Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
File: IPdQab1W78UXA4PtMcrSJGT98DA.mft (raw, json)
Hash identifier: r5cWKIi3Y/EiPN0XYwVEglx5OdHvVR6FSfHMdT0IUkE=
Subject key identifier: B6:11:C4:A3:5F:9F:A9:39:D5:A1:CD:22:B3:BD:E5:2D:D5:10:8E:74
Authority key identifier: 20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
Certificate issuer: /CN=20f75069bd56efc5170383ed31cad22464fdf030
Certificate serial: 01A0F5D6F625E0CDBEEEE337D84F70D9052E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
Manifest number: 0830
Signing time: Thu 01 Oct 2026 05:01:40 +0000
Manifest this update: Thu 01 Oct 2026 05:01:40 +0000
Manifest next update: Fri 02 Oct 2026 05:01:40 +0000
Files and hashes: 1: B9E5JactSyIcFQ6PftrFCykRrtA.roa (hash: HKP9soP+n5+otLr1WnVLOerw0oovvQB3aHXqFrem9Bk=)
2: IPdQab1W78UXA4PtMcrSJGT98DA.crl (hash: nlp0rWFTnah96xhnokhvhABwqs198Y8wR7szUdS6TLw=)
3: wDCZnmWI33VgfRKA1bq6grP7-lg.roa (hash: pgV8JHt9oCiPvSmsdBWlSVXXDii3zSNwrmrq5yIIZu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:d6:f6:25:e0:cd:be:ee:e3:37:d8:4f:70:d9:05:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f75069bd56efc5170383ed31cad22464fdf030
Validity
Not Before: Oct 1 05:01:40 2026 GMT
Not After : Oct 2 05:01:40 2026 GMT
Subject: CN=b611c4a35f9fa939d5a1cd22b3bde52dd5108e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:e5:93:1e:67:48:09:79:ae:42:cf:4b:26:
d4:69:57:0d:65:3d:07:cf:a3:73:93:6e:89:16:08:
d4:36:07:e0:bd:1c:54:7e:0e:85:df:31:23:97:19:
53:d4:96:9e:e5:fa:f5:35:ff:dd:8e:5d:06:75:25:
10:2e:ff:86:3b:14:5e:24:5c:ab:ec:45:39:a3:90:
a2:eb:96:5f:1b:20:6e:3e:56:1a:f1:f5:a4:84:b5:
15:e0:f0:2b:3c:d3:9d:d6:23:47:60:50:2c:b6:3a:
46:2d:bd:1c:02:09:ae:a4:aa:be:47:b6:a9:5b:51:
7c:90:6e:55:1f:77:a2:b8:82:c7:f4:55:d4:00:40:
91:db:53:75:89:7a:90:0f:ba:2b:f9:ac:ce:91:c4:
63:6c:8c:6b:5a:22:8b:00:03:1c:0e:59:52:b0:6b:
45:4a:1a:32:9c:dd:5b:13:28:e7:e0:6d:4a:81:97:
a1:c6:b4:a0:d0:b6:7a:f4:e8:93:4d:17:32:ed:6f:
be:61:93:83:c0:3a:ce:26:70:43:0f:fe:e6:f3:23:
9a:4a:fd:cd:f9:28:13:51:18:98:d7:f9:ae:da:fa:
b6:27:58:14:ec:15:f0:15:98:6f:9e:99:54:65:62:
f4:3e:82:cc:28:2b:94:55:c4:5e:6d:37:94:bd:34:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:11:C4:A3:5F:9F:A9:39:D5:A1:CD:22:B3:BD:E5:2D:D5:10:8E:74
X509v3 Authority Key Identifier:
keyid:20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e1:63:8a:c5:d4:39:d4:61:9c:2a:aa:9e:22:61:34:ea:c1:
0f:80:59:97:5f:9e:42:cd:b3:cd:c7:2f:5b:56:a0:d5:b0:e5:
bc:d0:f5:40:70:28:24:6c:83:26:2d:db:83:26:3a:06:ec:de:
8f:eb:ed:5e:10:20:20:53:c3:b2:58:a3:7f:89:9a:49:c2:15:
15:65:19:07:d3:d0:b7:ce:87:dd:c6:4d:b1:c9:cb:e9:a2:9e:
f7:31:a2:9d:01:7b:cb:a5:67:c5:7c:04:f4:0d:36:f6:80:59:
aa:5e:55:7b:74:73:44:28:be:cc:f9:19:15:6b:be:ed:f6:fa:
68:14:96:55:24:31:92:57:6b:a3:d1:7e:f4:73:32:fe:4f:95:
e3:45:92:af:0a:67:8b:c2:5f:3d:a5:e9:a6:79:1f:f9:9e:f0:
46:d0:b3:74:e2:40:12:5f:bc:1e:94:2a:e1:af:2b:17:29:67:
a5:9a:d5:59:d2:d7:7f:ea:f2:bf:44:26:89:14:cb:0a:db:ce:
a4:b4:af:78:36:73:f3:c4:c4:a9:89:6c:d6:56:1f:27:17:22:
14:c1:ed:94:83:fe:29:d8:fe:f5:ef:59:f4:17:f9:74:f3:7d:
b4:a7:6a:98:f6:7b:5b:dc:53:44:1e:7c:5b:83:52:76:69:67:
c1:e9:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:12:54 2026 by rpki-client