Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: yI6WacGsrsMu/xDXHSTyLT+vl7jivmo0QF62xooUILU=
Subject key identifier: 0C:36:E2:D9:AA:43:45:5C:00:A3:B9:EB:45:33:97:2B:5D:FF:53:30
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 01A0DBDFAF214E45779E47B9AC7410E5FB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 13A0
Signing time: Sat 26 Sep 2026 04:01:04 +0000
Manifest this update: Sat 26 Sep 2026 04:01:04 +0000
Manifest next update: Sun 27 Sep 2026 04:01:04 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: zlXn3/nWQzhiaYyF+OXK4ohJ6pbo626sHUuSZxC10Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:af:21:4e:45:77:9e:47:b9:ac:74:10:e5:fb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Sep 26 04:01:04 2026 GMT
Not After : Sep 27 04:01:04 2026 GMT
Subject: CN=0c36e2d9aa43455c00a3b9eb4533972b5dff5330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bb:dc:ea:e3:36:b1:6c:1a:1f:2b:85:d9:49:
71:be:d4:6b:67:79:4d:2a:42:af:59:14:47:65:76:
59:91:c2:ed:78:ec:b0:b1:e8:ad:04:3f:8d:aa:6a:
46:4a:64:cd:1d:3f:fe:20:4b:39:2a:d9:85:ba:e1:
27:18:69:f5:03:8f:7a:6c:99:db:83:36:b0:0c:f9:
28:a9:81:e4:0f:bf:52:57:20:9d:b5:69:58:be:e5:
26:b8:60:37:57:9e:ee:5f:0c:ee:25:d1:90:10:7d:
24:b2:24:c4:c4:99:9e:f8:b6:f2:a0:60:41:ed:ae:
9f:bc:e0:64:8c:05:20:93:b7:1e:cd:7b:21:ea:ad:
ab:31:b4:90:2c:73:c6:a2:ce:0c:66:ed:1d:5a:d6:
05:a9:43:d8:5e:64:3f:5b:bb:42:19:f5:48:26:c4:
8c:b3:70:0e:28:15:ac:3c:83:e8:be:ae:be:fd:68:
b6:67:82:6d:de:ac:87:24:41:bb:6a:7f:8d:28:7c:
68:4c:9d:38:40:b1:88:52:7b:80:05:29:f4:26:d9:
d2:27:58:ba:3e:e1:55:30:4e:ac:c5:f7:73:61:08:
c2:b0:4f:31:ed:d4:9a:fd:d1:ac:9e:19:fc:93:85:
6d:ef:d7:5a:8c:29:51:cf:04:63:b2:c0:42:c1:27:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:36:E2:D9:AA:43:45:5C:00:A3:B9:EB:45:33:97:2B:5D:FF:53:30
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:21:48:f0:8d:38:84:40:5b:1c:8e:b1:ff:6f:4a:ab:f5:12:
33:72:e9:40:ed:4b:69:4e:0b:1d:9f:d1:98:81:81:37:44:0d:
4d:7a:18:40:c6:91:e4:14:d5:e6:bb:63:11:72:ee:ea:bd:a2:
44:1f:5e:81:2a:86:18:08:dd:9f:6c:e5:cc:fb:35:e1:03:63:
93:50:7f:91:1a:4f:86:d6:3a:a0:cb:41:c6:90:5e:aa:7b:14:
5d:43:85:14:01:11:d2:09:3f:11:ea:0c:97:f2:76:72:21:73:
da:f3:62:71:fe:2d:b9:fd:23:a1:06:06:81:00:20:ee:97:c9:
c1:d8:3f:61:d5:a5:44:e3:77:13:5f:32:fc:e3:98:e8:39:7d:
19:6f:06:8c:80:6c:2f:7e:b9:08:f0:53:34:0d:26:85:b4:bb:
ec:dd:80:e3:96:1c:dd:e7:e3:ae:f8:4d:93:58:09:c0:d4:06:
33:34:0c:50:99:2d:98:8a:15:6a:5b:5b:b3:df:4a:32:5c:9a:
46:28:f9:e1:6f:48:0a:0a:d8:76:24:24:66:ff:d4:86:c7:b6:
fb:4c:3f:1a:2e:a5:44:82:33:e5:ab:d9:49:89:c1:7b:f0:4b:
d0:52:1a:d8:c0:54:bf:8a:a4:ba:01:68:e6:6d:93:a4:82:f0:
cd:49:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:06 2026 by rpki-client