Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
File: IPdQab1W78UXA4PtMcrSJGT98DA.mft (raw, json)
Hash identifier: q936NNRsPigr0qKdlzCrtaD24NVYOi6VL47WfnJg6jQ=
Subject key identifier: AF:D9:92:3C:C9:E5:D2:6F:A0:97:69:50:43:47:88:AC:99:BE:11:B8
Authority key identifier: 20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
Certificate issuer: /CN=20f75069bd56efc5170383ed31cad22464fdf030
Certificate serial: 019F927F895F94A9A66869429ED603548EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
Manifest number: 0778
Signing time: Fri 24 Jul 2026 05:00:59 +0000
Manifest this update: Fri 24 Jul 2026 05:00:59 +0000
Manifest next update: Sat 25 Jul 2026 05:00:59 +0000
Files and hashes: 1: B9E5JactSyIcFQ6PftrFCykRrtA.roa (hash: HKP9soP+n5+otLr1WnVLOerw0oovvQB3aHXqFrem9Bk=)
2: IPdQab1W78UXA4PtMcrSJGT98DA.crl (hash: pHVDVqmaaXZCWAFGNawsZbQ/WsFYuTrn3BLDjoMyaqo=)
3: wDCZnmWI33VgfRKA1bq6grP7-lg.roa (hash: pgV8JHt9oCiPvSmsdBWlSVXXDii3zSNwrmrq5yIIZu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:89:5f:94:a9:a6:68:69:42:9e:d6:03:54:8e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f75069bd56efc5170383ed31cad22464fdf030
Validity
Not Before: Jul 24 05:00:59 2026 GMT
Not After : Jul 25 05:00:59 2026 GMT
Subject: CN=afd9923cc9e5d26fa0976950434788ac99be11b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:28:41:54:ea:d8:31:d8:8b:79:93:eb:d6:
cd:a9:b3:ad:ed:cd:8b:72:48:e2:e4:fe:7c:cd:1c:
65:c6:98:4a:9f:80:f3:6a:78:07:79:33:74:10:ad:
52:cc:d1:c7:25:db:1f:d0:83:68:94:85:c1:76:19:
31:89:56:b7:18:c3:a9:3c:87:d5:40:23:de:7e:55:
b7:95:18:84:dc:92:90:e2:9a:63:ed:88:b7:24:24:
16:83:dd:0c:0e:ec:4c:59:8e:67:d2:44:ca:aa:5b:
04:a4:6a:2a:1b:77:05:1a:27:f2:49:a9:cf:61:40:
6b:b1:65:ca:51:c2:28:1b:6f:b3:16:ed:1b:93:69:
ec:88:13:b8:b4:46:c1:b5:bf:0c:aa:36:1f:db:cf:
18:63:6e:c8:31:06:bf:6e:34:4e:74:63:5d:6e:ff:
1e:97:2c:f1:92:5d:0f:d4:6a:62:03:0f:f3:cd:89:
20:d2:03:1e:6e:c7:d9:17:90:f4:78:2c:67:55:f4:
ec:57:49:f1:b8:23:cb:f4:d5:48:60:89:ab:e8:eb:
7a:f2:6a:4f:6c:ee:f0:16:b1:ee:12:ca:dd:37:a8:
e2:6a:75:61:ad:a0:ca:0d:0a:0b:61:02:26:f5:22:
c3:a8:51:f6:75:82:b4:f7:be:f9:44:a3:18:84:ea:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D9:92:3C:C9:E5:D2:6F:A0:97:69:50:43:47:88:AC:99:BE:11:B8
X509v3 Authority Key Identifier:
keyid:20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a3:f9:0b:79:d9:90:26:69:1e:38:f9:69:9a:e2:49:d4:74:
