Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: EQLmOVoIOlIJKz4enx7cT76t1oAIeFLPeK9LvcixlLs=
Subject key identifier: 36:DA:9C:5B:3E:4F:C7:42:43:32:C4:AD:5F:C2:8B:B2:93:1F:D4:8D
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 019F93FF9493B6F467B5EE79D13A5ABCDEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 1399
Signing time: Fri 24 Jul 2026 12:00:28 +0000
Manifest this update: Fri 24 Jul 2026 12:00:28 +0000
Manifest next update: Sat 25 Jul 2026 12:00:28 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: aygjF2QjmsSGbnxFWCBWFqp43lZymwkMbnF7OiGS6s0=)
2: OIqVwV7eJRjge3Y7JoI6UT8DyHg.roa (hash: 1a+xm03EcG4NIWojKcu02C40HTOK/Zidn5fuQN++My8=)
3: RvjdrZHQvT2b90nWXdsgoaDdips.roa (hash: qK/UmJeSS3Eli2K0IV23Gv9PIRqLGK5MHBRUfrzwD3E=)
4: YfMmn3NTxzanjSoW2CgtmSyKoBw.roa (hash: R1/beSy+NbtBJBgUSOR66DtF7b/TO6ueQaOcS29ElbE=)
5: osG6SqIqqmIP3iBJplJkK58I_pQ.roa (hash: b1xSqqWBFOEz+K1E0t9Y9zbsAyRCIW7qvBJSCpg4lHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:94:93:b6:f4:67:b5:ee:79:d1:3a:5a:bc:de:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jul 24 12:00:28 2026 GMT
Not After : Jul 25 12:00:28 2026 GMT
Subject: CN=36da9c5b3e4fc7424332c4ad5fc28bb2931fd48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:f1:cf:e1:4b:9a:68:63:f2:24:46:db:f1:
cd:2d:f4:3d:57:dd:ba:84:b4:40:20:19:ec:3e:83:
24:89:a7:8b:98:cd:d8:93:d7:52:e4:07:7d:c2:9c:
05:d3:a5:ed:d0:25:fc:dc:51:e8:af:1e:0f:6d:f7:
c3:71:08:e7:c0:87:3f:68:d7:56:0b:bd:17:48:e3:
ed:49:b3:3f:9f:9d:84:b0:1d:3d:74:e6:f0:9a:07:
af:10:ba:db:be:18:a6:c2:cd:61:d9:5b:4d:7f:56:
fc:64:1b:f1:cc:e6:7d:0e:5f:7c:62:77:d7:43:b3:
69:5d:92:95:d5:69:7b:6a:b1:18:8d:dd:20:df:19:
87:ee:11:fb:cc:a2:82:2a:b1:ec:53:f4:00:be:4f:
60:b2:ba:88:dd:6b:b4:5d:85:5a:7e:4b:69:49:1a:
96:cb:98:73:89:6f:0f:a6:e5:65:52:ea:f1:54:7a:
e7:df:bc:84:87:86:10:a9:c6:81:c3:09:24:d4:d4:
f8:82:d1:18:85:47:70:00:b0:d0:c1:34:24:43:00:
88:03:92:a9:b2:83:fe:08:74:73:e7:1a:a6:98:74:
4d:ed:f0:1f:92:7b:12:c1:ad:01:f7:5b:e0:f8:79:
6e:da:89:c0:91:a1:3f:71:3f:cf:4c:33:d8:da:5c:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:9C:5B:3E:4F:C7:42:43:32:C4:AD:5F:C2:8B:B2:93:1F:D4:8D
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:7b:91:ea:ed:1f:b0:5f:5d:da:42:ae:bd:76:0e:d7:4c:
8f:1f:ee:f5:5a:d7:d6:f4:55:5f:26:fa:37:1e:22:ac:a4:fb:
d4:e8:03:0e:8f:03:8a:d2:9c:6f:46:c2:af:75:02:a8:15:60:
0d:40:b4:51:ef:21:68:0c:ff:19:15:c2:98:17:b3:cb:df:47:
ba:16:b8:24:9d:a4:19:56:dd:89:18:54:51:18:31:21:04:85:
45:cc:2a:78:a3:50:b2:9d:2f:e5:a0:c9:03:79:32:7d:21:1b:
ff:55:2c:5f:cb:2e:5e:ea:ab:63:8f:d7:7a:38:76:f1:f1:b0:
3a:9a:66:ba:6d:6d:3c:71:f6:7b:15:af:59:fc:b1:b9:0a:51:
2c:c5:5b:b6:97:4b:39:e2:29:ea:7c:e6:32:c1:a3:d3:f3:2a:
af:15:bb:20:3d:c4:bf:34:9a:b0:75:4b:2f:56:74:31:a1:1a:
02:de:1a:f1:05:71:ab:9d:63:02:21:1b:93:e5:ad:2b:8e:bd:
c8:81:30:20:80:d3:87:88:ad:17:a8:3e:e0:85:e0:a1:19:d7:
1a:19:65:71:00:65:10:61:7f:f2:57:75:ac:e6:09:f8:d4:bc:
e9:a5:c7:81:96:7f:66:9a:49:02:ae:7f:3f:76:c1:91:f6:4f:
5c:55:79:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:37 2026 by rpki-client