Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
File: I1OA88jQvU73nc_B8qNk738QDTE.mft (raw, json)
Hash identifier: hGwTAEcupqeHpZ6uHFIKfWprYnldX2olmysmeeVikeg=
Subject key identifier: 6F:FD:83:72:9A:DC:85:E3:C9:E0:C5:C0:BF:6C:AB:25:DD:47:13:7B
Authority key identifier: 23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
Certificate issuer: /CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Certificate serial: 01A0DF86102A11D971685913868981EC7670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:01:40 +0000
Manifest this update: Sat 26 Sep 2026 21:01:40 +0000
Manifest next update: Sun 27 Sep 2026 21:01:40 +0000
Files and hashes: 1: 2nvjaO-9QgHUIDo_0O1ylwBW6vQ.roa (hash: oiGKpPGm6qpApMCxU6UFVXeU7Do4Gkz7nDJJxifitKA=)
2: I1OA88jQvU73nc_B8qNk738QDTE.crl (hash: pn+7pWphuOpuwJNJgVJ2oXlvJCOsFIv617OqnXH7cRI=)
3: L3EC22kCSbgO1zCyaBa1frjR2pE.roa (hash: w8QsFoIi60jEHJ7Xofqwu1zr9PxRQqzEho5zefrGjYg=)
4: pxlXr9sUSjIqFgXbd9sR-GcE580.roa (hash: QivBnRPkhkpLbexDZpsfTuH4eBEzkCeooTxQJXFlmDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:10:2a:11:d9:71:68:59:13:86:89:81:ec:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Validity
Not Before: Sep 26 21:01:40 2026 GMT
Not After : Sep 27 21:01:40 2026 GMT
Subject: CN=6ffd83729adc85e3c9e0c5c0bf6cab25dd47137b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:c9:8f:0e:04:20:fe:f9:e0:cd:1f:29:66:
ab:a1:e1:01:a7:fa:09:fe:3e:99:b9:c2:6c:5d:15:
c1:c5:7d:2a:9e:b8:11:7e:f2:49:40:00:de:2a:49:
d2:21:be:0d:c4:68:c9:79:03:88:64:38:04:d3:d6:
65:f9:a7:9f:20:58:ac:2a:f2:bb:11:31:7c:bf:90:
3c:48:50:49:2f:8c:fe:a8:61:e6:c0:b6:34:7e:e5:
cc:70:90:b6:bb:08:e8:dc:45:84:49:3d:9b:86:42:
67:8e:47:60:ea:07:c7:54:64:2e:15:ef:1b:73:3b:
a9:93:7b:c3:3a:5e:30:11:20:ff:19:8b:f2:8f:11:
a7:e8:55:da:3e:e6:9a:a4:1f:1b:5f:a1:4a:f5:b0:
63:79:4e:d3:f2:07:da:89:44:5c:3f:8f:fc:a7:93:
7a:63:e6:3b:20:97:4b:1f:2c:e2:9c:f7:cb:75:98:
47:1c:31:83:5f:97:e3:cf:97:0d:b0:19:34:ba:13:
de:bc:dc:13:3c:5d:26:5e:38:92:62:4b:b3:b0:b5:
6c:76:37:ec:77:c5:4d:61:ad:7b:bf:e3:6a:77:97:
5b:4e:4c:da:57:01:d8:5c:8b:77:71:21:4f:21:7e:
69:44:43:7f:e5:9e:f4:e3:e1:b0:29:8b:8c:d0:b3:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:83:72:9A:DC:85:E3:C9:E0:C5:C0:BF:6C:AB:25:DD:47:13:7B
X509v3 Authority Key Identifier:
keyid:23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ae:ff:68:2e:9c:6a:5e:88:89:52:6c:a4:ce:30:1b:bd:e8:
17:75:09:e7:c1:d8:96:a3:c7:d7:e7:2f:f6:a3:68:8f:a7:b5:
5f:f3:ca:50:6b:d0:04:4f:59:db:ae:b3:72:37:6e:3c:9f:91:
2b:ca:94:fe:da:d8:4d:83:d9:f4:7e:59:5d:e7:54:11:d8:25:
23:4d:83:28:c4:64:64:22:68:0c:40:c5:75:9f:ab:d8:98:af:
fb:c6:96:e2:97:9f:18:16:ad:f5:b2:db:0f:77:99:bb:f0:59:
66:b3:36:92:5b:fb:cd:65:37:ed:f7:2e:fd:df:c2:be:af:dc:
42:56:c5:20:a1:36:68:a5:93:d6:e0:c7:44:7f:76:d6:f0:de:
e8:5c:79:ee:f3:a9:e1:ce:7b:e9:0e:7a:da:7e:56:67:f7:b7:
f1:25:df:76:a1:af:f2:5e:5c:7d:28:59:c8:f7:db:73:2a:99:
c4:44:2d:5f:e8:3c:d1:e9:c3:a0:1a:33:56:33:53:2c:be:da:
36:bb:32:4e:b7:63:be:d0:74:4b:a3:ec:5e:d4:a1:5c:20:05:
92:bb:19:36:5e:c6:3b:0f:98:c8:e4:59:bf:5d:fd:88:94:4a:
c2:85:ad:c9:c4:30:86:ef:a3:58:99:0b:f4:43:09:cb:92:da:
33:d9:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:24:03 2026 by rpki-client