Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: 5Xyg/rXSmS6J6SnXQ3tRTQCqmgMgxUvgb5EC1R07vrA=
Subject key identifier: 15:EF:FD:F3:A1:6A:A9:3A:93:AE:32:E3:36:FD:6C:52:24:B9:E1:2C
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019FAA88035C10DFFA8FCD8F917969642F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 034E
Signing time: Tue 28 Jul 2026 21:01:08 +0000
Manifest this update: Tue 28 Jul 2026 21:01:08 +0000
Manifest next update: Wed 29 Jul 2026 21:01:08 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: 2ujyeAZ4i4zRD0SE4gSP0bigbGAAev/AkORikcPk8bQ=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:03:5c:10:df:fa:8f:cd:8f:91:79:69:64:2f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Jul 28 21:01:08 2026 GMT
Not After : Jul 29 21:01:08 2026 GMT
Subject: CN=15effdf3a16aa93a93ae32e336fd6c5224b9e12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:ae:ee:8f:95:1a:58:91:f1:76:9c:8d:2e:
b7:65:94:50:eb:33:79:31:72:38:62:3c:50:15:eb:
a5:0f:7e:52:bb:cd:88:70:2d:47:73:ca:f2:69:ce:
9e:11:ed:cc:d5:de:dc:99:53:8e:7b:ea:bb:3e:ac:
e5:1a:97:d4:32:6a:49:23:c0:47:3a:a5:1b:d1:2b:
da:23:eb:dc:6c:e4:66:86:24:36:42:3a:d2:9c:1b:
5e:8c:d7:ca:9e:27:f8:e9:96:43:ab:60:04:bf:e6:
4d:b9:7c:2c:6d:eb:7c:8d:70:eb:25:fe:28:70:13:
11:8d:e4:9e:7f:10:d8:5d:9d:60:1b:35:0f:ab:97:
18:b5:b1:df:08:91:3b:aa:43:37:08:ab:20:9b:03:
39:e4:1f:74:9b:2c:bc:26:b5:3b:d1:25:de:7f:15:
d0:42:98:7d:ef:59:7b:ed:7c:d8:76:00:a6:92:ac:
78:08:11:5c:6c:9a:1c:bc:50:c8:91:b3:2e:40:c4:
f4:05:01:52:32:99:63:2c:b0:a2:b4:fc:82:f6:a6:
ca:f7:11:a0:92:13:c3:63:f9:7e:e0:3b:5e:52:c7:
7a:aa:c5:6f:38:44:8d:3c:0f:1b:8c:41:af:74:2b:
6a:b2:2b:8b:da:c2:e9:c2:96:8f:a7:44:14:80:5f:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:FD:F3:A1:6A:A9:3A:93:AE:32:E3:36:FD:6C:52:24:B9:E1:2C
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:da:35:79:bb:a6:19:e4:6a:b4:ed:a2:11:df:04:8a:37:a5:
fe:cd:8e:f0:47:7c:84:fd:36:b7:5e:b1:7d:40:37:1f:97:f1:
81:74:dd:67:74:b4:e1:54:8e:ba:6e:f8:6e:54:56:13:19:95:
b9:cd:e1:1f:51:c2:c1:9b:41:b6:4d:d7:9d:c3:9f:6b:55:92:
73:73:df:21:5a:5c:c0:a6:b7:f8:34:78:44:af:d1:bb:ea:27:
f3:97:31:2a:7d:92:07:64:02:e3:aa:da:2f:7a:52:56:bf:b5:
04:26:09:0a:75:c7:1c:4d:9e:67:44:38:4a:0d:4f:2c:42:44:
63:27:48:2a:05:ca:39:d8:f2:19:56:7a:1c:00:02:ff:5c:5f:
96:9c:f9:83:22:d4:ea:2d:3d:a1:18:d7:1f:b2:01:d6:b9:b8:
54:a6:58:08:e1:12:82:85:5a:bc:3a:21:87:4f:44:1d:9c:23:
80:04:fd:fa:b9:d1:be:e8:af:3c:f4:ec:42:4e:84:00:ca:2d:
ba:7d:d1:86:e9:92:ce:15:ce:9e:83:ec:b9:53:a7:ae:3a:55:
12:65:19:82:ae:ae:6c:0c:cf:7a:b2:66:ac:06:fa:39:c9:3b:
ca:13:d6:66:d2:c5:5d:21:c8:b5:e2:e0:a1:16:6e:3e:10:c4:
16:73:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:43 2026 by rpki-client