Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: tiWOHTjYH+aPWckhPswyFosnZVJdIQ5m8/pDQqKFzLQ=
Subject key identifier: ED:93:EF:94:B7:DE:75:27:4D:58:F0:96:F7:89:AE:BA:01:93:29:32
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019CADC80E62755F0297FF5917421032860F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 01C2
Signing time: Mon 02 Mar 2026 09:01:35 +0000
Manifest this update: Mon 02 Mar 2026 09:01:35 +0000
Manifest next update: Tue 03 Mar 2026 09:01:35 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: EyQQZH4vzMCM33fNKV6M0/ooMN5jyzMBSxElDDNHPaU=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:0e:62:75:5f:02:97:ff:59:17:42:10:32:86:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Mar 2 09:01:35 2026 GMT
Not After : Mar 3 09:01:35 2026 GMT
Subject: CN=ed93ef94b7de75274d58f096f789aeba01932932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:19:dd:fc:9d:fa:03:93:12:a9:91:38:72:
03:e1:f2:d1:68:53:7c:8e:b5:bd:13:5f:f8:6b:37:
0c:67:1a:8d:04:58:c9:d1:65:04:c5:0b:3a:7d:98:
09:a2:4c:c2:49:0b:46:4d:dc:6b:23:3e:a8:6e:5d:
37:bf:cc:9a:6a:13:f1:52:7d:dc:67:1f:b8:7d:49:
c1:fa:a9:40:d5:3f:5e:a8:b2:1a:17:39:30:1f:25:
fb:81:68:26:cf:d2:15:c0:b5:32:22:ae:1d:8d:33:
1b:cb:cb:84:e6:1b:7a:58:df:63:21:43:54:39:9f:
33:f8:c6:9a:6d:9b:8c:69:a5:23:09:ce:fc:c6:f2:
49:a6:90:72:6d:bf:83:ab:9a:97:0a:e9:93:4a:df:
e6:6d:97:dd:c1:dc:20:c3:cc:ae:9c:0b:0e:f7:b4:
18:b0:80:ab:0f:a5:35:e4:99:51:e9:12:40:8d:be:
6d:96:c7:66:78:e4:2a:67:90:dd:bf:34:9d:45:15:
be:36:54:6a:1a:30:cb:3a:8a:71:c3:15:5e:62:1e:
6a:82:09:9c:02:f7:d8:d8:c7:77:43:0e:c3:48:94:
5e:ae:de:fc:90:c6:0e:9c:11:2f:b1:05:bf:ba:54:
73:77:5f:69:cb:a1:e7:c8:71:75:97:04:59:61:e7:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:93:EF:94:B7:DE:75:27:4D:58:F0:96:F7:89:AE:BA:01:93:29:32
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3f:2b:f7:2c:d3:ce:20:21:3b:7e:4e:43:d6:db:c7:12:bc:
84:32:79:e8:d8:94:cb:a2:a1:1e:33:cc:4c:2d:a8:e5:ce:a2:
fe:79:e4:86:d9:d9:56:79:f9:65:25:1d:5b:c9:91:4d:2d:3f:
d5:01:f7:37:40:97:94:88:fd:3a:63:c1:ad:e8:0d:4c:70:75:
1f:99:d8:39:60:46:12:26:bb:4d:88:f3:42:fe:83:5e:a0:8c:
03:4e:b1:08:61:d1:c6:63:6e:28:64:3a:8c:1f:9d:6d:de:95:
4c:19:ca:f1:3b:73:c6:4d:de:68:de:80:c3:b1:ba:a9:d7:14:
bb:7d:f8:10:d3:a0:5f:68:b6:16:1f:9e:40:a5:04:30:9a:5e:
2f:5a:ec:71:9d:1c:bb:0f:82:36:93:77:82:a7:ce:6b:72:a8:
df:7a:e7:b6:50:1b:63:f4:c8:fa:28:4f:de:e6:8e:71:d5:bb:
e4:b3:30:a3:16:b4:95:49:68:57:68:69:bf:9f:82:4a:90:88:
0e:34:6e:44:60:cf:17:ce:85:79:37:f8:1b:02:f4:2e:64:eb:
d8:d0:2f:aa:0a:17:24:71:dc:59:7e:dd:56:aa:6d:5c:09:53:
af:6d:eb:f3:e1:9a:26:94:37:54:19:5e:ee:d9:ff:7e:f5:49:
08:8d:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:51 2026 by rpki-client