Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: Orqf7+RBH7Fl/Ho2hx5xBV+ejJK62KDgVh5YRwyWzmQ=
Subject key identifier: 21:2B:1A:14:05:AF:BE:3F:8B:0D:75:EF:9B:0D:AC:0A:29:8D:63:B6
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019F935AB268187A9925A1520EDC69D41AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 0342
Signing time: Fri 24 Jul 2026 09:00:22 +0000
Manifest this update: Fri 24 Jul 2026 09:00:22 +0000
Manifest next update: Sat 25 Jul 2026 09:00:22 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: WCsEWGSbv5NCOqT0UO8ixsE0CMrAN7tCUXJj8168Rdw=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:b2:68:18:7a:99:25:a1:52:0e:dc:69:d4:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Jul 24 09:00:22 2026 GMT
Not After : Jul 25 09:00:22 2026 GMT
Subject: CN=212b1a1405afbe3f8b0d75ef9b0dac0a298d63b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:75:d3:57:fc:a2:c2:bd:4e:a9:f4:07:65:
ce:bb:62:ad:12:e4:9c:6b:c9:18:7c:82:07:92:e6:
ed:bd:57:6f:dd:67:ed:82:e8:cd:46:a3:98:4b:ba:
11:fe:a7:6e:25:64:b7:02:df:f2:3f:27:ac:88:7c:
eb:b9:8b:15:31:8c:79:43:3f:f2:f1:51:4c:ab:c6:
23:bd:27:9b:2b:43:86:f8:c8:7b:fb:2c:57:33:bf:
b0:dc:39:cc:29:92:55:ca:e4:85:98:06:8e:ce:f4:
f5:ea:8b:a3:8f:44:53:88:20:36:97:81:76:77:97:
01:87:14:fa:89:1f:16:24:01:b7:88:b0:03:0c:69:
13:fa:81:f2:26:a2:45:72:29:ed:1f:b1:0d:fa:8c:
92:e7:47:4b:83:e0:9a:d9:13:31:6e:82:8e:dc:0f:
07:a4:af:68:73:ea:d7:76:76:de:8a:15:90:b3:aa:
c1:79:35:1e:57:02:74:6e:16:1c:db:50:55:f6:1f:
1e:a2:58:5c:ff:af:90:27:2e:52:24:ed:34:be:c2:
02:20:3d:3e:5c:d1:23:48:76:3d:69:20:68:1b:21:
80:ca:6d:98:09:d4:97:3a:4d:68:7d:fc:0f:9b:77:
8d:a7:19:f8:63:83:27:df:2a:14:56:ac:bb:e2:0a:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:1A:14:05:AF:BE:3F:8B:0D:75:EF:9B:0D:AC:0A:29:8D:63:B6
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9c:9f:f2:4e:76:50:6e:12:65:f6:ed:78:36:1d:3b:29:4d:
66:e2:1c:02:2f:9f:ff:55:05:82:0a:7e:63:4e:82:22:c0:3a:
7b:45:b8:68:ea:28:d5:97:7c:34:fa:ea:73:29:a0:af:9a:d2:
ac:6a:ad:9c:7c:d7:b1:74:dd:6f:63:49:10:23:8f:f3:d3:17:
61:5a:95:87:13:68:7f:7f:ef:f9:e7:e1:75:98:eb:81:65:ba:
a1:68:39:04:12:40:45:0e:e3:de:54:56:d0:9c:3a:6d:76:ff:
03:92:a2:af:55:05:46:ea:d8:c1:a0:ad:48:66:c2:b9:b0:bd:
bb:a2:96:a8:33:df:a9:d7:82:0b:bd:ee:39:e2:e8:78:e1:6e:
75:c2:a6:41:5c:84:fe:ca:81:aa:c8:da:83:2f:a9:a1:77:5f:
32:3d:7b:fb:a7:eb:b9:1f:1b:18:64:71:f9:d1:9c:9e:4a:8a:
fb:b0:a7:c0:3d:30:4a:02:ec:a3:d5:61:80:d7:b4:9d:41:8e:
59:ff:b6:62:f5:76:27:91:b7:3e:6d:34:44:e3:db:45:1f:b4:
d2:7c:ce:ee:9a:54:36:d4:a6:46:73:d8:a5:15:1d:62:87:0b:
25:17:37:0d:3b:d3:ba:93:8c:e7:88:4f:76:76:ae:11:5d:7a:
c3:5a:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:12 2026 by rpki-client