Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: 3R6eQZWBgBNiQa47PGw7SxhqWJadinseVwfZmvOLKCU=
Subject key identifier: 0F:5E:1C:65:20:E3:F5:C6:CD:05:06:48:8E:A0:25:E0:E8:DA:FB:A0
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019D27A8DAC17175B68FF27DD713A2BE04CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 11B5
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: R4wfnDd9h1EXvEa5i10d58yLsUB8tya80Xcxi2+2luo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:da:c1:71:75:b6:8f:f2:7d:d7:13:a2:be:04:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=0f5e1c6520e3f5c6cd0506488ea025e0e8dafba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:90:81:2c:91:8e:23:3f:1e:5f:99:1d:56:
6f:a4:2b:48:4f:69:e9:50:4c:e3:9e:3a:74:2f:65:
a7:cb:d2:93:de:e2:5e:d3:43:ee:60:4e:1b:a7:4d:
24:d9:ea:40:e0:d4:4a:02:7f:ea:cf:3d:51:b0:fd:
0c:9b:44:5c:55:be:8c:b2:87:70:02:4d:d6:9b:3f:
67:fc:a6:25:b4:ad:47:a9:28:01:95:d2:90:bd:72:
ff:78:5e:cb:6c:a7:1b:00:2d:e0:b0:dc:e3:a7:83:
73:f6:41:8e:51:04:a9:ab:55:5f:e7:d6:0d:f5:8e:
72:c6:5b:1f:d6:e8:1f:14:ab:6d:f5:ce:a7:6f:16:
fd:e5:ea:3c:c7:a4:5b:eb:4b:88:42:1d:05:07:43:
c6:ed:17:c8:fe:f3:8d:4b:ac:d3:88:a9:8c:d7:a7:
ae:09:1c:92:0d:6b:e7:b6:1b:3a:c2:2a:31:63:92:
e9:d8:1e:89:b2:33:c3:cf:0a:14:b3:6b:30:34:73:
cf:e2:68:dd:aa:6c:6c:8c:2e:91:c3:c0:2f:7d:57:
70:ba:d3:2f:64:af:6e:ce:19:b5:b2:3c:9f:4f:2e:
45:fe:1c:1f:61:6f:cd:8b:98:11:73:a5:ce:ec:0e:
83:95:4b:f3:d8:02:02:22:63:3c:34:5e:df:9d:26:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5E:1C:65:20:E3:F5:C6:CD:05:06:48:8E:A0:25:E0:E8:DA:FB:A0
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:df:24:a2:c2:5a:85:50:ca:a7:58:31:1e:12:60:bb:3b:73:
ce:c8:42:88:0f:b7:bb:e4:ab:a3:6b:61:b0:ae:4f:bc:54:5e:
8d:da:2e:af:cf:e9:1b:86:ab:31:48:32:2c:ec:1d:59:cb:77:
a9:76:31:50:b8:ba:91:d8:6d:f4:12:fe:94:d6:50:cc:0a:50:
a8:f2:9f:b8:6e:b8:56:29:fb:3e:42:dd:5f:a8:ee:87:09:98:
25:33:07:6c:15:1e:df:81:5b:74:e5:ee:4a:a7:2b:f8:e2:9d:
2e:53:e9:cf:29:d3:05:15:a2:53:da:e1:3a:90:09:7a:d8:2f:
34:d0:e0:c0:16:47:5b:50:57:31:96:6c:4a:36:af:c4:cd:20:
5a:7f:0c:45:51:c3:7e:26:64:1c:6b:e9:f8:47:0c:b4:27:14:
42:19:33:81:f2:e7:3d:22:89:ad:74:35:37:b3:90:e6:09:55:
88:b6:56:a9:85:d7:2b:a2:2d:f8:2c:1d:e8:1d:c0:6c:42:7b:
13:d9:71:59:d1:17:45:a1:69:1c:7c:3b:94:09:f4:58:40:18:
cb:e0:04:ac:52:a9:95:ca:ca:35:46:1c:69:f1:a7:a7:d5:c7:
db:4c:88:51:d5:5d:4b:40:a8:40:93:02:ea:32:62:6f:f9:97:
9a:51:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:17 2026 by rpki-client