Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
File: IKDFQA4CP5P1GOQwBMM7x50vayE.mft (raw, json)
Hash identifier: 33e3R5rDBQoXVuR9bYmBARtfNFrEXI0oFaUWpEC8Yng=
Subject key identifier: 54:39:2B:CC:65:EE:8F:F7:DA:72:27:86:CB:15:C2:DB:0C:7B:FC:6D
Authority key identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
Certificate issuer: /CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Certificate serial: 01A03D83E952AD2E777DB89275869020DE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
Manifest number: 1A24
Signing time: Wed 26 Aug 2026 10:00:49 +0000
Manifest this update: Wed 26 Aug 2026 10:00:49 +0000
Manifest next update: Thu 27 Aug 2026 10:00:49 +0000
Files and hashes: 1: 9Czc8pDz2K4dQ7wCr5MrteuEqPw.asa (hash: cP6vlJtBeLHClXQjIgZNKEs/XJ829Hz7hO1z+cclK6I=)
2: C79YUpU2iklV_OJjs4h8ac-OjrQ.roa (hash: //CGGQm4W2A3kMycLE3Ro2hRaxk4J3N4m94O7KPhors=)
3: IKDFQA4CP5P1GOQwBMM7x50vayE.crl (hash: VyCjCQgSaresJV0/AZL2X07OAsV1LD8PbM4vs6pOSBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:83:e9:52:ad:2e:77:7d:b8:92:75:86:90:20:de:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Validity
Not Before: Aug 26 10:00:49 2026 GMT
Not After : Aug 27 10:00:49 2026 GMT
Subject: CN=54392bcc65ee8ff7da722786cb15c2db0c7bfc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:ef:cb:7c:7b:6f:1c:68:dd:f4:3e:53:bd:
f4:1a:49:a7:7c:fa:91:92:c4:1d:72:70:3f:de:fc:
c4:7d:c7:b1:d6:48:71:91:ac:b8:51:28:9c:06:cd:
92:84:04:de:c1:9c:8a:a1:59:07:f0:58:5d:15:83:
76:9c:d8:37:00:4a:d3:0b:41:87:f9:7a:56:04:d1:
14:5c:a8:22:0a:5c:0f:7b:c6:15:30:ef:03:ce:5c:
a1:10:2e:2d:29:28:50:78:d0:29:51:74:4b:fe:78:
65:43:3e:02:67:7b:30:83:a0:32:9c:af:ea:b5:59:
1e:07:08:36:55:38:59:24:24:f5:2a:43:fa:81:80:
27:df:be:92:9d:25:2b:13:79:e9:7e:03:67:0b:70:
d2:b0:94:85:a8:11:c7:e3:33:aa:f3:4e:5e:a6:6a:
de:fa:ee:53:d2:9a:37:ec:aa:d6:17:ba:35:8b:c5:
20:ba:f4:90:30:08:4d:43:b5:36:cd:c6:85:a6:d4:
55:05:20:91:2e:bb:be:e8:72:b6:b6:cd:50:94:66:
2a:6f:59:59:63:09:d5:e5:cf:3d:fb:70:1c:7a:5f:
5a:bd:73:09:2a:7e:b5:78:e4:3b:0c:a4:08:56:7d:
bd:97:70:65:bd:43:b7:7f:60:f0:cc:d0:b3:85:65:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:39:2B:CC:65:EE:8F:F7:DA:72:27:86:CB:15:C2:DB:0C:7B:FC:6D
X509v3 Authority Key Identifier:
keyid:20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f8:02:19:04:d7:5c:ca:c1:a0:33:99:f7:46:3c:b9:ac:87:
a6:34:ba:c8:d7:de:da:8c:96:d9:f0:19:9f:68:54:97:a2:a4:
f2:fb:44:70:fe:ed:65:5b:7e:13:c2:45:65:97:89:63:00:4c:
66:09:0a:69:15:fb:6e:42:28:2a:0c:76:48:66:3b:aa:e0:8b:
7b:63:5c:eb:59:f6:c5:0e:10:03:c9:42:58:8c:72:55:7e:1c:
5c:df:ef:f2:3b:f0:ae:d2:7f:e7:9e:e2:c1:17:1a:73:9c:71:
22:cd:6c:a7:66:d9:5e:f4:cd:46:b1:75:4f:93:69:aa:af:7e:
3c:f1:b6:fa:9c:fe:61:e1:ae:b3:01:e4:58:6b:54:3a:5f:bc:
0f:d0:f6:74:35:7e:6b:44:78:87:e4:ff:d7:f0:0d:98:23:6f:
c1:11:a4:2e:e2:b4:ba:eb:8f:c3:a2:73:ad:5a:79:f1:c3:0e:
d0:5e:51:da:51:5d:d7:d1:5f:9e:ee:b6:4c:9b:34:df:55:70:
e0:97:23:c6:58:03:12:67:f4:0d:3d:f1:2a:bb:aa:3f:7a:ef:
1b:a4:f6:57:a7:4d:c5:9a:1d:9d:73:5f:b5:44:b2:98:49:b1:
17:b4:80:b5:8d:fe:3d:77:9f:a0:f8:8a:eb:fd:6c:af:d3:11:
c9:da:79:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:58:22 2026 by rpki-client