Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: NosFArYtkE0dbbwtYHQCzrhWuFbaWOkDDkwB9RK2ONc=
Subject key identifier: 43:18:A4:0E:33:67:E8:C0:D7:D5:31:43:9C:DE:CB:22:52:46:E9:B4
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 019D2627E7E73CCB21EFC42E40A988110C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 18:00:42 +0000
Manifest this update: Wed 25 Mar 2026 18:00:42 +0000
Manifest next update: Thu 26 Mar 2026 18:00:42 +0000
Files and hashes: 1: ImConIEQA2KDtzAT0CUbHUEbH_s.roa (hash: A7/XjtAfBEgLHLQ8oNWxPg8deYNIQ6lOIEhh+waSaZI=)
2: ZxLR_I6eiLsRd1oV4IP5PeLu7DE.roa (hash: kZngczWI+T3GrCv/8Yja3kQMBd7RGIDrozKXhV53UWY=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: eB1R8TDv6QzbrDBjK/WgqsI2VUap2Pb+iNHkpVo9bOg=)
4: q2aBWG2CuEimsjXb18Ou0fyLb7k.roa (hash: A0AoTuyENlHBNdH6JVEsUQXr8MFCH3cXbTXxCbPc1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e7:e7:3c:cb:21:ef:c4:2e:40:a9:88:11:0c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Mar 25 18:00:42 2026 GMT
Not After : Mar 26 18:00:42 2026 GMT
Subject: CN=4318a40e3367e8c0d7d531439cdecb225246e9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:70:2b:df:20:44:08:f9:2c:0d:6c:80:16:
a5:1e:6a:40:b2:d0:19:d0:45:f3:41:6d:d2:ae:2a:
e7:e4:3a:b8:3c:92:72:32:dc:e5:1d:a2:d4:9c:86:
6c:22:6f:86:cb:a6:ee:d5:b4:a1:f7:97:d5:2c:13:
a5:f8:d5:c0:59:ab:51:b8:52:02:d9:b4:02:c5:f2:
08:09:4f:3a:ec:94:46:9e:06:8e:73:10:3b:df:37:
16:1a:67:73:fa:c6:db:61:d7:86:f3:bf:fe:df:0f:
59:2b:84:1d:cf:73:fb:82:ed:c1:71:bc:45:85:cd:
b8:87:4b:1f:e5:2d:ea:a5:e4:cd:ec:d5:e9:13:d0:
47:52:93:09:01:b4:cd:60:65:eb:6d:fe:34:1d:9d:
d3:ec:88:2a:d0:1d:33:0e:bf:6b:5c:7e:b5:25:16:
ba:f7:af:64:6d:69:06:2f:4c:ba:6c:6c:e4:3c:66:
f3:4e:1c:1c:33:c9:a9:77:99:da:18:de:f7:1e:33:
11:16:db:43:71:b2:32:69:5b:0e:44:78:ae:72:85:
b2:6a:ff:38:21:33:4c:e1:69:50:db:c1:82:af:4b:
70:78:10:16:79:f5:3d:b3:1a:83:97:2d:7e:ed:b8:
05:83:e4:cd:b0:8f:52:4b:75:a6:5c:e0:76:6a:7b:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:A4:0E:33:67:E8:C0:D7:D5:31:43:9C:DE:CB:22:52:46:E9:B4
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:8a:d0:2d:40:0e:60:13:fd:d9:b1:c4:60:3f:dc:5b:64:
ed:de:bb:db:84:88:62:f1:de:8b:dc:6e:66:b5:a3:15:2e:4f:
35:10:da:11:91:37:a3:dc:69:f5:36:bd:17:2d:7f:8b:8a:5d:
d6:f0:2f:b3:15:9b:01:bb:20:b0:3e:41:df:a6:9d:6f:2e:27:
18:5a:64:c8:5e:51:7d:69:fa:8e:2b:07:ef:0f:d2:fe:6d:61:
4d:89:a9:07:dc:1f:09:a6:87:86:03:17:18:75:b6:9b:da:8b:
2d:0c:89:be:79:7b:b5:45:a6:0e:ec:7a:74:89:9e:ad:8e:54:
3c:9c:f0:17:a4:55:55:5e:ae:ea:56:11:a4:17:88:21:1c:40:
42:30:00:85:b5:82:e1:f2:f5:be:7d:7b:32:9d:0d:3e:f0:5a:
4f:b4:80:7d:9b:75:e2:e9:7a:ea:ae:b2:ce:d1:c9:fc:a8:88:
48:e6:43:e4:e6:db:a6:e7:0c:e2:fb:71:f8:63:23:cc:16:ab:
b5:e8:90:4b:06:e5:16:6e:9d:9e:a0:a2:f4:5a:30:13:42:fa:
d1:c3:5d:a1:9d:4d:2c:f4:0d:af:20:35:ea:30:5d:cd:95:3e:
d1:f4:05:ea:d3:c1:0c:fa:05:25:a3:b2:67:f2:e8:2d:7c:80:
e5:23:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:58 2026 by rpki-client