Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: jwYrbRplyN/XcFHZ1dqxfW2IhPwyNQ/KGY6n9KFeQ48=
Subject key identifier: 5F:04:E8:57:C0:23:2C:35:19:83:70:65:67:6A:F3:00:49:AF:DF:12
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019D2771CE39480527B41546EFCA158AECDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 0201
Signing time: Thu 26 Mar 2026 00:01:02 +0000
Manifest this update: Thu 26 Mar 2026 00:01:02 +0000
Manifest next update: Fri 27 Mar 2026 00:01:02 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: oZCWvM4s8hzWpxoY/FB92JKEfU2buV38yyBATKoLZis=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ce:39:48:05:27:b4:15:46:ef:ca:15:8a:ec:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Mar 26 00:01:02 2026 GMT
Not After : Mar 27 00:01:02 2026 GMT
Subject: CN=5f04e857c0232c3519837065676af30049afdf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:63:81:66:aa:d8:51:76:13:48:54:09:05:
e1:67:ca:b6:63:00:e4:61:48:48:bd:d9:fe:ce:68:
86:e8:84:3c:18:05:d3:d9:18:e1:5a:d6:23:b8:82:
c5:bd:57:e9:30:33:a7:a2:b5:ab:5a:ee:c7:08:6b:
44:e7:83:17:32:5d:da:14:9f:e0:5e:59:bb:e8:1e:
0a:47:3a:ff:12:5a:1c:0f:e3:fa:01:38:5d:a7:5f:
a7:65:db:cd:50:05:60:f3:36:49:3d:6d:23:f9:66:
0e:9e:65:f7:31:e5:df:d8:64:72:14:27:26:34:4a:
23:c8:bb:aa:4c:76:1e:f7:df:7a:15:9a:c5:0b:d9:
33:8e:83:18:20:51:14:a3:f8:3c:4c:db:75:e8:80:
79:af:ce:87:c9:28:6b:1d:50:a7:55:ba:63:b7:d1:
a5:3e:ac:ed:c8:7b:b4:98:40:43:83:38:a2:3f:32:
cd:6c:88:06:29:1a:ce:13:7e:6b:20:ac:22:db:93:
8b:bb:e6:89:38:b4:09:bf:f5:9d:ce:1d:0a:04:eb:
fd:a5:12:b9:01:92:bf:e4:50:2e:1f:ee:5b:26:7b:
29:a7:ce:7f:80:ff:2d:11:d3:9e:65:6e:03:26:6b:
44:10:87:e4:74:d0:36:c5:90:4d:ad:c2:9a:27:2c:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:E8:57:C0:23:2C:35:19:83:70:65:67:6A:F3:00:49:AF:DF:12
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2a:7a:39:84:03:68:fb:97:01:ba:89:cd:a4:7f:cd:60:49:
f1:ab:32:9b:82:eb:a2:03:e3:91:52:da:07:07:98:5d:89:51:
e3:08:ca:4c:64:fd:50:ce:48:24:fd:ec:08:e0:a7:ed:e8:a6:
76:42:30:76:28:4a:31:b2:ee:65:3f:ee:f0:85:67:7c:2a:90:
07:40:70:b1:1f:31:4f:f1:2c:52:cd:53:4b:5c:60:5b:18:20:
a0:b7:cc:92:cd:86:32:8c:fc:ee:34:1e:ea:9e:85:f4:4b:a3:
0a:3a:73:de:66:8a:92:21:83:9b:6f:0c:9f:45:00:e9:c9:d3:
d6:6a:9f:f3:4d:53:2f:c8:f2:e0:9e:60:8c:a6:55:cd:cd:66:
9c:a6:1c:ac:ed:b6:9d:33:ee:20:7a:57:db:35:f9:fe:3d:71:
46:c6:2e:93:5b:3c:67:34:e9:d1:72:6a:89:e9:31:6f:ad:c2:
87:ae:2b:3e:fc:20:b5:4d:52:da:dc:0b:cb:15:9d:b1:46:e4:
f8:ee:d9:f1:3a:7c:29:3c:e2:92:7c:31:b1:09:30:0a:3f:3a:
95:8f:ea:8c:95:a9:5a:52:be:cd:67:3b:25:3e:f1:91:81:4a:
42:dc:76:ce:1f:73:00:1d:62:d3:a7:f3:42:7b:f9:2f:bf:a1:
6e:f2:1c:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncc45SAUntBVG78oViuzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh
NjU4MjkwHhcNMjYwMzI2MDAwMTAyWhcNMjYwMzI3MDAwMTAyWjAzMTEwLwYDVQQD
Eyg1ZjA0ZTg1N2MwMjMyYzM1MTk4MzcwNjU2NzZhZjMwMDQ5YWZkZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7VjgWaq2FF2E0hUCQXhZ8q2YwDk
YUhIvdn+zmiG6IQ8GAXT2RjhWtYjuILFvVfpMDOnorWrWu7HCGtE54MXMl3aFJ/g
Xlm76B4KRzr/ElocD+P6AThdp1+nZdvNUAVg8zZJPW0j+WYOnmX3MeXf2GRyFCcm
NEojyLuqTHYe9996FZrFC9kzjoMYIFEUo/g8TNt16IB5r86HyShrHVCnVbpjt9Gl
PqztyHu0mEBDgziiPzLNbIgGKRrOE35rIKwi25OLu+aJOLQJv/Wdzh0KBOv9pRK5
AZK/5FAuH+5bJnspp85/gP8tEdOeZW4DJmtEEIfkdNA2xZBNrcKaJyzUgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8E6FfAIyw1GYNwZWdq8wBJr98SMB8GA1UdIwQY
MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt
ZWQ1ZjAwYzk1MDY3LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3
LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXip6OYQD
aPuXAbqJzaR/zWBJ8asym4LrogPjkVLaBweYXYlR4wjKTGT9UM5IJP3sCOCn7eim
dkIwdihKMbLuZT/u8IVnfCqQB0BwsR8xT/EsUs1TS1xgWxggoLfMks2GMoz87jQe
6p6F9EujCjpz3maKkiGDm28Mn0UA6cnT1mqf801TL8jy4J5gjKZVzc1mnKYcrO22
nTPuIHpX2zX5/j1xRsYuk1s8ZzTp0XJqiekxb63Ch64rPvwgtU1S2twLyxWdsUbk
+O7Z8Tp8KTziknwxsQkwCj86lY/qjJWpWlK+zWc7JT7xkYFKQtx2zh9zAB1i06fz
Qnv5L7+hbvIcMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:35 2026 by rpki-client