Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: VkUkSWFg9DAPgyV/DZTXATF9ApAnGxBLcaxj3OqH4hU=
Subject key identifier: 35:18:66:A0:25:5C:A3:B7:C8:9D:B3:6A:8A:39:0D:AB:91:CE:52:8A
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019E1ED9CD9CA79133A0099CFB45601BC1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 1235
Signing time: Wed 13 May 2026 01:00:50 +0000
Manifest this update: Wed 13 May 2026 01:00:50 +0000
Manifest next update: Thu 14 May 2026 01:00:50 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: EeJzju/DggfVWp/0tSN2BwigxmSHCbZTxDrlH4oodqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:cd:9c:a7:91:33:a0:09:9c:fb:45:60:1b:c1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: May 13 01:00:50 2026 GMT
Not After : May 14 01:00:50 2026 GMT
Subject: CN=351866a0255ca3b7c89db36a8a390dab91ce528a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:0b:a6:45:75:64:59:30:fd:06:8a:26:a1:
23:2f:ee:a9:d1:8a:d0:ba:7c:61:07:ce:f9:41:24:
c5:69:0a:af:63:62:31:e1:ef:4f:a5:de:06:eb:eb:
b6:c2:90:bb:80:35:59:03:e4:50:85:12:aa:e4:82:
2a:f2:cd:55:b8:1d:c2:d4:6e:0a:8b:9d:07:46:4d:
97:1a:e0:0a:8a:e7:78:b6:99:8a:7d:b1:2a:4a:70:
4a:55:27:7b:bc:a5:05:6c:2c:46:b5:37:c5:a0:73:
d1:44:e2:d0:2d:85:82:0f:04:f4:40:6a:85:06:8c:
ba:4d:b9:ad:ed:2d:dc:13:2b:fc:5b:a5:43:44:42:
c7:b5:3d:90:41:b2:bd:db:84:7b:41:37:5a:4d:d1:
b1:75:62:ef:78:20:23:43:53:86:67:c4:52:d8:73:
d1:5c:88:fd:d1:04:24:d9:22:c0:c3:c5:64:d5:47:
c6:52:64:45:36:59:b0:0c:11:40:ff:53:2a:59:59:
1c:5c:99:a5:9d:92:59:e6:b3:84:4b:ff:bd:6a:da:
34:74:7d:07:8b:12:cc:2b:8c:df:5f:39:27:24:e3:
9f:b6:b1:91:f0:d6:b9:0e:48:22:eb:f4:11:90:fd:
d8:a6:2c:3a:8a:db:7b:d8:f9:79:8a:08:14:4e:20:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:66:A0:25:5C:A3:B7:C8:9D:B3:6A:8A:39:0D:AB:91:CE:52:8A
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:55:12:48:0d:da:cc:63:88:6b:a1:5b:52:cf:d4:29:f3:8b:
16:a9:aa:57:ea:d4:ff:ed:12:66:79:48:20:e9:84:90:95:1f:
ea:cf:26:09:b6:90:0b:93:ee:5c:4d:79:bd:0f:43:a3:9c:35:
80:55:98:75:d6:38:8e:ee:29:cc:7d:ac:25:83:f6:41:e5:a5:
55:3e:2e:70:24:a6:23:46:98:ca:9f:e3:db:55:a3:96:e8:b1:
8a:5f:2d:c0:18:8e:94:42:0a:34:fe:3e:13:da:98:da:dd:53:
dc:e3:c0:78:fd:54:57:a6:f3:da:a0:c4:cf:5e:df:cf:98:95:
73:4d:53:f1:6b:b9:44:70:50:bf:8b:16:cd:a5:5e:bd:eb:81:
04:f1:2d:d6:a7:1d:2a:d6:d9:73:77:be:e1:13:22:f6:d8:26:
dc:86:a3:c4:1c:59:a1:ce:3f:25:7e:34:d0:00:d9:96:1c:b8:
ad:b4:90:e2:63:2b:89:60:ff:d4:cd:29:90:fb:ff:1f:5f:77:
04:fb:d4:76:1b:1c:60:d1:ba:16:21:e1:49:13:f4:77:89:d5:
f2:f1:e4:2a:39:ca:3d:54:88:8e:cb:80:e5:5b:5d:8b:b8:06:
96:06:d3:9a:3e:50:92:bb:a6:0d:e2:b3:9a:9d:93:ca:b0:de:
24:0b:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:09 2026 by rpki-client