Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: zrmbzXz6X9eXlVpfwLhzkvYlh/lkEVKWtBE2DDcQp9g=
Subject key identifier: 6D:33:FF:6E:30:60:8C:4A:CE:22:2C:C9:E8:07:6C:19:C0:6D:62:0D
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019F91A405A55D7CAFFB869F172712A656DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 12F5
Signing time: Fri 24 Jul 2026 01:01:13 +0000
Manifest this update: Fri 24 Jul 2026 01:01:13 +0000
Manifest next update: Sat 25 Jul 2026 01:01:13 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: IM5SS3kiL+srPZlwUl2XdsiNMn6hCZCpg+DWot+dlrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:05:a5:5d:7c:af:fb:86:9f:17:27:12:a6:56:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jul 24 01:01:13 2026 GMT
Not After : Jul 25 01:01:13 2026 GMT
Subject: CN=6d33ff6e30608c4ace222cc9e8076c19c06d620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:ec:2c:11:9a:fa:71:ce:57:c4:f4:99:08:
da:5d:b0:c4:7d:f6:96:1f:65:91:52:f3:85:d6:8d:
52:38:0d:9e:d1:b6:1b:e2:e3:5b:81:a7:5c:ae:7b:
50:98:6a:10:b0:bf:8f:4f:6c:4a:3c:d7:30:7f:6f:
a9:54:51:d2:26:5d:cf:ba:55:6a:b1:f5:2b:1c:39:
1b:c4:ca:65:f0:99:a5:bc:cf:9e:8c:03:cc:7d:8c:
a6:18:66:a6:04:f0:39:e5:34:d9:a9:dc:cf:66:3f:
a3:c7:f5:cc:65:e9:5e:82:8a:e7:db:16:23:74:5a:
94:84:63:66:72:99:05:41:cf:2d:75:f4:5a:df:2d:
9b:2f:fc:21:d4:90:52:29:80:14:3f:25:a4:ba:1b:
db:cd:82:0a:17:70:91:0d:a2:8a:70:89:c3:5d:b8:
88:b4:1f:ff:5a:28:76:19:76:aa:ae:2c:4d:7f:21:
f9:58:a3:b0:8a:7e:49:72:f4:af:ef:70:71:28:12:
52:d5:aa:93:9e:1a:7d:b7:eb:0d:26:64:a7:5c:a7:
05:34:d3:c2:82:9b:a8:95:3b:95:cf:df:91:e6:4c:
bc:59:b1:ec:06:94:fb:5d:b8:f7:1c:27:c2:bf:0d:
4c:d9:70:4c:c6:a6:9f:10:22:be:35:79:f5:0b:5e:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:33:FF:6E:30:60:8C:4A:CE:22:2C:C9:E8:07:6C:19:C0:6D:62:0D
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:26:19:f5:03:15:14:ef:38:33:63:65:e8:3b:7f:e2:78:7b:
17:e8:b1:06:70:5f:1a:0a:2f:00:ad:58:df:d0:af:0a:ca:b5:
8c:eb:a6:c3:fb:12:ec:a0:43:be:28:0c:39:3e:1d:83:be:fd:
55:72:9e:7f:70:bf:65:c1:7a:e3:49:87:ca:6d:39:87:ed:d5:
de:c1:b2:b3:1a:f1:eb:7f:df:41:11:f9:ea:cd:c9:d9:80:51:
10:55:ca:14:cd:a7:91:9c:55:7a:86:f9:7c:e2:b3:21:84:69:
7a:c5:13:7a:c7:23:50:0d:44:30:4b:71:e6:78:63:9d:e7:05:
af:ab:2c:7c:a7:76:29:ec:ea:4e:e4:95:f0:50:5f:76:64:04:
2f:0f:3e:36:88:cb:af:26:ac:72:61:be:9c:a2:bb:fc:75:36:
eb:55:74:a5:92:a8:c9:b7:82:7e:64:cb:d5:2f:53:ca:f8:1b:
77:6d:6c:8e:06:81:84:c0:6d:84:79:a3:0e:9b:ea:84:e7:d1:
80:f5:be:18:de:1d:2f:97:01:8a:c5:df:7e:df:a4:c4:b1:22:
a2:4d:3d:5b:f9:e0:54:3a:c8:b6:08:18:f2:89:c6:12:af:ed:
f9:21:f5:80:a0:29:e0:c3:c9:a1:a9:c9:54:68:78:b4:30:2c:
f6:ea:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:26:04 2026 by rpki-client