Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: 2gRzQaoWKuSGSWWoMIr/9Pyg+jE/oikp24vZcYKmWIM=
Subject key identifier: 07:21:ED:DC:E3:F4:B4:E8:31:D7:2C:DF:D2:35:07:19:CC:64:FB:E2
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 01A10DDF3C87BA63308C32BB632D1BB799B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 0406
Signing time: Mon 05 Oct 2026 21:01:36 +0000
Manifest this update: Mon 05 Oct 2026 21:01:36 +0000
Manifest next update: Tue 06 Oct 2026 21:01:36 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: HrRI9F26tEMFUWv/8AkDaI8xO4n8V22MY1Az+lS28Vc=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:df:3c:87:ba:63:30:8c:32:bb:63:2d:1b:b7:99:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Oct 5 21:01:36 2026 GMT
Not After : Oct 6 21:01:36 2026 GMT
Subject: CN=0721eddce3f4b4e831d72cdfd2350719cc64fbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:28:b7:7c:99:ed:6a:7e:6d:14:6a:60:d2:
c8:17:4d:b6:e5:3d:45:52:76:6e:aa:4a:bc:17:3b:
8f:06:c5:51:63:e1:d6:c3:d4:8b:e0:f7:65:7d:19:
31:18:11:4d:73:70:76:e9:1a:a4:79:8b:02:4e:6d:
0f:2a:cd:f8:23:61:45:d1:f8:4b:94:76:b3:40:ff:
e0:14:70:a2:54:c4:42:24:9e:e1:35:9e:b8:62:fe:
e6:1f:8c:b0:1b:43:cb:b0:42:b9:ca:f1:1b:3e:dc:
a6:25:0a:83:15:ce:f3:10:4d:9e:7e:2e:f3:2f:6c:
81:3c:90:ea:8c:95:d1:03:9a:73:22:d2:78:b6:8f:
00:50:c0:85:28:d0:7f:e6:07:6b:f1:30:c5:e3:17:
54:5f:ad:ca:3b:97:4c:ae:ee:a6:18:7a:c5:d2:0e:
d9:33:e5:5a:f9:80:82:10:7c:a8:84:0b:33:71:65:
91:8a:6e:bb:06:cc:19:af:51:63:a6:b7:3b:d9:06:
27:51:96:2f:3f:d1:92:6c:34:a1:73:e2:da:c0:1c:
ab:9b:79:45:5b:2f:9c:7e:ae:2e:cf:0a:76:a2:8a:
5f:4e:d9:0e:db:6a:4d:48:0b:58:49:2b:5c:2c:89:
09:1b:b4:f2:9c:4b:10:84:75:10:2d:3c:c8:ed:9c:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:ED:DC:E3:F4:B4:E8:31:D7:2C:DF:D2:35:07:19:CC:64:FB:E2
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3b:07:ee:89:70:d5:a4:28:b8:8e:46:59:12:69:dd:ac:32:
d2:60:d3:68:49:5a:3c:26:c3:8d:55:1f:b2:60:8b:cc:2f:fd:
71:d1:ec:e8:1e:a9:2d:99:97:cf:7d:47:9a:50:79:00:9d:d0:
6e:a2:f0:d3:0b:60:e1:58:89:3c:bd:df:ad:99:f3:6d:34:09:
3b:19:3a:58:b8:b9:9b:2e:f8:bc:8a:19:0e:fd:5e:ef:3b:bd:
8b:4d:1d:7b:36:56:14:95:6e:2c:4b:21:4c:81:2b:4f:01:02:
ae:52:6f:7e:75:f2:53:d0:63:da:97:1b:92:cc:bd:ce:6a:10:
12:05:d3:33:cc:9e:ac:67:3d:5a:50:b7:35:04:a8:11:98:8f:
a0:2a:65:41:c7:31:bd:6b:50:72:2f:51:0d:56:96:fa:23:03:
f4:75:8c:b5:48:08:42:3c:13:47:fa:e7:5d:c9:92:ec:f4:84:
5b:07:16:36:ae:27:4a:a7:9b:11:ce:69:38:8c:e0:31:bb:36:
19:76:ea:3d:91:d2:77:5c:a1:f6:5b:8b:31:41:98:fd:e5:b0:
04:ec:1b:f8:f8:f3:a0:67:79:a8:db:5e:c7:f2:e1:42:4b:7d:
48:96:3d:e8:bd:57:6d:a4:06:ac:da:98:d8:11:6b:b3:03:fd:
52:80:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:17:44 2026 by rpki-client