Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: hld32iBMpjVWPZT4pQ2jvkk4wyJyKhKfACjwzjcQLAc=
Subject key identifier: 01:B2:EC:EC:DA:B4:09:77:AF:DC:DC:68:B6:62:FB:10:5D:37:10:B7
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019D38D3860F385388D918B342731F2907E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 020A
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: 1H72Q336yPi37UGzhQBJMLAaQok70NTBCLnfYMRSWx4=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:86:0f:38:53:88:d9:18:b3:42:73:1f:29:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=01b2ececdab40977afdcdc68b662fb105d3710b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:36:0c:1d:24:37:62:fc:19:87:c4:32:a6:
eb:47:7b:aa:5c:82:41:82:cc:07:5c:df:f0:42:ab:
06:21:ee:85:a5:3b:9a:7e:00:3b:22:c9:df:2c:9b:
fa:1c:34:6b:c4:fd:81:b1:05:c6:40:fe:b5:f3:b7:
bb:c9:0d:6f:df:53:fb:e8:48:96:d2:0f:6a:e6:ca:
15:37:1b:85:98:85:a1:27:16:ba:21:32:14:a0:d8:
d2:5d:57:50:b3:cf:c7:2c:4b:90:e1:69:a3:26:7c:
5d:6e:d5:23:34:1f:22:9d:11:a3:df:35:26:dd:d5:
43:d5:ef:64:0d:0b:68:a2:5f:43:9b:6f:2d:79:9d:
22:82:9d:74:d9:fa:08:55:f0:62:28:53:d9:ef:8b:
1c:7f:68:11:43:01:15:11:43:2b:70:30:81:bb:02:
4f:72:b1:03:a8:e2:3f:e4:2a:b6:8b:fd:b2:91:db:
88:d4:ab:d9:5f:d7:9f:15:8b:59:95:82:be:81:4e:
13:47:69:97:12:77:bb:b7:ec:d5:a3:d0:76:0a:f3:
87:ee:e3:ab:1f:86:3d:67:ca:dc:08:3c:ed:c1:67:
60:47:dc:2a:c3:50:3c:36:e1:ef:e8:de:62:71:5e:
a8:3a:de:34:cb:87:1e:2f:80:f3:bc:58:28:db:15:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:EC:EC:DA:B4:09:77:AF:DC:DC:68:B6:62:FB:10:5D:37:10:B7
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:21:b4:17:23:55:38:2b:b6:8a:bd:e0:1c:c4:90:06:3e:6d:
8c:d1:e4:bb:ba:b6:55:07:dc:0c:b3:27:14:d0:4a:5e:77:8e:
98:30:8f:6a:a6:19:67:3d:9d:5f:47:6b:9e:72:f9:96:f2:34:
d4:80:27:ca:79:d6:2d:09:d5:2e:c6:0e:1b:c1:35:99:51:e7:
3b:8d:e4:bc:e5:84:6e:bf:02:27:b3:9a:12:2b:fa:73:53:3d:
60:c7:76:dd:73:05:9c:98:77:00:86:ce:a0:36:4b:1a:10:65:
9a:2e:3d:c7:be:c5:cd:b6:49:24:86:18:02:6c:a3:61:53:31:
b9:fb:54:f3:71:3e:6f:5e:a1:1f:64:7e:47:56:0d:0e:9d:7c:
35:fa:e6:aa:14:fe:10:d5:86:0f:90:b6:ac:37:39:ce:4b:28:
17:a3:bd:9d:93:6a:25:29:9c:80:d0:37:c6:ca:60:f2:ee:a1:
45:c2:af:88:cb:2c:ca:e9:ef:99:62:80:33:a4:a8:84:4a:2d:
97:65:33:ac:72:b2:64:df:22:f6:ad:ce:fd:60:d3:f2:2c:e5:
3f:91:77:b9:e5:fa:a9:23:37:fd:8b:8c:7a:fc:38:6f:2d:55:
cd:e7:e4:8a:88:f0:e1:6a:f6:9d:e4:f3:d4:df:ea:43:99:72:
d3:c5:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:04 2026 by rpki-client