Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: Umf6zJd43alVFMUAcVJEGemweOOpqD34fpKYOPCzzaY=
Subject key identifier: 99:57:95:DD:2C:A1:C5:B5:14:59:C2:BA:AD:8E:D2:A9:EC:DA:22:8F
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 019D2704B8398A36AE9648D640D91E4B4552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 1691
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: w5m2gFUiq3mB2E+9787j62klRH0u+6buLfFoQkzowr0=)
2: WX9t0xmXDR4uM2A7AQHLj3QPI_4.roa (hash: juszrqxHpM/25SYd4SpIiGanqn2fYHKuBqSkrqz21Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b8:39:8a:36:ae:96:48:d6:40:d9:1e:4b:45:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=995795dd2ca1c5b51459c2baad8ed2a9ecda228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:de:b2:34:59:50:f2:48:4a:1f:1c:30:eb:
69:a7:a6:6a:08:60:fc:4d:db:88:f8:bc:eb:87:82:
d2:ce:e0:2a:8b:6e:88:8d:dc:75:6f:62:97:e5:27:
1d:03:59:bf:25:5e:06:2c:c6:d6:70:31:d3:8c:22:
72:3c:46:93:a8:7a:86:01:2a:36:d2:6d:93:3b:c7:
e3:f2:51:68:82:8e:37:bc:3f:61:3c:8b:1d:37:68:
25:da:c7:1e:08:1b:2e:7b:cd:ae:42:55:92:19:e5:
97:c1:78:23:ff:8a:ee:25:13:72:9c:e0:c6:da:74:
f2:ad:eb:bf:61:64:2d:c0:73:a7:27:f1:96:cc:2d:
23:f7:82:7d:c5:22:ee:38:78:5a:49:a4:39:f0:72:
50:7d:93:25:26:3b:a0:d5:64:0d:25:a1:2c:8b:c5:
a3:ed:b5:a1:d8:94:26:19:97:0a:44:61:24:0e:15:
48:32:62:48:19:d5:86:b9:c0:da:e4:3f:14:03:25:
57:bf:d0:1c:a4:59:09:13:7c:34:d0:f0:fb:e2:22:
3e:23:7f:e8:f5:14:9e:59:4d:81:31:35:71:ce:ca:
e1:ab:4a:77:38:a5:e8:d5:c0:4e:99:0a:8e:a3:f1:
74:20:51:35:ea:71:eb:3d:49:92:7b:d7:52:11:e5:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:95:DD:2C:A1:C5:B5:14:59:C2:BA:AD:8E:D2:A9:EC:DA:22:8F
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d0:8c:f1:a4:b3:ca:84:45:19:c3:13:d9:2c:fe:8f:d0:9e:
04:7e:43:ba:b8:d1:93:5e:9b:3f:c9:4d:98:43:dd:30:0e:3f:
e4:a0:68:2e:29:68:33:e9:d2:c2:cf:4f:45:bc:a2:21:52:8e:
68:6e:5d:82:a9:d6:51:84:02:ae:6b:2f:6e:60:fc:f3:1e:aa:
2a:cb:3a:86:d1:ce:d5:5e:a2:53:a7:dc:84:71:6a:58:27:e7:
20:e0:1f:0e:81:c7:79:79:64:e3:68:26:af:88:a9:ff:7f:e4:
c4:3b:da:ad:34:b6:a6:20:f6:5c:a5:d5:53:6f:e8:bf:eb:38:
82:a7:30:52:43:c2:2a:c6:39:6c:f5:15:40:cc:9c:ac:4a:81:
3a:36:c1:af:93:6d:19:52:e4:13:34:63:cc:60:23:5f:55:a7:
b2:9b:9d:35:7b:7f:89:60:d4:45:63:79:dd:bc:87:49:44:3b:
3b:48:f5:80:15:ae:9d:ff:77:e9:dc:bd:48:4c:5c:c7:c5:b0:
a8:8d:4c:45:1c:03:50:f1:fa:bc:2d:64:0f:3c:3d:f2:61:e4:
8e:a0:20:fe:d5:0e:c5:0d:ce:ad:fd:57:ec:dc:8a:a5:e1:21:
bf:10:bd:28:23:24:1c:16:a9:6f:d6:4c:72:8f:6e:42:67:02:
db:30:e7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:24 2026 by rpki-client