Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: fLXj+JerAFjrJeQ2CGHwAuLri5KNYSgWmMbDeBddLOg=
Subject key identifier: 58:42:2F:FB:E6:12:03:97:7B:C3:9F:A0:8E:27:A7:90:68:5F:EA:C8
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019E9C29CAA5D1EEA11A8207502377F82539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 02C2
Signing time: Sat 06 Jun 2026 09:00:44 +0000
Manifest this update: Sat 06 Jun 2026 09:00:44 +0000
Manifest next update: Sun 07 Jun 2026 09:00:44 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: ITkJNoQs9c1g1dYCNxhG+L5jsWpaT3BpOk+82+Ffjow=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:29:ca:a5:d1:ee:a1:1a:82:07:50:23:77:f8:25:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Jun 6 09:00:44 2026 GMT
Not After : Jun 7 09:00:44 2026 GMT
Subject: CN=58422ffbe61203977bc39fa08e27a790685feac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:03:35:93:db:1d:9d:d9:57:b2:33:ad:13:
ea:41:bc:2e:aa:a3:e4:99:0e:75:c2:63:ad:e9:e5:
2d:e6:7f:ce:9a:7a:f5:49:dd:c7:c2:02:37:9d:50:
4e:ac:06:6f:b7:51:7b:64:76:fe:7f:da:e7:66:b1:
6f:1d:af:a0:86:c8:2a:5c:17:7a:a2:9c:e1:d0:e3:
38:b1:bc:3f:ad:5f:78:99:ce:eb:43:08:43:c7:43:
46:39:87:66:bf:21:66:8c:7f:1a:52:d3:30:a2:9a:
a2:44:4b:22:58:a5:50:c5:13:5e:93:88:b1:21:7a:
1c:ee:87:e0:8e:df:8f:5b:dd:17:7a:e0:5e:fd:e8:
ae:59:55:07:7c:99:3b:e2:ce:e5:7c:e1:7e:a7:fd:
c3:19:94:91:ca:e5:8c:b1:a3:0a:e3:29:7e:64:29:
8b:ab:c4:9a:0d:5f:f8:52:fb:42:8f:a7:07:f8:73:
b2:30:b4:20:20:6f:b0:f3:0d:b7:26:18:01:56:8b:
bf:fd:0c:13:4d:01:5c:48:38:b6:35:0a:93:8e:8f:
6a:12:f4:7c:8a:8c:59:9e:8a:1f:83:b4:58:01:5b:
eb:56:43:f8:ce:3c:fc:55:4e:bd:03:50:8f:02:e9:
32:de:b2:18:89:e9:cd:6d:09:4b:de:20:19:9d:46:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:2F:FB:E6:12:03:97:7B:C3:9F:A0:8E:27:A7:90:68:5F:EA:C8
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f7:51:b0:5d:b0:01:62:5c:cb:b3:98:32:45:2d:63:2a:aa:
44:1a:41:e3:10:73:b2:39:52:62:11:13:95:97:4b:e1:25:98:
b4:81:1c:7d:b9:09:63:07:00:bb:24:bd:9b:f8:af:9f:9e:e6:
e0:3b:96:fb:96:b2:1c:59:45:17:3c:46:cc:cf:cd:34:98:ed:
b4:0f:bf:cd:0a:4f:ad:67:86:e0:d0:7a:97:79:e7:3d:7b:a7:
ee:e9:77:6d:9b:55:f1:3b:f0:23:4a:86:d7:e2:2a:b0:31:0c:
2b:90:7b:5b:bb:e7:e1:5c:eb:59:38:0a:c5:60:8f:f4:b3:b2:
16:75:a3:b5:ba:3a:15:97:99:36:f7:f6:3a:45:25:92:51:de:
69:49:dc:3e:70:76:68:a1:06:46:c2:ff:de:9f:1c:73:a1:0c:
62:7b:e2:62:47:f9:52:e4:14:f8:bf:7d:b4:64:dc:68:e3:1e:
72:b4:da:44:9a:b1:34:26:7b:54:26:d1:ab:f7:03:ef:ce:69:
d7:a0:87:ba:fa:8f:6a:8d:f2:c7:b1:05:4e:79:d7:61:52:4e:
48:84:2e:9e:83:20:fd:3b:ab:85:76:ae:bf:b3:de:be:30:73:
19:20:c3:59:a2:83:1c:b5:c7:6d:de:d5:4d:b4:aa:03:01:d6:
6d:2a:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:28:18 2026 by rpki-client