Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: d6yIt0oiYBPXxuoQ7smCapMsCz15COdC/3aPGt3r9kc=
Subject key identifier: 75:2D:2E:23:65:DC:D4:61:C2:C0:CD:FE:C6:9A:43:67:62:25:37:FF
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 019FA184465705F87E310CCC724601A72009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 13A0
Signing time: Mon 27 Jul 2026 03:00:28 +0000
Manifest this update: Mon 27 Jul 2026 03:00:28 +0000
Manifest next update: Tue 28 Jul 2026 03:00:28 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: ceOVdfTypp43AsOtkk4EjouK768WmGA1wgVDNgDTd6k=)
2: OIqVwV7eJRjge3Y7JoI6UT8DyHg.roa (hash: 1a+xm03EcG4NIWojKcu02C40HTOK/Zidn5fuQN++My8=)
3: RvjdrZHQvT2b90nWXdsgoaDdips.roa (hash: qK/UmJeSS3Eli2K0IV23Gv9PIRqLGK5MHBRUfrzwD3E=)
4: YfMmn3NTxzanjSoW2CgtmSyKoBw.roa (hash: R1/beSy+NbtBJBgUSOR66DtF7b/TO6ueQaOcS29ElbE=)
5: osG6SqIqqmIP3iBJplJkK58I_pQ.roa (hash: b1xSqqWBFOEz+K1E0t9Y9zbsAyRCIW7qvBJSCpg4lHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:46:57:05:f8:7e:31:0c:cc:72:46:01:a7:20:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jul 27 03:00:28 2026 GMT
Not After : Jul 28 03:00:28 2026 GMT
Subject: CN=752d2e2365dcd461c2c0cdfec69a4367622537ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:c6:d9:85:52:ea:3f:a6:5c:03:7c:17:c9:
69:5f:11:fd:bf:b2:6e:92:52:81:aa:a6:19:27:42:
26:15:50:19:f3:26:2d:bd:35:f8:af:cf:9c:6d:a3:
bc:ea:2e:54:4a:8f:1c:1f:6f:dd:e2:35:41:84:1a:
b0:3f:0d:fd:41:50:8c:0a:4b:52:9a:1f:57:43:a4:
96:a3:4e:39:77:7a:5c:bd:57:b9:b5:56:9f:15:60:
0a:d7:6b:05:0e:31:39:fd:65:a8:24:b3:46:24:c4:
f0:ff:00:ad:69:71:a6:ef:83:88:ed:03:f7:93:13:
85:b7:21:4b:d2:d7:6c:4a:6c:4e:5d:59:fb:bd:29:
19:1e:ce:f0:65:91:88:a2:cc:0a:f7:40:fb:24:4b:
8c:38:73:49:43:40:d6:23:73:a8:01:72:a2:f3:e3:
ed:ce:eb:53:51:e2:63:55:49:cb:cc:d2:92:e1:25:
ca:86:03:bf:0a:96:09:e4:e9:ab:44:e3:cc:fa:1d:
4c:50:33:98:e9:6c:d8:d3:96:33:da:ee:3c:48:71:
e9:b2:9c:e4:1a:e3:e3:2e:6f:79:2d:9b:fc:51:83:
a1:71:df:fc:c8:03:95:bb:8b:1d:b0:15:68:f7:f5:
49:a4:66:7d:c5:d4:ff:24:53:a0:a7:24:d5:8b:6e:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:2E:23:65:DC:D4:61:C2:C0:CD:FE:C6:9A:43:67:62:25:37:FF
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:09:bf:e5:0f:00:2c:b3:bf:2c:1f:0e:dc:0c:8b:7e:e0:6c:
95:00:fc:20:fd:06:12:c0:b4:ee:b7:bb:3e:23:0f:e3:90:25:
e1:7a:67:5d:b3:5c:9c:00:66:6a:48:1c:62:cd:5d:30:25:85:
ad:8a:54:be:5d:39:da:c3:7e:53:33:7f:ac:ff:36:6c:8b:93:
70:f4:37:43:c2:c1:8c:53:d7:a4:3b:35:f1:12:34:a1:6e:d8:
f1:f0:4d:5e:bd:90:ab:95:6d:fa:b5:34:b0:26:5d:f4:fc:84:
02:02:e4:74:01:8c:78:05:31:42:4f:84:6d:f7:cb:2a:a4:92:
0f:b4:96:cd:70:d0:15:9a:8f:91:e2:a3:fe:ec:06:1b:5e:15:
e7:d5:ea:c2:cf:a1:6b:53:be:97:54:dc:97:23:40:14:3a:b0:
51:58:dd:e0:61:0d:53:25:c3:c5:ca:74:98:3e:57:e2:b6:7f:
ae:30:03:c8:c0:7d:65:0f:ac:01:27:d2:80:e9:c8:ed:ac:4f:
56:f8:3a:95:29:db:f6:54:d5:79:75:14:3e:b6:de:74:ef:fc:
48:f0:2f:df:7d:64:f5:03:f2:54:db:ae:b6:59:11:eb:58:fa:
38:fd:66:bf:56:55:94:2c:21:f5:01:90:4c:2b:05:3d:97:72:
35:9e:a4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:27:24 2026 by rpki-client