Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: 0gIMlXkhN6AFvbQZ2pd159GosgF7i+Yt1xQEpTpbbbE=
Subject key identifier: 09:A5:26:C3:57:E2:8D:C6:CB:DC:AC:D5:DE:AD:88:C6:1B:7C:BE:A5
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 019E1EA2EE47ABFD38244C84200A4A1CA6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0FC3
Signing time: Wed 13 May 2026 00:00:54 +0000
Manifest this update: Wed 13 May 2026 00:00:54 +0000
Manifest next update: Thu 14 May 2026 00:00:54 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: UbFV3Dpnd41phbRDv5ct9Fuk0DxLKeaeWzkdtCxt6gU=)
2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ee:47:ab:fd:38:24:4c:84:20:0a:4a:1c:a6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: May 13 00:00:54 2026 GMT
Not After : May 14 00:00:54 2026 GMT
Subject: CN=09a526c357e28dc6cbdcacd5dead88c61b7cbea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:01:d5:1b:12:d8:76:6a:0f:4c:bd:8e:78:
9a:81:87:62:24:5a:ee:8b:36:b2:34:a1:55:eb:39:
68:54:1d:22:55:db:52:64:78:10:6d:ef:96:19:5a:
c2:d5:65:0b:73:ba:e1:1a:fc:92:31:71:0b:cb:c6:
58:52:1a:5e:0f:69:73:99:04:6f:2c:c3:d0:19:d5:
c1:0e:0c:b3:20:d0:6b:b2:0b:dd:fe:82:96:15:ab:
35:6e:4f:39:44:47:44:ef:6c:de:8f:09:1c:30:92:
09:e6:ad:51:08:3f:e9:56:29:52:3a:d6:a7:22:db:
43:c0:3b:44:ed:68:7a:e5:37:0d:90:c6:8e:e6:a5:
02:31:07:2f:2c:8a:82:1d:1e:37:43:bd:dc:59:f3:
bd:df:16:04:f1:a0:21:43:f1:db:c3:92:01:bf:42:
e3:9f:de:d6:84:fb:47:b5:33:91:26:2c:61:d1:7e:
da:fd:60:ef:84:ae:68:59:85:c6:c8:dc:c0:2f:01:
9c:fd:7d:6e:4d:01:51:cc:35:d2:48:58:1e:be:e9:
3b:4f:19:de:a1:e8:b2:ea:8b:6d:a5:12:96:31:fa:
e5:f7:f7:6a:20:ba:7e:f2:2b:21:34:ab:f3:f1:ea:
19:6c:34:2c:32:3e:17:23:07:77:c4:8c:19:e8:f5:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A5:26:C3:57:E2:8D:C6:CB:DC:AC:D5:DE:AD:88:C6:1B:7C:BE:A5
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:35:18:6e:d3:98:ad:07:3a:53:08:eb:9b:a5:bd:4f:74:ea:
44:b3:70:e8:dc:97:90:86:9d:00:12:10:9d:07:a2:be:8b:37:
76:ba:fb:a4:fa:4b:db:58:8b:90:a7:7c:3b:3d:0d:fc:54:7a:
17:f5:e4:dd:4e:7e:b2:9f:2d:18:6d:9c:69:dd:e4:7a:71:af:
e2:0f:83:7f:72:69:07:1a:d6:dc:65:4a:4e:a1:b5:e4:3a:be:
6b:0b:1c:de:f1:1a:06:f3:80:85:8c:82:84:cf:81:08:db:84:
d1:2c:87:70:69:2b:79:95:1c:61:27:e1:d1:d8:a2:f1:5d:7a:
20:b6:9a:f0:87:e4:89:c9:52:7b:5c:25:b6:53:b9:53:f9:ce:
e7:64:f0:75:94:64:ad:b5:25:99:00:05:72:76:9b:8f:cf:05:
f7:94:db:c6:e8:5a:1d:57:2a:6d:d0:c2:48:45:d8:c6:d0:ef:
bb:8d:d3:36:4a:69:00:51:03:09:e2:1f:c2:2c:21:5c:1e:6a:
c8:76:e2:7f:12:ad:2e:dd:c0:af:9d:64:24:9e:3c:29:d6:c1:
ee:5f:08:3d:33:00:52:81:fd:97:2b:b0:ea:6b:02:8f:c4:e5:
35:11:76:6d:56:8a:69:24:e5:55:93:44:49:c1:1e:34:6a:0d:
6e:51:5c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:23 2026 by rpki-client