Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: P8GLoXAFhVrLr0bIsCULn6h2Y5GbytQN06RAXBspvxg=
Subject key identifier: FE:03:67:B0:6C:8C:1D:79:4E:71:40:FF:44:68:26:6A:36:2F:31:09
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019EC2C98E53DEFDF44CB2DA6206A0893BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 02D6
Signing time: Sat 13 Jun 2026 21:00:49 +0000
Manifest this update: Sat 13 Jun 2026 21:00:49 +0000
Manifest next update: Sun 14 Jun 2026 21:00:49 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: wPl75BQu/XHe8rx5EmwlJGane/5Bp2+8tvG9O3nQ/sI=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:8e:53:de:fd:f4:4c:b2:da:62:06:a0:89:3b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Jun 13 21:00:49 2026 GMT
Not After : Jun 14 21:00:49 2026 GMT
Subject: CN=fe0367b06c8c1d794e7140ff4468266a362f3109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:cb:36:18:07:90:20:0b:ba:eb:42:0b:14:
d6:2b:f6:06:cc:56:6b:bc:d9:1b:9c:19:48:12:c3:
ec:88:38:13:22:df:15:c8:33:2d:04:5b:41:0a:75:
03:17:32:49:13:f3:b4:bc:dc:c0:ac:61:43:0b:55:
73:85:ef:5d:6c:0b:6e:d4:90:02:e5:91:f0:59:7d:
df:05:85:87:c2:fa:bc:a9:44:be:67:50:c8:24:d9:
6d:f4:05:07:3c:2a:cb:6a:17:52:c0:8c:dc:ab:53:
0b:cb:fa:da:8a:99:d6:f4:9d:ab:2d:f2:c6:d3:77:
00:43:d5:dc:f3:70:dd:de:c1:c9:5f:c4:bd:37:a0:
b0:5e:6c:10:5c:70:a9:bd:6f:f3:74:33:e2:10:e2:
07:18:71:55:21:59:7c:2f:7d:96:f6:f4:3a:9c:78:
fa:e3:d9:c3:7f:c8:58:9e:bf:22:5f:8a:d8:ca:00:
b1:21:7f:f1:3b:8a:2b:bf:43:0c:2f:10:9e:47:3f:
ce:62:bc:c6:af:56:ce:d4:5e:d8:4c:c5:e0:a4:48:
39:eb:35:8f:38:09:b6:6f:16:81:c5:4d:17:c0:69:
67:fc:5c:74:67:95:1c:d0:6b:5b:c4:dc:36:30:eb:
9e:90:a7:a9:96:51:38:8f:e4:7e:94:83:97:b8:5a:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:67:B0:6C:8C:1D:79:4E:71:40:FF:44:68:26:6A:36:2F:31:09
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c7:61:02:a9:62:73:10:76:c0:c9:9a:ae:83:79:6d:77:5f:
39:61:c3:22:69:dc:e8:24:e1:27:40:77:1d:af:83:e4:dd:1d:
6e:db:38:53:d9:ca:f4:93:a2:c7:88:21:3f:3a:4c:41:c2:7c:
87:8c:39:ef:27:ee:87:a7:db:c8:0c:1a:24:12:1a:c8:e7:07:
d6:c9:9f:8c:a6:5c:fb:d2:f6:ee:fb:4b:a0:ba:66:5c:07:aa:
60:bf:48:dc:a3:33:6f:b1:f6:51:44:8d:96:8a:9f:09:e7:69:
38:f7:da:52:41:3a:2d:45:e2:a6:7f:18:6d:e1:7f:40:98:47:
e5:d1:b5:a8:68:67:fb:bf:a0:fc:4b:2b:c3:ec:96:2b:68:15:
3c:2c:00:f4:ba:dc:5c:b3:47:63:4b:61:ba:84:3b:b6:77:2e:
83:5f:13:fd:ad:76:2b:35:46:c4:2a:df:e3:a3:34:ea:00:07:
7a:f7:86:a6:35:4c:c4:e2:d2:40:62:d7:61:dc:d2:9f:43:2f:
7a:54:5c:19:59:c9:d0:4a:88:0b:98:3f:17:f2:d4:fe:87:cc:
78:52:10:fc:67:65:69:f7:6c:2b:0f:3f:97:cc:45:e6:40:f9:
9b:2a:47:b3:9e:e0:b2:2e:b6:7f:6c:f9:5f:ff:34:ef:5d:69:
ed:92:c9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:29:54 2026 by rpki-client