Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: c1WLR3/w4pK3ZWhQfxtWm1zKOYyilgf/8D96q4m36bE=
Subject key identifier: 23:AA:0A:A3:33:F6:53:76:08:3F:A7:E3:AA:14:8C:74:5F:8B:97:3C
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 01A17DE11C711B1DCCF6A30B63B48BCB26DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 0440
Signing time: Tue 27 Oct 2026 15:01:07 +0000
Manifest this update: Tue 27 Oct 2026 15:01:07 +0000
Manifest next update: Wed 28 Oct 2026 15:01:07 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: 4kF95ITWJA+zr0GCaXYpzL6davcH4VXAzu0cB3sQ05w=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:1c:71:1b:1d:cc:f6:a3:0b:63:b4:8b:cb:26:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Oct 27 15:01:07 2026 GMT
Not After : Oct 28 15:01:07 2026 GMT
Subject: CN=23aa0aa333f65376083fa7e3aa148c745f8b973c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:08:0b:95:8c:f7:3a:c5:17:4d:b9:ae:44:
26:2d:3f:db:b3:8c:09:fa:2e:9c:92:93:85:9e:d1:
10:a4:c1:bf:93:af:8b:a5:b1:5c:30:78:73:6a:b2:
f9:fb:16:a9:22:29:8e:43:84:b9:83:0c:4f:4f:9e:
06:fd:c6:25:a7:1b:07:ec:79:5f:f6:fd:60:88:85:
38:11:88:27:1f:d6:ec:23:b2:c3:4d:4e:1e:cf:79:
3d:8e:51:a2:71:a1:de:a7:a2:e5:33:16:4d:4c:a9:
cd:6d:8e:2d:59:6e:cb:da:b5:87:a3:dc:ce:a6:20:
ca:12:41:aa:73:ca:44:95:6e:10:a5:3d:94:40:04:
4f:84:0f:21:ff:13:ee:0f:30:da:62:57:72:a9:9d:
4e:7e:b5:db:d1:9c:33:d5:71:a9:ba:6b:74:fd:6e:
5f:38:84:b1:74:0e:26:2f:80:29:10:6b:1a:6c:2e:
a0:ea:63:48:83:41:83:93:73:23:c5:db:ad:08:55:
94:1e:4c:ee:71:45:f4:17:3e:99:7c:ec:3b:9e:06:
0a:0d:59:43:01:a3:bd:4f:94:f3:43:a9:48:50:82:
13:2f:c0:be:b6:f1:9f:ed:53:19:81:6b:10:51:4a:
8b:a8:83:ad:a0:0c:c2:4b:d5:86:82:80:0c:e2:82:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:0A:A3:33:F6:53:76:08:3F:A7:E3:AA:14:8C:74:5F:8B:97:3C
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:85:06:d1:37:f3:05:83:2d:20:53:3d:97:fa:5c:bd:59:f9:
98:f1:b7:90:1e:32:1a:b9:4f:e8:67:b6:ad:20:b0:a0:ab:2c:
6d:e9:d7:ad:f4:53:8a:fe:77:13:ef:1b:95:f5:3d:97:36:e4:
b1:e4:c0:b0:36:f7:34:30:6e:2a:1a:eb:0a:72:9f:ef:6c:91:
fb:02:75:96:7d:f5:3d:93:5d:a5:f5:cc:c7:dc:96:fa:0b:66:
17:24:d6:2a:e0:28:5c:b2:5f:94:98:bb:99:7f:c2:3b:51:ac:
4d:cf:bd:8f:02:0c:24:73:51:63:f7:78:7d:ee:0c:e5:c3:3e:
2a:f5:7c:2e:f8:03:48:10:d4:18:1d:dc:8e:1b:08:3d:5f:b4:
36:f3:39:cb:09:22:95:5e:41:44:aa:a1:8a:34:97:6d:27:3f:
79:8c:0b:48:a4:10:8b:f2:f9:eb:db:6b:c9:20:c0:f3:eb:9b:
ca:e8:63:d3:d3:20:49:ca:8a:68:43:22:35:d7:7f:5b:87:4c:
19:14:97:0c:64:57:67:94:5d:a0:3a:47:0e:a2:1a:5d:7d:49:
0b:e3:5d:d2:f5:75:7f:f0:6d:6b:9b:b4:c1:02:34:db:3e:9a:
19:b2:bf:d3:7b:08:be:7a:fe:b5:be:e3:73:a7:ab:b4:d3:69:
33:15:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:18:15 2026 by rpki-client