Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: S6Nx6hVURQtJ7CLeVUFWHjtBZl5yYdeLokVdpsC2Ru4=
Subject key identifier: 4B:2C:18:0D:9F:D6:E6:9A:52:71:FD:44:B6:E5:45:3C:A5:A4:24:38
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 01A06D95C84FAE272D1BF95C83E293699DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 03B3
Signing time: Fri 04 Sep 2026 18:02:07 +0000
Manifest this update: Fri 04 Sep 2026 18:02:07 +0000
Manifest next update: Sat 05 Sep 2026 18:02:07 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: bH9dBCfZML/Yzy2QcJ7Da8qgsSdmtXh0ihzWPDUXWRQ=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:c8:4f:ae:27:2d:1b:f9:5c:83:e2:93:69:9d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Sep 4 18:02:07 2026 GMT
Not After : Sep 5 18:02:07 2026 GMT
Subject: CN=4b2c180d9fd6e69a5271fd44b6e5453ca5a42438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:59:15:65:b5:9c:ab:5d:f2:1f:bc:ce:60:
7f:6b:00:3e:6c:b0:0b:7a:89:3e:08:5b:f1:ca:9f:
47:12:6e:5d:4b:26:38:3c:af:db:a4:dc:3e:9c:0c:
40:83:da:38:e0:e9:d8:fe:80:ea:62:97:50:c3:13:
db:9f:b5:46:e1:1d:4c:8c:08:28:60:c5:fa:b9:fa:
9d:e9:1d:dd:41:e2:6a:8b:1b:7f:1e:be:61:c3:82:
9c:28:95:f5:e9:c9:56:94:9b:d7:f6:6d:00:cc:5f:
8f:6d:ea:a9:62:b8:64:fe:b6:ac:5c:df:07:cd:a8:
84:91:43:12:9a:50:3b:8d:58:69:c1:b4:aa:e3:68:
fa:71:ff:33:b8:18:69:3b:5c:38:f0:5e:9a:c5:0e:
79:b5:25:d9:24:2d:47:54:63:68:4e:52:ee:92:0b:
9e:f5:fe:35:1a:ca:f7:9c:1d:ec:7d:7b:c6:b8:43:
fd:35:b8:c6:ea:a3:d7:dd:a3:2f:9f:33:3e:f9:08:
de:16:8f:2d:64:35:52:c6:0e:76:94:bd:1a:fa:d4:
e5:a5:d0:dd:be:8d:b4:0c:a3:6b:be:78:65:f7:fd:
63:7b:7b:17:49:f4:84:1f:c3:fb:7d:57:16:e5:b4:
40:0b:b6:5b:03:fa:11:f8:ce:8d:12:94:3f:d0:75:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:18:0D:9F:D6:E6:9A:52:71:FD:44:B6:E5:45:3C:A5:A4:24:38
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:94:b7:ee:d5:4f:87:cd:6a:53:96:8d:41:ea:c4:ca:64:af:
3f:f9:41:1a:78:87:15:ba:44:11:24:44:ea:6d:3a:fa:c4:3c:
02:99:8a:4f:10:a2:ec:81:a7:0b:6a:83:c7:91:33:17:72:14:
39:cc:22:22:f5:99:df:63:44:4c:d3:67:72:4e:9b:9e:04:ad:
07:6b:2d:42:dc:d5:f9:6c:3b:45:0b:e4:85:cd:2a:97:eb:98:
47:6f:b8:11:e0:a9:c9:82:a5:02:cd:b9:98:70:12:32:53:8e:
ad:bd:e0:22:e4:94:d3:17:06:0a:b4:70:17:fd:db:67:30:21:
ca:9d:90:e4:98:62:21:c4:b7:46:ef:96:ea:6b:d7:69:0f:6b:
ee:e2:fc:20:98:3e:8c:51:c2:6a:92:86:d3:c1:e3:18:22:97:
1b:c8:61:a9:21:b5:f9:df:0a:0b:2f:a4:dc:0f:90:09:50:09:
d1:b2:da:5f:15:ea:cd:12:b4:81:f0:57:53:91:09:d1:7f:11:
69:79:a1:e6:db:18:11:d0:11:94:62:b2:ce:d7:46:7f:2d:8a:
13:82:d5:b4:0d:f0:0c:53:5b:e2:cf:3b:e2:e2:a1:d5:00:10:
06:fa:c6:4c:60:a9:37:c6:4f:70:dc:df:10:35:4e:f0:19:b8:
9c:05:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:24 2026 by rpki-client