Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: J9P81QyqlK7uaNA1qP9qCRUDgi6AmcYMeM9FIgmtp2g=
Subject key identifier: 68:A3:90:83:DA:14:7D:96:E5:59:08:4A:77:C3:2C:7D:AE:25:D1:49
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 01A08B31C3D5F40A1607F1927C84E6382B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 1419
Signing time: Thu 10 Sep 2026 12:01:29 +0000
Manifest this update: Thu 10 Sep 2026 12:01:29 +0000
Manifest next update: Fri 11 Sep 2026 12:01:29 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: CyUJiejUt1asSWFYoeX0bIzevS5nBt9mJTyz3UbwNak=)
2: OIqVwV7eJRjge3Y7JoI6UT8DyHg.roa (hash: 1a+xm03EcG4NIWojKcu02C40HTOK/Zidn5fuQN++My8=)
3: RvjdrZHQvT2b90nWXdsgoaDdips.roa (hash: qK/UmJeSS3Eli2K0IV23Gv9PIRqLGK5MHBRUfrzwD3E=)
4: YfMmn3NTxzanjSoW2CgtmSyKoBw.roa (hash: R1/beSy+NbtBJBgUSOR66DtF7b/TO6ueQaOcS29ElbE=)
5: osG6SqIqqmIP3iBJplJkK58I_pQ.roa (hash: b1xSqqWBFOEz+K1E0t9Y9zbsAyRCIW7qvBJSCpg4lHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:c3:d5:f4:0a:16:07:f1:92:7c:84:e6:38:2b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Sep 10 12:01:29 2026 GMT
Not After : Sep 11 12:01:29 2026 GMT
Subject: CN=68a39083da147d96e559084a77c32c7dae25d149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:8f:09:0e:3d:de:67:c0:79:6e:9f:5b:2c:
60:c1:81:8e:e2:d1:c3:b0:d4:60:b2:b9:d9:4f:fa:
12:30:2c:11:a7:84:a0:23:44:a2:e7:ee:2f:d0:52:
31:c0:81:9d:c8:28:96:15:f4:2d:03:71:dd:cc:5d:
63:b3:4f:c4:04:dd:64:d5:06:90:2f:d1:b3:e3:3c:
1f:b1:e0:e0:44:40:b8:e9:93:c6:b9:c9:62:19:6e:
0d:fd:5a:86:f5:c3:7e:4f:38:43:1b:0f:a1:7a:4b:
58:24:5a:01:54:6c:b1:df:2a:29:1d:c7:68:6e:aa:
2c:c0:a9:a6:2d:5b:38:30:5c:93:57:ff:32:85:16:
6b:44:08:15:9d:37:5f:af:b9:1d:56:6c:6b:52:13:
5e:67:03:d0:49:33:5c:d5:05:3c:05:a1:4f:71:07:
6e:2a:39:14:52:37:d8:3f:07:d7:dd:6c:4b:c5:8e:
35:63:35:37:05:3d:82:9e:bb:f6:17:5f:23:f1:03:
95:85:f7:f9:3d:d1:11:1a:a4:8a:45:68:49:6e:ed:
82:e0:02:9e:4c:c2:93:14:a0:4d:15:57:f4:d6:4b:
ab:1c:83:e3:fd:19:41:db:c9:a8:9e:1f:17:e6:8c:
44:c3:56:20:bb:f9:46:db:86:70:08:9f:32:a1:23:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A3:90:83:DA:14:7D:96:E5:59:08:4A:77:C3:2C:7D:AE:25:D1:49
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b3:5a:68:d9:f7:e4:62:65:ab:83:70:5c:a2:5d:4b:0c:37:
dd:b2:5d:a3:36:78:37:88:fa:e5:7a:f7:9d:6c:f9:5a:e3:34:
37:4d:a7:08:ef:a2:f3:d1:67:56:a7:d1:0b:8e:ce:66:51:ad:
ab:39:6d:2c:3c:9a:ca:1e:73:78:1a:29:26:c7:b1:ba:12:ac:
cb:1d:a6:dd:67:94:58:ea:12:d5:d7:05:c6:88:07:ce:df:03:
9c:18:a5:9a:15:20:86:be:fb:5e:92:1a:ab:06:91:ec:b8:01:
f8:1f:5f:88:fd:eb:76:ac:17:3c:12:4a:dc:31:45:bd:38:94:
e9:6d:ad:69:ab:0e:e8:10:24:b2:b5:8b:7a:24:6f:8a:aa:b3:
14:e3:7c:a1:0b:11:86:08:5c:13:2b:86:c2:14:5c:da:4a:d8:
db:72:31:f0:cb:98:1f:df:9a:27:89:46:bf:db:7c:1c:25:c9:
ee:28:7d:c9:76:f2:d8:b3:f7:0f:99:6d:12:73:b4:dd:c4:b5:
69:70:16:a2:36:59:a8:3d:49:39:46:7e:e6:78:21:3e:05:07:
33:37:8e:f7:11:80:3d:77:55:f6:73:f6:c2:c8:ef:e2:2a:de:
f7:b2:e8:f6:e2:f7:93:92:bb:de:54:12:bc:da:6f:e9:6a:ac:
f2:67:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:16 2026 by rpki-client