Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
File: IKDFQA4CP5P1GOQwBMM7x50vayE.mft (raw, json)
Hash identifier: ROA/wd+aOwF2zCLYpRW2xPo0w1WOuwQx8DMF6ok2xvM=
Subject key identifier: 3B:6C:96:A5:70:DE:4A:40:D9:11:06:DB:75:26:CF:9D:A5:4A:BF:2B
Authority key identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
Certificate issuer: /CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Certificate serial: 019FA8D027DD373FEB68CF100782E7043F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 13:00:41 +0000
Manifest this update: Tue 28 Jul 2026 13:00:41 +0000
Manifest next update: Wed 29 Jul 2026 13:00:41 +0000
Files and hashes: 1: 9Czc8pDz2K4dQ7wCr5MrteuEqPw.asa (hash: cP6vlJtBeLHClXQjIgZNKEs/XJ829Hz7hO1z+cclK6I=)
2: C79YUpU2iklV_OJjs4h8ac-OjrQ.roa (hash: //CGGQm4W2A3kMycLE3Ro2hRaxk4J3N4m94O7KPhors=)
3: IKDFQA4CP5P1GOQwBMM7x50vayE.crl (hash: sl35zi6wzTBvAT2VYNxvhRqXWQ1x/eT7WiV3sG//+kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:27:dd:37:3f:eb:68:cf:10:07:82:e7:04:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Validity
Not Before: Jul 28 13:00:41 2026 GMT
Not After : Jul 29 13:00:41 2026 GMT
Subject: CN=3b6c96a570de4a40d91106db7526cf9da54abf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:57:24:8e:1b:c4:c1:aa:c9:5a:fc:57:4c:
8d:d7:ad:44:df:6e:ce:21:85:60:57:dc:8b:a9:88:
77:bd:5e:14:90:c3:f6:b8:20:17:d2:83:34:8d:ed:
80:af:0f:e0:59:65:dc:28:a5:85:f4:93:a5:05:ab:
10:05:cd:d4:16:f6:c2:7f:20:91:90:cb:ca:61:d3:
93:66:92:1f:73:b1:f0:e1:43:93:59:78:15:2a:44:
b9:ad:60:d1:66:8e:9d:65:2f:44:05:41:df:82:cf:
bc:b0:46:20:17:73:6c:75:40:d3:82:a9:0c:da:a0:
d1:7a:ac:a2:61:10:39:d9:f9:37:f4:be:78:f6:ee:
2e:7e:8d:99:93:cd:cf:92:d2:ef:3b:c4:63:ad:59:
14:67:92:09:93:98:0b:3d:62:48:d9:f7:f3:8f:08:
d6:b7:55:44:44:4c:f4:21:10:ba:bb:75:7c:65:f2:
26:1d:09:44:20:e3:05:0c:9a:52:3b:4b:ef:9c:12:
de:7f:91:97:40:5c:2e:11:1f:24:68:23:33:2e:bf:
31:e6:f7:a2:a7:de:15:84:d7:d1:06:94:29:11:1d:
82:a8:73:93:3a:83:6b:cb:82:14:0b:0c:55:ca:91:
67:14:ac:e9:54:cd:ce:e8:c5:f7:97:98:33:cc:74:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:96:A5:70:DE:4A:40:D9:11:06:DB:75:26:CF:9D:A5:4A:BF:2B
X509v3 Authority Key Identifier:
keyid:20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:84:38:87:36:c1:fb:f1:e3:51:43:01:1d:3d:35:3f:42:de:
68:68:02:56:70:af:84:aa:51:69:31:ac:88:91:51:88:51:e0:
7b:2a:b8:fa:09:7f:fd:e2:8d:f9:ef:72:20:6c:f2:ed:0b:eb:
ea:86:0b:7c:0c:6b:91:72:0c:d6:95:13:9a:e2:60:56:73:bd:
61:f0:15:d0:75:48:d7:f9:ec:12:d5:70:bd:41:ca:e7:ad:b9:
b6:c4:50:7c:82:37:46:60:8f:f9:e2:e4:be:56:3f:3b:e4:95:
83:6b:63:ab:0b:1c:e7:91:af:f6:89:b3:6a:38:c5:38:f6:0c:
0e:15:f8:1a:b9:7e:32:a0:d5:2b:12:a7:8f:ac:04:47:b1:0e:
16:70:8d:40:6f:84:c3:46:5a:9f:95:da:04:bd:1d:cd:08:96:
3d:eb:a2:62:40:60:be:13:32:4c:d6:5a:f6:9c:5c:dd:67:32:
06:cf:b2:71:da:55:d8:52:e2:a4:1a:0c:9e:14:a3:dc:d9:9f:
47:b4:ee:99:e4:3e:5b:cf:60:1f:99:7e:3a:61:20:4c:2a:c5:
c0:24:39:14:52:54:fd:20:be:6c:c6:49:ee:6a:56:67:a5:0c:
95:b6:46:f8:a7:6e:99:44:27:5f:ab:27:4e:af:c7:e5:83:01:
e9:7a:d7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:51 2026 by rpki-client