Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
File: IPdQab1W78UXA4PtMcrSJGT98DA.mft (raw, json)
Hash identifier: bohucAxJCvQOs+xgGHYoQvWSlkP3Gr93Tll0nhhf7JI=
Subject key identifier: C7:48:70:A0:C7:D3:7B:D0:36:40:F3:C3:0C:EC:46:3D:79:52:D7:52
Authority key identifier: 20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
Certificate issuer: /CN=20f75069bd56efc5170383ed31cad22464fdf030
Certificate serial: 01A0D501DA573B7CA03AE411AEDA6E741A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
Manifest number: 081F
Signing time: Thu 24 Sep 2026 20:01:03 +0000
Manifest this update: Thu 24 Sep 2026 20:01:03 +0000
Manifest next update: Fri 25 Sep 2026 20:01:03 +0000
Files and hashes: 1: B9E5JactSyIcFQ6PftrFCykRrtA.roa (hash: HKP9soP+n5+otLr1WnVLOerw0oovvQB3aHXqFrem9Bk=)
2: IPdQab1W78UXA4PtMcrSJGT98DA.crl (hash: gVh/WG0t1oqdxUURvipHONPIjMoC1bA6tmXhJDswWAo=)
3: wDCZnmWI33VgfRKA1bq6grP7-lg.roa (hash: pgV8JHt9oCiPvSmsdBWlSVXXDii3zSNwrmrq5yIIZu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:da:57:3b:7c:a0:3a:e4:11:ae:da:6e:74:1a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f75069bd56efc5170383ed31cad22464fdf030
Validity
Not Before: Sep 24 20:01:03 2026 GMT
Not After : Sep 25 20:01:03 2026 GMT
Subject: CN=c74870a0c7d37bd03640f3c30cec463d7952d752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:be:93:c5:39:9c:d4:8c:d8:2e:c7:f2:03:
20:9c:e7:2e:3b:cc:fc:65:2b:67:bc:4f:0d:7e:7a:
c4:05:31:13:a6:ce:ab:c1:6e:f1:81:11:05:de:60:
2f:0c:74:8c:bc:3d:bb:04:41:76:a6:ed:e5:1e:ce:
4e:75:a8:2a:e2:c0:85:d8:59:49:c7:33:ae:33:f1:
d4:6d:7f:9f:b0:37:85:40:d4:fc:6e:2e:09:4c:6c:
c4:b5:b9:16:7a:9b:c4:75:b9:e9:59:9f:c1:70:e8:
34:65:dd:c9:59:2c:9b:fe:2c:9a:4e:d0:55:04:c6:
6b:17:38:11:e4:16:86:f2:01:52:ba:f4:49:dc:81:
11:ee:24:4f:c7:b7:be:f2:83:10:14:0a:69:9a:9b:
67:ed:16:16:bd:92:a4:da:35:6b:fa:6b:e4:c8:83:
ea:5d:1e:f5:c1:21:76:90:b2:a7:19:93:06:4f:47:
03:ab:3a:04:a7:01:14:18:1a:d6:f4:7f:df:7e:a6:
a8:98:f7:c7:31:3e:7c:ef:e9:3a:6e:f4:5c:c8:31:
2f:08:87:84:51:c2:91:f6:3f:95:52:b0:6b:37:75:
1c:86:78:08:55:df:f1:46:d4:43:f4:3c:1b:7f:bf:
e6:76:a0:d7:8e:10:77:fb:6e:d7:88:6a:cf:5d:61:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:70:A0:C7:D3:7B:D0:36:40:F3:C3:0C:EC:46:3D:79:52:D7:52
X509v3 Authority Key Identifier:
keyid:20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:78:fb:30:4a:38:d4:fa:99:9e:d6:f6:f1:b4:87:2d:0f:60:
5e:e7:a1:00:99:29:96:a7:65:2e:82:85:66:59:be:8f:fa:b3:
fd:e5:bf:e0:e6:be:e9:3f:70:a7:cb:17:bf:59:b7:75:06:81:
3e:b2:ab:2c:b3:f3:4f:92:d8:1e:32:5c:7b:6a:eb:de:07:1d:
97:e1:85:9f:73:2e:fc:f6:a0:73:36:cc:44:94:1c:d2:68:bf:
ca:ae:4d:8b:86:aa:17:e5:f8:5b:56:25:18:39:bd:87:3d:6a:
97:4b:23:ff:6b:96:dc:23:ad:00:ab:3a:f5:c1:95:b8:ce:4a:
17:aa:a5:3d:01:b5:b8:90:db:59:39:f7:cf:3d:35:54:21:73:
a9:de:de:d3:0d:04:05:b2:dc:ea:38:ea:6f:a0:52:9a:cd:b1:
4b:7a:11:ce:26:85:6d:4d:a6:cc:63:a6:0f:43:61:27:22:34:
e5:d0:2d:92:8a:8d:be:09:87:a3:cd:98:43:e0:74:f6:6c:0b:
27:19:27:6a:6d:d4:50:9e:7e:fb:24:23:88:17:74:64:64:31:
08:94:c8:03:76:d4:5b:f8:4c:65:16:0f:31:4e:55:00:42:45:
66:21:7e:4e:b5:48:60:ab:6d:26:1b:ac:09:5a:2e:d8:88:e8:
7f:34:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:44:59 2026 by rpki-client