Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: gR2zoc66WUP5j7A2jwzNosvc5h+L/JFVWXre4t3RaDY=
Subject key identifier: E0:BE:36:37:89:C2:35:08:8E:A8:F5:0C:E8:5C:10:BC:8E:40:1E:58
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 01A0D983C3FB388BBD8CA7EDFFC980EF13B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 17:01:26 +0000
Manifest this update: Fri 25 Sep 2026 17:01:26 +0000
Manifest next update: Sat 26 Sep 2026 17:01:26 +0000
Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=)
2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: TQzRwV0NgMDYQKx6bMxhMIql1ABQhpP7hslz3pdq/vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:c3:fb:38:8b:bd:8c:a7:ed:ff:c9:80:ef:13:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Sep 25 17:01:26 2026 GMT
Not After : Sep 26 17:01:26 2026 GMT
Subject: CN=e0be363789c235088ea8f50ce85c10bc8e401e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:09:58:bd:0c:b1:e5:4f:44:dd:43:ad:77:
c6:19:7e:51:7a:5d:99:03:7b:30:cf:4e:3a:63:3f:
e8:27:2a:e1:b6:26:9c:73:6a:c3:15:f1:65:3e:99:
9e:5a:53:a2:4c:90:56:8e:50:83:b2:5d:f7:d3:6f:
46:d3:57:b1:d4:4a:eb:7b:08:66:f0:7a:bd:a4:05:
1c:c5:65:eb:61:6e:89:98:39:08:8b:a6:b7:04:7d:
01:6c:57:49:57:c2:a0:78:d0:d5:11:c8:42:05:99:
ac:ca:13:8d:e8:b1:27:10:5a:30:61:11:67:e1:81:
24:16:6e:2f:b6:20:dc:04:25:3a:2f:8b:78:19:2b:
98:e3:47:2e:65:81:16:47:0e:0f:d9:fa:28:e8:33:
2c:2d:39:75:88:a7:13:27:0a:b4:2b:a9:46:30:85:
e4:5e:72:ce:2d:65:96:23:45:49:a8:6e:7d:9e:af:
af:a5:f9:c9:c5:a0:25:44:48:85:59:d8:62:ec:88:
b7:19:8c:a8:56:76:51:42:08:91:8f:98:b9:0a:63:
f6:44:6f:66:fd:2e:c7:c5:93:58:94:51:6f:73:b9:
78:24:3c:77:4e:bb:df:54:9e:66:01:c6:9e:23:d8:
65:0f:f2:81:01:0b:bc:7f:ec:48:c7:0f:af:8f:29:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:36:37:89:C2:35:08:8E:A8:F5:0C:E8:5C:10:BC:8E:40:1E:58
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:54:c7:72:a1:0e:c4:fb:2c:ee:59:86:b0:3c:4f:b2:3f:95:
5b:ef:52:fa:0b:08:82:4c:8a:ab:93:5b:72:47:dd:c2:20:fc:
a2:3a:50:6c:80:0d:46:7f:06:38:82:72:a7:29:d7:d8:e8:96:
3e:aa:6e:b7:1d:c9:2a:0a:10:74:eb:0d:f4:58:42:90:96:ab:
90:d7:9a:1b:b3:bc:78:e8:aa:d0:04:ec:0b:55:02:43:59:1a:
53:c4:88:52:03:a8:b7:92:2b:c9:dc:2f:ca:83:1a:33:d2:fa:
7e:83:fa:ea:74:c7:c5:fe:53:43:77:55:58:bf:da:71:73:b8:
98:19:f0:e5:18:bb:f1:e1:5b:04:0b:e6:5a:56:e3:99:cb:31:
d4:24:83:47:0f:74:09:ba:85:0f:48:42:70:59:db:a8:eb:1c:
dc:e2:c1:8d:ae:06:4f:9b:fe:48:c3:da:2f:63:1c:ce:c1:5f:
4c:e3:18:2a:fb:77:6e:a3:c6:5b:88:41:b9:d0:ed:3d:b3:bf:
26:04:fc:f1:8b:8d:8f:0a:e0:25:35:72:52:dd:c3:3f:9f:f6:
31:b0:39:cb:47:29:8b:5c:7a:75:e6:1f:cf:71:27:1f:36:63:
ec:2b:38:81:79:a3:ca:27:c8:2e:64:91:90:89:87:00:6f:ff:
88:91:c6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:29:03 2026 by rpki-client