Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
File: IPdQab1W78UXA4PtMcrSJGT98DA.mft (raw, json)
Hash identifier: DOW3Ai0HUwC1ZmAU0JT4z/XeIvNTweEFD6aA0yiBbX0=
Subject key identifier: 5A:2C:92:72:06:31:FC:05:44:49:78:FE:D9:A5:E5:6D:A0:F9:B4:E1
Authority key identifier: 20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
Certificate issuer: /CN=20f75069bd56efc5170383ed31cad22464fdf030
Certificate serial: 01A004706B325FBE258B0159D19C5979C85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
Manifest number: 07B3
Signing time: Sat 15 Aug 2026 08:01:11 +0000
Manifest this update: Sat 15 Aug 2026 08:01:11 +0000
Manifest next update: Sun 16 Aug 2026 08:01:11 +0000
Files and hashes: 1: B9E5JactSyIcFQ6PftrFCykRrtA.roa (hash: HKP9soP+n5+otLr1WnVLOerw0oovvQB3aHXqFrem9Bk=)
2: IPdQab1W78UXA4PtMcrSJGT98DA.crl (hash: L9bhWLZACIqeKH2PttdVjGP6uR/5vVuvSj7J9GE1WRc=)
3: wDCZnmWI33VgfRKA1bq6grP7-lg.roa (hash: pgV8JHt9oCiPvSmsdBWlSVXXDii3zSNwrmrq5yIIZu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:70:6b:32:5f:be:25:8b:01:59:d1:9c:59:79:c8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f75069bd56efc5170383ed31cad22464fdf030
Validity
Not Before: Aug 15 08:01:11 2026 GMT
Not After : Aug 16 08:01:11 2026 GMT
Subject: CN=5a2c92720631fc05444978fed9a5e56da0f9b4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:2d:a0:84:6e:e0:cc:f9:2f:8e:f2:69:66:
f9:0e:74:67:ff:25:4f:26:49:c8:3e:b9:1f:0f:b9:
1a:3e:33:f1:95:f4:b1:b4:1b:03:30:23:62:62:7e:
4d:24:26:3f:e8:7e:85:f1:0f:c1:e5:92:67:e0:8b:
25:cb:2d:ec:51:6b:d5:43:de:63:bd:a0:f3:ca:0a:
e9:25:54:8e:48:07:c1:e6:e2:40:07:8d:42:7d:17:
bf:87:af:5a:a9:5e:d8:c7:73:32:9f:82:48:a5:ec:
cd:8e:e9:88:db:4c:a4:4c:1e:03:95:25:91:6b:80:
c9:ba:2e:4c:e6:b5:6f:00:06:77:f0:d6:34:b9:62:
88:e7:2a:f3:a5:35:40:0e:f3:1b:d6:5e:56:47:d1:
12:36:96:0d:bc:aa:18:81:c3:da:d4:e3:50:83:77:
1c:04:16:37:c6:1c:8e:10:50:a9:dc:a5:eb:5d:29:
a8:b7:4d:44:ae:98:3e:e3:1e:f4:20:c6:8f:75:b2:
2f:e1:d6:5f:47:fe:ef:d7:dc:12:12:e5:9a:11:34:
e0:92:fa:e3:56:0e:bf:47:7e:f4:4b:b5:1c:7d:79:
fd:d7:82:30:03:0f:3b:95:34:c6:38:c2:2d:f5:72:
ec:ea:35:b4:be:10:1b:b9:fd:63:81:fa:9a:bd:06:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:92:72:06:31:FC:05:44:49:78:FE:D9:A5:E5:6D:A0:F9:B4:E1
X509v3 Authority Key Identifier:
keyid:20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:de:26:b2:c1:d4:ad:d6:ba:d8:4f:16:fb:72:f9:ce:9f:ef:
c4:57:9a:d8:0c:a4:a5:3b:b5:59:6f:a1:5b:72:c5:72:77:ca:
8f:7d:b6:1a:8c:16:9c:8b:56:08:b4:8c:38:ab:6f:15:7d:19:
18:b3:9a:8a:20:ba:da:23:aa:e0:0b:c2:50:7b:0f:00:0e:02:
49:8d:6c:80:31:a0:71:13:f2:2f:4d:6f:77:8c:03:1d:23:c6:
d8:59:a2:c2:70:42:3c:2e:d5:67:07:97:b0:b1:fc:9d:1f:66:
2f:fe:0d:35:22:c4:53:10:81:f5:45:a1:27:d2:f5:d4:ee:98:
2b:08:bf:70:99:e0:9a:4c:36:a1:08:19:d4:88:b4:83:de:38:
24:31:39:38:1d:8e:d6:64:89:34:8c:73:08:a4:98:b5:ad:12:
08:e5:ea:fd:50:7b:af:b5:99:63:74:e3:fc:e8:96:fd:bd:9f:
e4:83:71:a9:43:6b:39:07:9c:e8:77:1f:a5:64:38:15:01:95:
b3:57:a4:01:d6:9b:f7:1d:2f:5a:11:c8:46:c8:cb:ee:83:da:
ec:9a:13:a0:9b:d0:1e:66:ae:4a:07:4e:2f:db:43:6e:92:51:
93:09:ba:1f:3f:6d:54:2f:c5:e8:9c:55:22:8b:10:02:9d:b0:
cb:b2:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:59:25 2026 by rpki-client