53:13:e3:fa:76:f9:99:b1:88:89:3e:32:
73:ab:95:55:0a:ee:ee:06:d4:16:3a:4d:35:06:21:
5a:7d:df:94:13:51:8b:7d:6d:f4:d3:d5:48:10:72:
86:3e:7b:85:40:3a:e6:13:09:52:00:63:0c:26:ee:
28:78:27:2d:28:7d:95:97:7c:4d:cf:40:49:81:60:
3d:13:da:62:37:c0:f0:6c:67:7e:d4:5f:8c:b1:67:
43:7f:31:1b:d8:e3:67:9a:ce:f1:c5:ed:16:a5:f7:
4f:54:4c:7d:3e:96:f5:f7:a2:0b:0e:b4:5b:12:2d:
75:e6:08:69:86:d0:d7:1f:e9:88:a3:f1:5b:12:06:
56:d4:ea:18:e6:60:f8:f6:e3:1f:fd:63:67:3a:5f:
f6:d8:c6:fc:4a:c4:75:51:df:c5:a3:4a:dd:5a:08:
1b:8d:40:23:5b:41:38:0c:27:34:ba:3c:d6:5d:ad:
ba:55:c5:86:14:5a:b4:5d:ea:fc:ef:00:86:5b:39:
f3:66:70:a4:72:a0:6d:32:e4:f8:0e:f2:bc:97:7f:
46:93:91:e0:d7:0c:16:a1:78:6b:d8:ea:c3:62:04:
ec:6a:78:d6:b1:43:b4:b8:66:4b:78:f7:64:42:ec:
e4:01:06:85:36:49:b4:f1:f6:6f:d5:a6:37:f8:84:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6C:19:86:C6:ED:64:1F:0A:90:DA:4E:E2:59:98:E8:66:CC:1E:48
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:80:26:c2:24:be:fe:4c:b7:6e:d2:ec:5a:4c:8b:91:42:d1:
39:cc:20:62:84:58:c2:24:73:d5:e8:13:7d:6e:ee:d8:db:3a:
28:0f:2f:de:c5:a4:4e:13:11:08:d3:ef:fc:72:89:a2:1c:96:
7a:61:0d:06:47:c8:6e:ba:40:aa:60:7a:05:5e:db:34:63:7a:
11:97:60:ff:b0:35:4c:ea:06:29:be:3a:06:a6:16:c3:1d:a4:
b2:ce:d1:e5:75:33:cb:20:00:16:f1:e5:f5:a9:b2:42:e4:9c:
8d:b2:45:e1:a5:63:c3:6f:3e:bc:7f:0d:d6:2f:84:74:62:b6:
b6:72:b8:13:08:16:25:6a:d8:60:22:16:ba:f4:57:68:3e:c2:
1c:ea:01:98:85:f4:17:31:9d:aa:33:fb:20:da:00:f5:a5:50:
6f:1a:da:7a:dd:b2:7b:2a:e1:fd:d6:90:b3:d4:a5:36:05:e5:
cf:5b:55:9f:9d:fd:e4:14:77:bf:e4:24:ae:61:74:02:97:8e:
52:65:fa:79:81:1a:8c:b1:0c:14:6a:8c:ff:31:bc:f9:fa:7c:
b9:1a:26:53:4f:35:b1:c5:e1:ec:28:d9:83:c8:c8:db:9d:e7:
71:10:1f:67:7c:6c:1e:ba:f8:03:43:2c:d1:28:28:f0:4b:90:
f3:c8:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:56:23 2026 by rpki-client