Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: Y+iuZ90S/MyKRqFtP9iZ2ez6u6yGLS6FcyseYV3yu9c=
Subject key identifier: 58:88:D1:19:A3:4A:20:8E:0B:26:F2:F1:21:CF:99:68:0E:69:41:E7
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 019F9248C983FD8F7513710EC7C4C9CD127A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 04:01:11 +0000
Manifest this update: Fri 24 Jul 2026 04:01:11 +0000
Manifest next update: Sat 25 Jul 2026 04:01:11 +0000
Files and hashes: 1: QACcx3bmkYq5FVm71dmit53bn4Q.roa (hash: oQ/m7QfRfNheRWfUqid3dTy2xJX9VnnT62jOhchvHuk=)
2: gux-IxdkibcThQl39PWiMsakK0g.roa (hash: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E=)
3: jpvZw7M6HWfeaPP7BBGWUfnUPW8.roa (hash: m69AM/qWHvVH8vQjk7f2bA/DtDMk2TIVp7SRlmCI4co=)
4: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: 7o9asgrgjQPygZAyOl6/ffAweuJPPJOupjWOeHjrxUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:c9:83:fd:8f:75:13:71:0e:c7:c4:c9:cd:12:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Jul 24 04:01:11 2026 GMT
Not After : Jul 25 04:01:11 2026 GMT
Subject: CN=5888d119a34a208e0b26f2f121cf99680e6941e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:fb:b3:28:e5:9a:9f:71:b8:60:98:cc:cb:
b9:89:cb:85:4a:63:9c:5c:b2:4a:25:1b:f3:eb:14:
8b:48:cf:4b:09:78:2e:ac:b6:11:3d:f6:9b:c5:64:
59:0e:28:cb:64:aa:a3:91:4e:97:0a:16:ba:c0:c6:
53:b0:9e:11:a4:1d:f1:be:0a:3b:42:ae:05:ee:dd:
9a:f0:28:32:7a:83:36:46:6d:be:36:63:1e:a7:d3:
30:c9:50:fd:4a:3c:3f:65:6d:7d:81:d7:35:91:fd:
c6:32:6d:8c:f4:42:e3:d8:2b:62:9d:1b:33:da:84:
e5:ac:48:e3:65:d5:ff:b6:ec:e7:0a:c1:54:32:d5:
d9:42:bf:ac:42:2c:2c:74:e8:df:97:8e:32:21:3d:
1e:e1:68:32:ae:74:d9:3f:2d:3c:0b:a2:a9:e2:d4:
75:20:25:b5:f7:5b:61:60:77:3d:a2:a6:1d:89:97:
ba:75:fe:ea:76:9d:a8:e5:a0:01:e6:fe:88:a7:d7:
e9:8f:e7:73:98:be:38:1f:40:c7:7c:06:ad:81:50:
37:26:05:14:2a:b9:ec:37:fb:d8:ce:22:e9:3a:db:
9d:84:6c:06:08:d2:4e:2c:ed:81:6e:ec:12:c5:cf:
ef:a4:41:f3:ab:1e:92:a9:30:ce:31:11:07:9e:55:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:88:D1:19:A3:4A:20:8E:0B:26:F2:F1:21:CF:99:68:0E:69:41:E7
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ff:3c:3b:9c:39:79:b1:f6:b5:c5:46:4d:89:9e:9d:fb:00:
38:fd:2e:cf:c0:92:b2:22:d3:2e:2d:21:71:0b:26:4c:8a:c5:
3d:5c:ad:6d:2b:ce:03:04:ae:1b:13:79:51:d0:8b:5c:24:be:
73:ca:14:13:8f:65:3b:e9:57:6f:5f:ff:4d:de:de:9a:f7:0c:
3b:1e:cb:36:c2:e6:8a:ca:59:58:29:62:2c:8a:71:dc:ee:66:
70:76:0e:cd:73:68:c8:4e:bf:73:84:07:e6:1f:20:16:c4:15:
e5:bd:7c:51:8f:0e:ef:89:a0:e2:f4:2e:52:e9:85:d2:37:b8:
13:6e:3c:07:ee:49:be:91:ec:56:e0:35:b2:6c:26:91:a7:4d:
66:0c:38:15:0f:3a:c1:bc:14:a2:55:52:7d:d8:4a:7e:20:90:
56:e8:30:53:f1:93:1c:19:e5:90:2b:9c:02:bc:11:03:d2:73:
4e:19:90:21:97:e2:b5:32:cf:43:51:66:82:f3:db:6b:3b:9e:
37:f4:43:08:f5:a2:12:ce:8f:b8:a9:78:b3:23:12:0e:33:f4:
c4:1a:c2:0b:bb:eb:69:38:a6:5e:bc:7d:42:e5:ac:4e:fc:42:
cd:57:31:6f:4c:9a:06:e9:b7:73:4f:9f:4c:3a:31:a8:aa:89:
8b:03:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:05 2026 by rpki-client