Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
File: IPdQab1W78UXA4PtMcrSJGT98DA.mft (raw, json)
Hash identifier: bsfCwFSHgX3R0KexXuSB6J4C5GsW9M9At06dPkUnHlY=
Subject key identifier: F1:10:94:7F:65:72:64:21:54:DF:71:A1:9F:0F:59:A6:D7:9D:BD:9C
Authority key identifier: 20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
Certificate issuer: /CN=20f75069bd56efc5170383ed31cad22464fdf030
Certificate serial: 019FAD88D989EAE6FA8C6FD8FDF5C242C4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
Manifest number: 0786
Signing time: Wed 29 Jul 2026 11:00:54 +0000
Manifest this update: Wed 29 Jul 2026 11:00:54 +0000
Manifest next update: Thu 30 Jul 2026 11:00:54 +0000
Files and hashes: 1: B9E5JactSyIcFQ6PftrFCykRrtA.roa (hash: HKP9soP+n5+otLr1WnVLOerw0oovvQB3aHXqFrem9Bk=)
2: IPdQab1W78UXA4PtMcrSJGT98DA.crl (hash: ydU8GRlZIuK6gxwueVEJdzH520r11WT8MUfsPR9qcDc=)
3: wDCZnmWI33VgfRKA1bq6grP7-lg.roa (hash: pgV8JHt9oCiPvSmsdBWlSVXXDii3zSNwrmrq5yIIZu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:d9:89:ea:e6:fa:8c:6f:d8:fd:f5:c2:42:c4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f75069bd56efc5170383ed31cad22464fdf030
Validity
Not Before: Jul 29 11:00:54 2026 GMT
Not After : Jul 30 11:00:54 2026 GMT
Subject: CN=f110947f6572642154df71a19f0f59a6d79dbd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:1c:4a:6b:12:f6:f7:0e:97:0d:1d:d6:b3:
2b:c8:eb:8b:f7:d3:30:b2:fd:19:69:db:2b:b2:03:
22:7f:1e:06:a9:74:08:f1:86:1f:f9:da:f2:ff:01:
d9:13:1e:35:33:c4:38:85:33:13:24:9e:85:12:e9:
57:3e:f3:45:c3:4d:ef:a4:54:86:5e:b6:04:36:61:
06:9d:24:67:62:73:43:ba:6e:f2:d8:ac:df:ec:5d:
cd:83:fb:8c:03:6d:da:c7:4a:7b:bf:92:7c:4c:2e:
9e:2c:f1:af:09:ce:fb:87:79:13:d0:af:58:cb:d1:
34:fa:ff:b6:23:a1:2e:66:cb:b4:59:fe:ef:ef:16:
41:d8:43:ae:22:d5:aa:39:01:01:c4:c8:07:68:46:
90:f5:01:25:5a:fd:52:e6:66:7c:35:5e:2e:42:83:
8b:ea:66:0a:22:af:00:9a:d8:3d:99:22:e2:44:78:
ec:e3:22:0f:b3:4d:99:76:e0:f8:3d:3d:49:38:a3:
6c:d5:4c:0b:59:d9:d1:f7:de:0a:b9:ad:68:db:4d:
3a:44:61:b4:09:7c:66:ac:e4:2c:65:f0:10:6d:45:
63:15:86:9e:1a:ca:2d:39:7e:3b:f7:31:65:54:dd:
a0:55:92:80:03:c4:db:2d:f4:d7:a4:ed:29:44:bc:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:10:94:7F:65:72:64:21:54:DF:71:A1:9F:0F:59:A6:D7:9D:BD:9C
X509v3 Authority Key Identifier:
keyid:20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:de:1b:62:d0:eb:8b:cd:49:2c:0f:8e:9f:ba:a2:4c:e5:7f:
db:62:83:8f:15:11:c8:26:3e:82:7f:cf:97:e4:3f:36:2a:da:
ca:3b:43:c1:b4:7b:90:54:e6:e6:98:e7:63:9c:c4:c2:76:77:
3a:eb:82:0e:8a:62:cb:0c:71:d5:89:37:94:ff:8d:a3:c4:a9:
4a:bd:0f:6a:73:49:77:10:71:90:cc:f6:aa:d8:1b:c4:c7:8e:
a8:9e:e3:2d:3c:80:b1:f0:01:8b:0d:8a:26:21:f4:f9:91:f4:
a4:5c:16:0b:ac:3e:5b:1f:81:c7:d3:16:34:12:9e:cd:ac:c9:
ec:58:cd:3a:9e:e5:a3:72:e9:3b:3e:af:36:f5:f6:7b:8d:90:
cb:74:d5:78:62:f3:f1:02:ed:a0:96:22:c6:6f:e0:ba:83:21:
7c:38:0e:13:35:77:6d:14:66:cf:d4:e0:09:97:c4:ee:6a:4e:
a4:23:23:ab:fd:01:53:5e:85:8e:37:10:77:cd:13:de:0a:3e:
1d:ab:9d:0a:92:82:ee:a8:10:24:9e:e6:4d:3c:25:23:16:46:
d8:21:cf:53:54:94:82:0f:81:87:19:ee:8d:eb:08:8b:f1:85:
48:21:47:2c:ae:ee:5f:c1:af:8e:0c:8d:8e:f5:df:5c:ca:54:
e2:c3:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:54:18 2026 by rpki-client