Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json)
Hash identifier: ffoHWeOHiE0zCiXA1mJvVVwf4eBTHnsWNu25TbctuJ8=
Subject key identifier: 6B:B5:E1:15:65:B2:7C:DA:91:6C:08:E4:F3:A8:C5:31:EF:0C:62:17
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 019D284D77F266C5FED9E32E2794303A1288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
Manifest number: 09DD
Signing time: Thu 26 Mar 2026 04:00:58 +0000
Manifest this update: Thu 26 Mar 2026 04:00:58 +0000
Manifest next update: Fri 27 Mar 2026 04:00:58 +0000
Files and hashes: 1: CoFj8wqKTvU7pOYnL2WgDpvdELY.roa (hash: SwwUsyZHkvE2PDZCEhOVTo7T7TrLwZ2CcQ1+6tgDIC0=)
2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: O9w/dFMH5iBOZAB4+6D9cQvfPMe92GrR4wAsnzaEjRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:77:f2:66:c5:fe:d9:e3:2e:27:94:30:3a:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: Mar 26 04:00:58 2026 GMT
Not After : Mar 27 04:00:58 2026 GMT
Subject: CN=6bb5e11565b27cda916c08e4f3a8c531ef0c6217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:12:e3:d1:f3:da:4a:a4:e1:ec:1e:6f:2f:
5e:b4:78:da:5f:46:da:e1:ea:1f:bd:01:81:69:d0:
d1:46:c0:1c:e2:78:35:24:20:99:eb:1c:6d:56:f2:
56:06:30:fe:4f:c9:1e:0d:7f:3b:2f:a5:fc:cd:47:
1a:80:e7:8c:bc:10:18:33:97:44:28:ad:5f:ac:fe:
2e:7f:ee:b7:c4:9d:55:d2:87:70:92:10:9b:15:f9:
2b:7e:20:8c:dd:1f:94:77:6f:18:d1:76:87:38:e1:
3c:7d:1a:2f:40:1b:51:56:7f:ec:2b:63:00:1a:e7:
fe:40:35:a8:a5:c4:af:49:30:b9:ed:36:4a:e3:79:
6e:3e:e7:08:04:71:0e:8b:d8:41:05:a3:f5:21:61:
eb:e5:62:b9:10:2c:c5:f8:64:26:5d:e9:73:af:5b:
1a:9f:5f:16:b0:78:12:06:73:fe:1e:1b:e5:d9:b6:
1b:1f:28:d2:8f:25:27:28:e5:cb:7d:d6:4c:3c:70:
8e:39:94:c3:89:17:1b:fc:3b:e0:46:d4:1f:77:f8:
0f:a5:87:37:7e:1b:3a:42:a8:c1:17:2a:68:8f:47:
bf:17:83:e7:45:aa:16:7a:4c:03:13:db:6c:fd:3c:
8c:9a:f4:50:11:aa:79:60:25:00:00:a9:87:a7:5c:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B5:E1:15:65:B2:7C:DA:91:6C:08:E4:F3:A8:C5:31:EF:0C:62:17
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1b:5e:78:b3:67:43:9f:87:37:4f:02:17:86:58:36:a2:e5:
a3:96:c5:53:05:3a:69:2a:90:72:7b:68:f8:1c:47:89:94:38:
ca:be:74:3d:ea:21:85:75:e3:10:7c:b5:1d:4b:a1:66:71:a9:
df:08:bc:d7:40:27:be:ac:00:16:76:40:28:5f:6e:00:7c:18:
6c:95:d7:d2:e2:a5:47:76:06:c8:5a:b3:06:d1:20:16:cb:36:
74:d6:8e:85:c8:d1:ac:c8:36:05:27:a8:49:7b:d0:b6:18:11:
5d:36:e3:7b:d8:c6:be:b1:8b:7b:13:a7:eb:ac:ac:27:0c:b3:
38:d0:6f:62:a1:dd:b8:67:61:34:86:db:48:70:14:b7:e0:73:
77:74:af:14:e0:86:11:82:98:3c:5b:00:df:f0:de:35:d2:6d:
39:27:c6:c9:d6:08:4a:27:28:b3:ad:47:e3:a0:46:07:49:6d:
16:86:26:87:b9:32:ed:63:9d:86:1e:f0:e3:72:1b:24:76:a5:
83:32:51:df:a0:cb:7e:73:71:5f:11:98:cc:5c:67:af:61:cf:
ec:0e:01:84:cf:9a:75:d6:b0:09:32:e6:7f:ad:59:41:e3:c8:
3c:1d:43:19:41:89:ed:92:db:dd:59:ee:8c:21:ec:d2:d1:6b:
f9:c9:e4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:38 2026 by rpki-client