Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
File: IKDFQA4CP5P1GOQwBMM7x50vayE.mft (raw, json)
Hash identifier: bCyybH1ZuW3lMtVzC1QZe34T/ybqa6fJ7qZx6Iu2oCU=
Subject key identifier: AB:4F:30:55:AF:68:6C:BC:1F:27:5D:BB:34:E6:F4:72:83:9D:B8:C5
Authority key identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
Certificate issuer: /CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Certificate serial: 019F8FB558D8473494D147E15526BDBF56B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 16:00:54 +0000
Manifest this update: Thu 23 Jul 2026 16:00:54 +0000
Manifest next update: Fri 24 Jul 2026 16:00:54 +0000
Files and hashes: 1: 9Czc8pDz2K4dQ7wCr5MrteuEqPw.asa (hash: cP6vlJtBeLHClXQjIgZNKEs/XJ829Hz7hO1z+cclK6I=)
2: C79YUpU2iklV_OJjs4h8ac-OjrQ.roa (hash: //CGGQm4W2A3kMycLE3Ro2hRaxk4J3N4m94O7KPhors=)
3: IKDFQA4CP5P1GOQwBMM7x50vayE.crl (hash: Z+O5ecYqPVBRvbxH6LWYlSoGv2B45xG3tSN/iqyT5qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:58:d8:47:34:94:d1:47:e1:55:26:bd:bf:56:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Validity
Not Before: Jul 23 16:00:54 2026 GMT
Not After : Jul 24 16:00:54 2026 GMT
Subject: CN=ab4f3055af686cbc1f275dbb34e6f472839db8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:a2:d2:a5:d6:47:26:8a:17:a5:43:1a:15:
3c:76:cc:fa:d5:37:b4:4c:7c:2a:1a:6e:a5:a8:ea:
1a:a7:2a:53:0f:94:1d:37:64:8b:d0:cf:6c:d0:7c:
51:28:2e:fc:78:9f:34:82:3e:5b:26:e6:3e:36:50:
11:dc:04:94:6e:6c:db:16:ae:32:b9:18:de:1a:7e:
52:aa:b1:9a:45:8c:d0:22:f2:37:10:e3:7e:81:25:
90:81:29:13:97:91:2c:bf:26:c0:eb:9c:7f:41:1e:
5c:5c:35:5d:42:8a:a0:7f:36:71:63:9d:0b:77:77:
89:ad:f0:6e:cb:97:11:69:1b:48:71:a0:11:f8:08:
31:a5:14:57:cf:76:ea:74:ca:ac:8e:ac:15:73:5b:
cf:98:fd:58:da:81:78:3a:33:75:e7:a0:cc:48:79:
81:05:7b:91:a5:6e:31:6d:4b:3e:8a:5d:a9:a7:76:
ca:e7:86:4b:52:eb:b8:a2:59:0b:76:9a:16:85:64:
31:03:77:ec:96:a3:c3:6e:55:16:38:83:05:d5:30:
95:80:a5:9e:09:49:9d:d4:4f:60:89:a3:09:31:10:
6e:27:61:08:e1:cf:dd:17:22:70:ee:02:c8:5f:ff:
b3:01:00:c8:a9:12:fe:9c:e8:c0:8f:ba:23:34:5e:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4F:30:55:AF:68:6C:BC:1F:27:5D:BB:34:E6:F4:72:83:9D:B8:C5
X509v3 Authority Key Identifier:
keyid:20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:bf:f9:93:09:b1:f3:dc:a9:e4:66:2f:ad:64:74:0f:e5:
95:6d:58:7c:56:cb:f0:ca:33:f6:f0:96:72:b3:d6:ff:81:6a:
e3:99:92:17:59:54:2c:2a:cc:c2:c7:a9:35:e7:1e:4a:bd:02:
57:ed:5c:5e:95:a7:54:2f:a7:a9:e4:27:f8:bb:39:f0:8d:c1:
a3:d5:8e:a3:e2:50:f6:b9:94:1c:80:53:24:8e:6b:ed:15:80:
a2:c5:fa:d4:53:3c:fc:38:73:9f:72:5a:03:46:5e:6c:e7:99:
db:9e:a2:d3:41:c7:5e:26:6a:9b:80:d9:0d:df:88:d3:70:f8:
d8:a1:db:2b:3b:ee:ff:cb:8c:8b:0a:83:48:b1:fb:97:80:5e:
85:30:d8:db:54:6e:18:24:f5:93:e1:cf:bd:bf:78:94:ba:71:
8b:b7:08:99:0c:84:69:de:e4:00:f3:a9:1d:44:0c:82:6b:65:
50:26:e2:b7:77:9a:53:b3:40:e7:43:76:2d:de:05:53:69:9a:
f3:1f:0f:db:b1:2e:4a:79:91:04:f7:ed:7c:a6:a8:38:59:92:
ff:12:56:b5:37:8a:c3:88:e4:f3:ec:0e:a0:74:62:eb:a7:e9:
b9:f5:1a:53:a6:37:fc:34:1d:4e:6a:78:ca:a1:1d:d8:44:36:
23:35:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:45 2026 by rpki-client