Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
File: IPdQab1W78UXA4PtMcrSJGT98DA.mft (raw, json)
Hash identifier: IPqxjZwcbucrb912kuVCOA7gZHPzC4A8BIWf1TdJhaY=
Subject key identifier: 99:49:75:27:59:20:5E:B2:F5:4A:71:D6:B8:EA:8E:CC:C9:95:14:B0
Authority key identifier: 20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
Certificate issuer: /CN=20f75069bd56efc5170383ed31cad22464fdf030
Certificate serial: 01A10926A4A538FA04D80A6DC77C6F795A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
Manifest number: 083A
Signing time: Sun 04 Oct 2026 23:01:29 +0000
Manifest this update: Sun 04 Oct 2026 23:01:29 +0000
Manifest next update: Mon 05 Oct 2026 23:01:29 +0000
Files and hashes: 1: B9E5JactSyIcFQ6PftrFCykRrtA.roa (hash: HKP9soP+n5+otLr1WnVLOerw0oovvQB3aHXqFrem9Bk=)
2: IPdQab1W78UXA4PtMcrSJGT98DA.crl (hash: w69gsbqx4NoT4pKKju5CyyXPv8acoCgsGjnJDKLo75U=)
3: wDCZnmWI33VgfRKA1bq6grP7-lg.roa (hash: pgV8JHt9oCiPvSmsdBWlSVXXDii3zSNwrmrq5yIIZu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:26:a4:a5:38:fa:04:d8:0a:6d:c7:7c:6f:79:5a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f75069bd56efc5170383ed31cad22464fdf030
Validity
Not Before: Oct 4 23:01:29 2026 GMT
Not After : Oct 5 23:01:29 2026 GMT
Subject: CN=9949752759205eb2f54a71d6b8ea8eccc99514b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:d0:11:72:d9:48:2d:42:bb:84:52:5d:1a:
fe:0e:b4:39:89:5e:0e:e2:9a:ff:da:bd:07:fe:6b:
ce:d7:0c:fe:9d:88:52:e8:8e:e3:96:e9:93:65:e0:
41:48:43:e0:5a:18:4c:8a:66:1e:cd:49:92:38:cd:
0e:ac:3c:8b:2d:7f:01:0c:bd:19:bc:b2:8e:b0:a3:
00:23:3c:9d:e3:4b:d1:14:ed:5f:8a:3e:78:41:5e:
b8:7c:3a:e2:e9:75:a8:45:8c:11:38:81:89:01:a5:
22:10:d1:f7:c2:3f:59:de:4e:1b:5b:37:c6:48:4e:
9d:66:ee:db:ef:59:7b:f1:1f:d8:eb:c1:7e:b9:80:
39:96:a0:18:f6:df:66:66:80:85:8d:22:b3:f7:c4:
82:c2:de:66:17:28:ae:84:fb:51:15:46:b8:e3:d4:
08:e2:63:34:2d:68:56:01:d6:a4:51:30:67:f0:81:
1b:fe:c9:f8:b1:21:d7:24:96:c8:ee:fc:2f:88:48:
44:39:7f:a7:04:fb:69:e5:46:04:76:e3:78:cf:bd:
02:2d:9b:c7:99:53:1a:4c:9e:f7:9a:73:b2:23:0b:
c2:59:40:5f:2e:69:00:9f:02:1d:f1:63:8b:92:53:
0f:ea:c2:54:99:7b:6b:dc:4a:53:fe:01:26:28:78:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:75:27:59:20:5E:B2:F5:4A:71:D6:B8:EA:8E:CC:C9:95:14:B0
X509v3 Authority Key Identifier:
keyid:20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:52:4d:1c:d2:8d:f6:4f:e5:52:34:d6:0b:3d:a2:4a:33:a4:
d5:4a:33:51:c9:d4:0a:5e:a5:a3:e5:20:d3:4e:20:ef:05:ae:
0c:c7:2b:ec:e6:50:71:da:78:2a:ca:7a:12:44:57:e6:2b:3c:
ca:6c:d2:f2:be:3a:74:c0:07:b7:4f:66:6e:e0:58:d1:82:2c:
4a:5c:ce:d2:77:a5:85:13:fc:14:47:52:ce:82:45:64:5e:44:
b5:71:6f:8f:a5:1c:c4:d7:c5:63:ee:f8:cd:e5:b2:e8:ce:07:
0e:16:f2:24:b3:89:ca:4c:3b:b6:1e:15:55:b2:f9:9e:64:37:
44:fc:da:e7:9c:44:32:6e:4a:e3:cf:4c:a2:b4:7d:f2:25:33:
b5:99:a2:cb:26:01:0e:bc:63:4a:0d:c2:33:54:b0:b4:be:e4:
d3:95:2b:90:fd:76:fb:fa:9a:2e:89:c6:ff:a5:89:55:08:d5:
b9:43:6f:15:cc:e4:cb:8b:42:f9:b8:bb:12:ed:39:e9:66:f0:
33:35:55:05:56:63:ff:c0:aa:ae:dd:4c:f3:93:2e:7a:51:41:
08:79:32:6a:b3:d4:c4:38:b3:33:1e:e8:46:bc:5f:bf:3b:43:
f6:50:4d:95:b0:39:db:af:ad:7c:65:67:02:68:ea:e3:6c:f6:
dc:73:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:17:48 2026 by rpki-client