Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: K0ekSwr2k6XoYro8JCaEccOwgsLcvIJpxuJKGO5QvP8=
Subject key identifier: B5:78:50:B4:A1:AF:58:8C:99:5A:2F:A1:9C:EB:B8:09:04:05:BE:4B
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019E1EA2F77BB53EADE63276F660664BCF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 0281
Signing time: Wed 13 May 2026 00:00:57 +0000
Manifest this update: Wed 13 May 2026 00:00:57 +0000
Manifest next update: Thu 14 May 2026 00:00:57 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: TmkuYhA0mY5Zh4yHoCib83M46V+x9ekDb8nOiI/PNgQ=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f7:7b:b5:3e:ad:e6:32:76:f6:60:66:4b:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: May 13 00:00:57 2026 GMT
Not After : May 14 00:00:57 2026 GMT
Subject: CN=b57850b4a1af588c995a2fa19cebb8090405be4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:9b:e8:3f:32:52:37:b1:6d:fc:5f:61:9c:
b7:c9:46:41:82:bb:38:26:17:b6:24:17:c5:c7:0f:
b2:dc:13:e4:e1:81:ff:65:da:b2:a3:48:c8:e6:5e:
fa:02:f1:88:91:2a:6e:f4:c5:65:d9:38:d6:b6:e3:
8e:85:74:ac:71:41:3c:27:b7:ab:1b:36:37:46:46:
96:82:1d:45:b1:54:20:00:76:43:8a:80:f4:a6:1e:
24:ac:e4:2b:26:c9:e7:09:53:79:2f:ac:9e:7e:77:
a5:3c:75:00:73:77:cf:7d:49:f4:cf:b1:8c:07:5e:
4a:0e:23:b6:83:03:ae:9d:1e:4b:cf:78:a9:8a:ba:
42:ff:d8:29:e2:aa:eb:d7:a5:75:a0:fc:25:72:83:
e7:33:05:23:90:c4:00:e7:65:06:7f:bb:8d:e4:1c:
49:1b:4d:c4:d6:87:7d:88:95:0e:a3:4d:1b:4f:be:
30:e3:e7:e3:8d:56:4a:e0:71:e1:7d:b5:52:c9:41:
0c:03:74:5f:2b:75:0d:48:a2:b7:b0:45:0d:82:5b:
1a:6d:86:5d:24:64:43:e6:2a:db:77:8b:b7:0b:9e:
1c:01:19:d0:50:b3:aa:f2:29:65:38:8c:54:8c:10:
1b:b3:0b:54:e6:23:5e:5e:f5:55:e2:47:ba:8c:ea:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:50:B4:A1:AF:58:8C:99:5A:2F:A1:9C:EB:B8:09:04:05:BE:4B
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e4:32:be:51:48:f5:98:b4:53:12:2f:63:4f:1d:0e:99:8a:
41:e1:2e:97:9f:5d:26:84:34:f2:b4:53:2f:74:5e:f3:37:37:
69:a0:62:2c:b1:06:32:8c:87:66:5d:b9:98:98:0b:35:0d:f0:
b2:d3:cd:8b:f8:1b:dd:4c:e6:29:26:eb:f1:3d:1b:7d:43:58:
e1:12:9c:e1:5a:9b:bb:63:19:b8:b1:d1:a3:4c:9a:50:23:d8:
a3:83:6b:8f:d6:6b:d2:6a:ae:6e:91:22:a6:92:bc:08:d8:f1:
ea:f1:97:a7:8d:67:93:41:e7:64:8a:09:64:21:2b:50:94:c3:
f9:a9:a2:19:c3:09:ef:65:e5:7f:e3:49:f9:87:11:4a:5e:72:
5f:19:c8:c8:56:38:df:71:c8:9c:f1:b2:59:82:9c:2d:fe:31:
bb:f4:b0:37:de:74:57:e2:0b:d7:c9:14:03:2b:4e:0c:9e:41:
fd:f0:91:4d:14:e8:24:ac:6e:86:85:72:3c:72:36:64:d9:68:
8c:b6:d8:10:d8:42:e2:7d:77:4e:b5:69:68:57:9b:69:dd:24:
14:92:1e:ab:a4:4e:c9:cf:22:5f:29:b5:57:75:07:9b:f7:af:
15:66:1e:9f:b8:94:8b:38:49:b3:25:7e:43:17:1d:6c:52:80:
69:d6:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:45 2026 by rpki-client