4c:42:df:ff:fc:5c:23:12:89:4a:a4:53:d0:32:27:93:d2:44:
c0:bb:5c:ae:7d:76:54:5d:1d:ec:95:e7:72:54:13:db:49:a0:
2e:de:1e:90:e5:ed:a5:5d:18:fa:1e:43:c6:97:53:ff:f2:20:
f1:ed:81:b2:9d:ae:4f:d1:83:ca:16:40:db:c5:b5:37:29:f1:
69:07:71:e2:61:39:c2:88:92:be:81:74:5b:72:fc:8e:d9:b7:
41:e2:b4:14:dc:4a:4b:50:07:df:34:ca:ad:a5:c7:75:d8:8d:
17:b8:df:a6:67:9d:0c:a3:4e:51:e6:d5:3c:0d:1c:78:3d:74:
e6:02:55:30:de:94:fc:c0:68:38:78:e0:9d:c8:9f:99:03:d4:
f4:a5:02:da:ec:7d:87:a7:ec:1f:00:83:28:6c:13:8a:d5:f6:
64:35:69:5e:ef:4a:b6:53:ff:71:67:f9:b4:f9:0c:a0:e7:6a:
2f:8a:3a:16:92:2c:d5:8c:60:7a:6c:7b:b0:91:4b:17:a2:2e:
a4:1a:a0:e5:f8:53:7c:70:be:7c:96:88:25:71:c2:5f:ec:3b:
52:04:30:a9:f0:15:c8:b1:7d:5c:44:df:a5:3a:7a:9e:0c:d2:
62:2e:73:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf4lflKmmaGlCntYDVI71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjc1MDY5YmQ1NmVmYzUxNzAzODNlZDMxY2FkMjI0NjRm
ZGYwMzAwHhcNMjYwNzI0MDUwMDU5WhcNMjYwNzI1MDUwMDU5WjAzMTEwLwYDVQQD
EyhhZmQ5OTIzY2M5ZTVkMjZmYTA5NzY5NTA0MzQ3ODhhYzk5YmUxMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUooQVTq2DHYi3mT69bNqbOt7c2L
ckji5P58zRxlxphKn4DzangHeTN0EK1SzNHHJdsf0INolIXBdhkxiVa3GMOpPIfV
QCPeflW3lRiE3JKQ4ppj7Yi3JCQWg90MDuxMWY5n0kTKqlsEpGoqG3cFGifySanP
YUBrsWXKUcIoG2+zFu0bk2nsiBO4tEbBtb8MqjYf288YY27IMQa/bjROdGNdbv8e
lyzxkl0P1GpiAw/zzYkg0gMebsfZF5D0eCxnVfTsV0nxuCPL9NVIYImr6Ot68mpP
bO7wFrHuEsrdN6jianVhraDKDQoLYQIm9SLDqFH2dYK09775RKMYhOp8lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/ZkjzJ5dJvoJdpUENHiKyZvhG4MB8GA1UdIwQY
MBaAFCD3UGm9Vu/FFwOD7THK0iRk/fAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBkUWFiMVc3OFVYQTRQdE1jclNKR1Q5OERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWNkNzAtNTBjZC00NmJkLThlMDYt
Yjk3MDVkN2QzNTc5LzEvSVBkUWFiMVc3OFVYQTRQdE1jclNKR1Q5OERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85NWNkNzAtNTBjZC00NmJkLThlMDYtYjk3MDVkN2QzNTc5
LzEvSVBkUWFiMVc3OFVYQTRQdE1jclNKR1Q5OERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6P5C3nZ
kCZpHjj5aZriSdR0TELf//xcIxKJSqRT0DInk9JEwLtcrn12VF0d7JXnclQT20mg
Lt4ekOXtpV0Y+h5DxpdT//Ig8e2Bsp2uT9GDyhZA28W1NynxaQdx4mE5woiSvoF0
W3L8jtm3QeK0FNxKS1AH3zTKraXHddiNF7jfpmedDKNOUebVPA0ceD105gJVMN6U
/MBoOHjgncifmQPU9KUC2ux9h6fsHwCDKGwTitX2ZDVpXu9KtlP/cWf5tPkMoOdq
L4o6FpIs1Yxgemx7sJFLF6IupBqg5fhTfHC+fJaIJXHCX+w7UgQwqfAVyLF9XETf
pTp6ngzSYi5zbQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:23:11 2026 by rpki-client