Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: 3T0n1TStd/yiuAnGzAJTstd3wya9UTFsoZkOhSWd6og=
Subject key identifier: 03:CE:55:96:90:EC:E4:2F:10:C9:AF:0A:85:6D:3B:E2:91:8A:7D:24
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019F85D632309738FD7FC02226FE57E505AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 033B
Signing time: Tue 21 Jul 2026 18:00:34 +0000
Manifest this update: Tue 21 Jul 2026 18:00:34 +0000
Manifest next update: Wed 22 Jul 2026 18:00:34 +0000
Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=)
2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: VJjKOk/5ZHFZ0EVTK/EMQEj6dmAMorJLw9GvLt6h23Y=)
3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=)
4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:32:30:97:38:fd:7f:c0:22:26:fe:57:e5:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Jul 21 18:00:34 2026 GMT
Not After : Jul 22 18:00:34 2026 GMT
Subject: CN=03ce559690ece42f10c9af0a856d3be2918a7d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:11:44:f3:bc:28:de:4b:56:4d:fa:9b:3e:
0f:e1:b5:8f:fc:f4:f3:bf:de:f5:4e:ab:bd:a0:21:
8a:3c:1b:ec:f3:81:39:4b:e0:cf:13:7a:3f:cf:16:
67:fe:ed:b2:47:4e:0a:61:9c:0e:d5:68:a6:8e:7d:
6f:46:3e:3d:62:97:4e:c9:2d:39:18:be:04:55:5b:
b6:e3:29:c6:67:89:63:ac:95:43:ee:c7:9d:6d:8d:
54:1f:81:0e:98:4f:b0:79:c8:66:a2:b7:aa:e9:f1:
c5:eb:bd:34:3c:4c:a5:a9:80:75:58:16:d6:60:5c:
e9:fb:1e:61:c5:cf:88:ab:fe:9c:7f:bd:34:95:3d:
cb:dc:c7:51:17:09:ac:e1:b0:cf:e4:bb:5a:f2:e6:
be:3d:16:6a:bc:b6:eb:54:01:d0:2c:9f:1c:df:60:
6c:f4:b6:53:0b:35:aa:4a:7f:7a:69:98:c6:05:e8:
1a:cb:0f:09:cc:7d:c2:ee:b8:08:53:d6:20:2b:51:
d2:58:47:82:8e:1d:3a:28:6a:92:22:22:dc:32:b8:
17:13:b7:d9:d8:05:01:d2:84:39:a9:d1:53:10:97:
78:24:c9:66:7c:21:cc:66:be:13:1e:39:a1:de:fb:
10:bf:d1:62:89:22:18:72:44:18:43:f0:c3:ac:7b:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:55:96:90:EC:E4:2F:10:C9:AF:0A:85:6D:3B:E2:91:8A:7D:24
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:14:0d:3d:fc:9b:ee:f5:5c:7f:19:f6:f7:99:40:e9:dd:33:
c8:54:18:f1:d0:85:ef:0e:a7:a9:5f:4c:9a:96:84:44:4d:12:
cc:bc:90:27:8d:65:91:b8:42:82:4f:bc:c5:f5:f7:68:62:f6:
4d:30:b8:76:1b:35:e2:e6:f7:8c:ff:76:bd:46:81:59:3f:64:
a4:d9:28:08:4f:42:68:dd:dd:4a:c2:2c:c6:3f:39:30:3d:8e:
e3:28:48:9c:54:30:9e:f0:ac:60:04:8e:96:b1:f1:c7:30:dd:
91:89:af:39:b5:54:e9:0d:c0:53:82:a5:fe:63:bf:46:dc:cd:
4f:d7:16:86:5a:02:cd:ad:18:48:49:49:65:31:78:2c:3f:4a:
b0:c5:da:f1:5f:4e:ea:cc:a1:64:7d:d7:df:3f:33:f7:52:7d:
f4:ac:c8:44:2f:67:74:f0:64:1c:de:57:85:b2:59:d1:1d:90:
cc:9b:e1:2c:e4:47:95:02:3a:0f:89:6c:35:fe:44:6e:c8:75:
3a:00:7a:aa:b7:c4:b3:0b:93:43:e0:9f:e0:ea:09:ea:35:58:
3f:0c:89:39:8b:c4:97:7e:e4:50:a4:7c:05:37:66:e8:0f:19:
fc:1d:be:6b:5e:da:43:3e:bd:52:07:0e:23:bf:fd:05:92:c5:
02:3b:17:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1jIwlzj9f8AiJv5X5QWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh
NjU4MjkwHhcNMjYwNzIxMTgwMDM0WhcNMjYwNzIyMTgwMDM0WjAzMTEwLwYDVQQD
EygwM2NlNTU5NjkwZWNlNDJmMTBjOWFmMGE4NTZkM2JlMjkxOGE3ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vIRRPO8KN5LVk36mz4P4bWP/PTz
v971Tqu9oCGKPBvs84E5S+DPE3o/zxZn/u2yR04KYZwO1Wimjn1vRj49YpdOyS05
GL4EVVu24ynGZ4ljrJVD7sedbY1UH4EOmE+wechmoreq6fHF6700PEylqYB1WBbW
YFzp+x5hxc+Iq/6cf700lT3L3MdRFwms4bDP5Lta8ua+PRZqvLbrVAHQLJ8c32Bs
9LZTCzWqSn96aZjGBegayw8JzH3C7rgIU9YgK1HSWEeCjh06KGqSIiLcMrgXE7fZ
2AUB0oQ5qdFTEJd4JMlmfCHMZr4THjmh3vsQv9FiiSIYckQYQ/DDrHuXOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPOVZaQ7OQvEMmvCoVtO+KRin0kMB8GA1UdIwQY
MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt
ZWQ1ZjAwYzk1MDY3LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3
LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBQNPfyb
7vVcfxn295lA6d0zyFQY8dCF7w6nqV9MmpaERE0SzLyQJ41lkbhCgk+8xfX3aGL2
TTC4dhs14ub3jP92vUaBWT9kpNkoCE9CaN3dSsIsxj85MD2O4yhInFQwnvCsYASO
lrHxxzDdkYmvObVU6Q3AU4Kl/mO/RtzNT9cWhloCza0YSElJZTF4LD9KsMXa8V9O
6syhZH3X3z8z91J99KzIRC9ndPBkHN5XhbJZ0R2QzJvhLORHlQI6D4lsNf5Ebsh1
OgB6qrfEswuTQ+Cf4OoJ6jVYPwyJOYvEl37kUKR8BTdm6A8Z/B2+a17aQz69UgcO
I7/9BZLFAjsXyg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:28:12 2026 by rpki-client