Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: RQvp6t/pqVlfkbSGDrf7eDGVNts1IuhbDrt6l1XmX1I=
Subject key identifier: 3C:01:6D:5B:6B:88:0E:D5:CB:47:A2:1D:7F:5F:95:BF:25:68:15:0F
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 01A0D9BB5A72BE7949BAB372C0DC0418D3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 03EB
Signing time: Fri 25 Sep 2026 18:02:09 +0000
Manifest this update: Fri 25 Sep 2026 18:02:09 +0000
Manifest next update: Sat 26 Sep 2026 18:02:09 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: CnKBaBwchebKudVjaRriSM7xTOhoMie6sCcUwm8GeEU=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:5a:72:be:79:49:ba:b3:72:c0:dc:04:18:d3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Sep 25 18:02:09 2026 GMT
Not After : Sep 26 18:02:09 2026 GMT
Subject: CN=3c016d5b6b880ed5cb47a21d7f5f95bf2568150f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:0d:51:4f:f6:2d:15:86:8b:53:e5:90:4a:
b8:4a:e9:32:b8:1c:05:b0:b0:17:1f:42:c8:de:c2:
95:1a:00:19:1f:ff:9a:24:4c:bf:19:59:9b:02:e0:
be:c5:c0:d3:50:01:c8:46:4b:59:d9:85:88:04:c0:
0f:66:ca:38:e4:bc:4f:40:7f:67:0f:77:f2:a7:dd:
13:a6:02:0b:26:fa:7f:10:16:ce:d7:a0:7a:48:98:
b6:ca:4c:7b:a2:4f:49:cb:37:42:ce:6e:a7:82:be:
83:18:a2:b7:97:01:bc:45:bd:25:9d:47:97:0f:1e:
ab:9f:16:17:bc:16:5c:2c:9e:27:a8:f5:f2:7a:a6:
50:95:bd:67:41:ce:f7:a5:2f:e1:c5:46:83:e1:30:
3f:8f:58:4d:a2:2f:64:a5:4f:70:20:d9:20:cf:0e:
bc:5e:60:50:66:53:2f:9a:09:f5:ee:05:e8:f9:cf:
3b:1f:ca:ff:af:f9:ca:09:34:eb:05:8f:8e:4f:1b:
3a:ef:97:54:51:51:64:3b:a2:42:2e:76:b2:cf:d0:
1f:38:41:aa:fd:63:6a:97:ed:90:90:a8:b8:b3:4c:
a1:8c:ae:ac:92:48:81:f5:92:5c:db:30:bc:9c:f0:
db:14:bb:35:84:e2:0d:05:22:59:57:5d:9e:0a:2e:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:01:6D:5B:6B:88:0E:D5:CB:47:A2:1D:7F:5F:95:BF:25:68:15:0F
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:77:30:f7:02:c0:f8:86:53:76:d7:85:cd:83:aa:b1:44:eb:
d8:d9:91:2b:27:f8:01:c7:37:a5:f8:27:9a:da:ef:72:a0:8f:
a0:a9:ed:0d:90:a1:53:7e:4e:81:95:13:e7:c6:3d:8d:ba:54:
67:39:41:bc:92:a0:84:5e:e9:b4:e1:6e:d4:31:e1:5c:ba:e0:
20:26:11:13:14:38:2d:12:eb:1d:36:da:0a:88:6d:0f:47:02:
f3:45:f0:f1:46:e5:23:cc:2a:e6:e9:20:0f:24:01:8a:ea:8e:
56:63:86:e3:3b:ba:dc:23:92:ec:6c:3d:4a:98:68:10:3f:37:
ad:e0:ab:34:5f:dd:44:31:79:c0:3a:6f:65:b3:03:5c:61:f5:
cd:29:92:2f:e6:03:0a:e9:f5:64:30:d4:13:cd:54:3a:0d:1d:
67:5c:7d:77:76:cf:e9:8e:54:1a:10:25:b8:40:22:63:60:b7:
1b:b5:64:c7:72:54:e3:ec:fe:86:e5:a8:98:ac:0d:85:9a:ca:
65:cc:6e:8f:1d:bc:17:1f:01:48:41:0f:b7:2d:ca:4c:dd:18:
aa:77:79:a7:38:ca:f6:e2:ca:7d:40:ea:24:29:f0:dd:ad:fa:
e6:64:f1:0d:ed:3a:fe:81:d1:c8:b1:d6:e2:d1:f7:ab:5e:c4:
b2:b0:20:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu1pyvnlJurNywNwEGNPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh
NjU4MjkwHhcNMjYwOTI1MTgwMjA5WhcNMjYwOTI2MTgwMjA5WjAzMTEwLwYDVQQD
EygzYzAxNmQ1YjZiODgwZWQ1Y2I0N2EyMWQ3ZjVmOTViZjI1NjgxNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf0NUU/2LRWGi1PlkEq4SukyuBwF
sLAXH0LI3sKVGgAZH/+aJEy/GVmbAuC+xcDTUAHIRktZ2YWIBMAPZso45LxPQH9n
D3fyp90TpgILJvp/EBbO16B6SJi2ykx7ok9JyzdCzm6ngr6DGKK3lwG8Rb0lnUeX
Dx6rnxYXvBZcLJ4nqPXyeqZQlb1nQc73pS/hxUaD4TA/j1hNoi9kpU9wINkgzw68
XmBQZlMvmgn17gXo+c87H8r/r/nKCTTrBY+OTxs675dUUVFkO6JCLnayz9AfOEGq
/WNql+2QkKi4s0yhjK6skkiB9ZJc2zC8nPDbFLs1hOINBSJZV12eCi6i1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwBbVtriA7Vy0eiHX9flb8laBUPMB8GA1UdIwQY
MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt
ZWQ1ZjAwYzk1MDY3LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3
LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3cw9wLA
+IZTdteFzYOqsUTr2NmRKyf4Acc3pfgnmtrvcqCPoKntDZChU35OgZUT58Y9jbpU
ZzlBvJKghF7ptOFu1DHhXLrgICYRExQ4LRLrHTbaCohtD0cC80Xw8UblI8wq5ukg
DyQBiuqOVmOG4zu63COS7Gw9SphoED83reCrNF/dRDF5wDpvZbMDXGH1zSmSL+YD
Cun1ZDDUE81UOg0dZ1x9d3bP6Y5UGhAluEAiY2C3G7Vkx3JU4+z+huWomKwNhZrK
Zcxujx28Fx8BSEEPty3KTN0Yqnd5pzjK9uLKfUDqJCnw3a365mTxDe06/oHRyLHW
4tH3q17EsrAg/g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:36:36 2026 by rpki-client