Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: vKCizFFIeI/mo9h3Ibtd9Z7l6VuxyCPTNJcwisJUBok=
Subject key identifier: 13:04:BE:74:CE:B8:E9:DB:23:37:26:9B:BE:C5:15:D4:1B:72:4B:4F
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 019D2B173FCEEA788E1AF5C4A2C83A9A52A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 07E4
Signing time: Thu 26 Mar 2026 17:00:36 +0000
Manifest this update: Thu 26 Mar 2026 17:00:36 +0000
Manifest next update: Fri 27 Mar 2026 17:00:36 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: csn8EkJ9L50JUNiz8ZcQ2UqWPfhmdILqC22ZEaqiKuI=)
2: N9l_SoYrcFcPv0jC7XqElG5VoCc.roa (hash: R5qOIsjrofGZDxXTlws22ZLH6QPaz3qDwthTa7rQG/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:3f:ce:ea:78:8e:1a:f5:c4:a2:c8:3a:9a:52:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Mar 26 17:00:36 2026 GMT
Not After : Mar 27 17:00:36 2026 GMT
Subject: CN=1304be74ceb8e9db2337269bbec515d41b724b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:64:00:12:e5:65:13:92:48:71:35:ae:c5:
78:d6:a0:0b:11:6e:c0:e9:49:37:2c:b3:58:a4:b4:
b6:d4:62:81:95:9e:e0:cc:e7:c8:57:10:22:81:91:
c7:6b:65:5a:19:91:6b:be:73:ae:e7:d5:16:30:ac:
0f:b1:2d:0d:d3:59:0a:d3:ee:01:9b:c8:6c:32:5d:
ab:58:69:94:d2:ba:41:5b:22:8e:ec:38:76:72:bb:
3a:95:5e:94:d5:9e:84:90:7b:37:b0:c9:1e:1e:00:
4b:7e:02:b7:c3:a6:6c:1e:a4:00:6b:25:5c:58:2f:
d4:e4:6c:c7:08:d1:49:70:62:04:87:c7:ca:31:a8:
08:10:21:03:7d:91:e4:15:8d:cf:2e:f8:ec:ac:2c:
46:dc:a4:8c:21:ef:95:97:15:ee:0f:d6:83:fb:02:
99:04:7b:5d:3d:41:72:c9:da:f8:64:3a:b7:b6:a3:
2a:db:78:bd:21:11:07:bf:b7:68:5b:76:d4:10:b2:
a0:47:a7:90:9a:f2:78:08:03:d2:7e:40:5c:a4:78:
9f:00:08:8b:6f:ab:9f:d6:14:62:19:9f:32:8f:30:
20:59:12:55:67:34:16:d4:7b:84:c0:79:60:7f:2d:
fb:a3:96:6c:bf:1f:8e:28:d6:76:d4:40:0e:bb:6d:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:BE:74:CE:B8:E9:DB:23:37:26:9B:BE:C5:15:D4:1B:72:4B:4F
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:b5:f0:56:8d:36:03:50:0f:ee:7e:f9:49:0f:c0:6f:6d:
6f:c5:d0:6d:b8:82:d8:00:94:0c:e0:91:e6:1b:87:82:a5:0d:
b8:df:e4:e7:f4:ff:65:29:fc:d3:ea:f7:78:fb:c0:82:31:3a:
ef:3e:a9:5e:cf:75:47:e3:7a:1c:64:04:b8:9d:c1:3d:25:49:
2d:14:07:e4:a2:2f:58:c5:fa:ae:c3:5e:f6:bd:9d:bb:01:b6:
e5:05:18:8a:a2:75:eb:5f:63:9d:57:cc:7c:4a:c7:ae:fc:30:
a4:0e:4a:70:01:7f:d8:0b:1c:04:84:bc:06:dd:3d:03:02:af:
98:9a:72:72:a2:52:d9:10:6c:a4:8a:b2:31:47:56:52:20:70:
f5:c7:11:3b:bf:3d:3c:79:82:fb:38:f8:d6:5c:1c:b4:f7:f6:
93:2f:fc:5d:d0:f6:2b:b4:83:cc:b5:30:3e:3f:2d:81:3a:89:
1c:35:86:10:06:fc:41:94:1d:a9:e1:dd:55:92:01:5d:f6:f4:
45:66:5e:db:57:ec:d9:62:f9:df:cb:b0:58:c0:68:2d:55:0a:
6e:7e:fe:fc:43:42:10:d5:68:92:cb:91:10:31:11:32:18:ad:
0e:3b:1f:e4:44:6f:6e:94:69:ed:56:3f:b6:fd:ac:eb:92:ba:
fe:33:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:11 2026 by rpki-client