Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: ZoOyEtI2utxiITOg5JOImWje4ndHeosbi9BYayjVoDo=
Subject key identifier: 4F:84:22:B6:85:51:B0:10:0B:33:DC:A2:92:F1:8F:EC:6B:07:87:26
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 01A1781627D7A6C4F9F7BF1B3CE171BE76F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 043D
Signing time: Mon 26 Oct 2026 12:01:20 +0000
Manifest this update: Mon 26 Oct 2026 12:01:20 +0000
Manifest next update: Tue 27 Oct 2026 12:01:20 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: Obz+y2E3gydVSZIao0sDxcTVhY7tL1PnrOpNLzBCFPc=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:27:d7:a6:c4:f9:f7:bf:1b:3c:e1:71:be:76:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Oct 26 12:01:20 2026 GMT
Not After : Oct 27 12:01:20 2026 GMT
Subject: CN=4f8422b68551b0100b33dca292f18fec6b078726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:ed:8d:84:8f:be:84:e5:fd:37:17:6d:05:
7e:9a:1c:85:bd:f7:3a:16:cc:6b:24:ff:ac:cc:2e:
9b:ed:85:5b:dc:4b:e2:b8:4d:2c:89:27:41:6b:d2:
7c:60:61:93:c1:a0:2f:5d:bc:aa:83:bb:04:be:b4:
64:78:e8:0c:9f:cf:24:59:77:1f:c0:38:4f:12:8e:
18:65:8b:e6:ac:2d:4c:32:4e:03:5f:ad:30:72:53:
bd:a3:39:ce:56:69:b4:10:3e:8e:f4:b2:f5:3e:eb:
c8:55:84:f4:77:32:c5:d5:20:7b:24:76:96:a6:72:
b0:75:b8:03:04:e7:65:75:12:65:8b:b6:92:9d:dd:
f9:aa:b2:fd:23:84:61:c6:c2:9b:3c:6b:cd:ed:5a:
3c:72:12:fd:c8:3c:e0:2e:b7:ea:5c:cd:7b:b6:ad:
c2:85:ba:6e:be:03:28:f5:59:8d:04:f4:85:7d:90:
55:64:87:00:ad:22:a2:b8:82:d0:df:07:f5:03:3a:
f4:5f:9b:0c:ad:af:2f:6a:a5:c1:25:1b:91:ab:29:
5b:0c:9f:45:c1:c7:7f:53:70:cf:e2:bb:ef:69:21:
1f:b3:02:e3:6b:ea:b9:78:d9:b1:35:69:23:f3:5a:
13:70:d1:bb:6c:07:7b:58:4e:52:a8:26:ef:98:b8:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:22:B6:85:51:B0:10:0B:33:DC:A2:92:F1:8F:EC:6B:07:87:26
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8b:52:61:53:0d:da:b7:00:23:e8:52:bd:83:b8:74:12:a2:
30:89:a9:6f:45:86:5e:e3:a1:08:c9:95:68:2e:54:d4:0e:12:
31:3a:31:d5:a2:69:6f:8d:02:79:d5:21:4a:9f:91:9a:a8:41:
ca:5a:ff:c8:21:38:6b:55:a7:98:12:94:f7:a9:2d:ef:92:af:
07:ee:6a:15:89:ff:30:cc:3d:38:53:f3:23:93:37:6b:e1:95:
c6:bd:23:7d:70:61:29:f6:a8:96:cd:82:f0:8a:4d:38:9d:78:
cf:00:d4:25:ce:19:64:9a:46:99:88:8c:cf:c8:25:03:91:c9:
92:de:96:d3:13:2b:3a:d1:4e:5b:36:c6:d1:e1:68:18:5e:f2:
9a:ca:c6:85:f7:81:e9:41:90:83:6a:6b:b2:ff:18:db:49:72:
e1:f9:9b:67:d4:d7:6a:76:12:72:70:b3:f0:10:b5:16:c0:ae:
bb:30:3c:7d:4c:69:1c:4b:16:4a:d9:78:3d:a5:8d:d8:99:83:
e9:5f:4b:4b:1a:fd:b4:93:f2:c8:90:e5:8b:a5:b1:23:30:f5:
c3:da:ab:b0:b3:a1:fa:df:5d:bf:0b:6e:7c:01:3e:a2:06:ff:
d4:71:11:6e:84:73:7c:f9:59:75:ce:17:b6:d2:59:4e:14:73:
96:08:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:10:24 2026 by rpki-client