Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: 3r0DOogA5QFYuVnREnQBSf31qGZyopW0s2af+S4E46E=
Subject key identifier: 5F:1D:14:57:5C:1A:98:F8:32:AE:81:53:00:BE:F1:2F:51:5D:87:95
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 019E1F7F8F2C8E8AE4B7002FE5FC4F4A77DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1911
Signing time: Wed 13 May 2026 04:01:53 +0000
Manifest this update: Wed 13 May 2026 04:01:53 +0000
Manifest next update: Thu 14 May 2026 04:01:53 +0000
Files and hashes: 1: QACcx3bmkYq5FVm71dmit53bn4Q.roa (hash: oQ/m7QfRfNheRWfUqid3dTy2xJX9VnnT62jOhchvHuk=)
2: gux-IxdkibcThQl39PWiMsakK0g.roa (hash: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E=)
3: jpvZw7M6HWfeaPP7BBGWUfnUPW8.roa (hash: m69AM/qWHvVH8vQjk7f2bA/DtDMk2TIVp7SRlmCI4co=)
4: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: XbBmrSv8V21SS3oaw++3aNbbSTZ/eotSNdf0/56Xc/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:8f:2c:8e:8a:e4:b7:00:2f:e5:fc:4f:4a:77:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: May 13 04:01:53 2026 GMT
Not After : May 14 04:01:53 2026 GMT
Subject: CN=5f1d14575c1a98f832ae815300bef12f515d8795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:61:06:80:94:8b:8c:3c:95:ae:8c:cb:58:
86:23:a1:ad:5c:fc:b7:d0:4e:90:fa:75:82:66:48:
80:f4:13:36:b5:9d:a0:93:99:88:eb:3a:60:80:77:
75:38:c2:67:d2:1a:3f:d1:52:99:d4:04:74:9b:55:
c6:54:03:b4:f9:39:7e:e6:9a:12:02:59:23:c4:33:
57:e0:13:b3:82:20:25:e5:ad:88:89:c4:b9:55:0c:
19:5f:10:f1:ae:e4:70:b6:02:d2:2e:71:25:57:ad:
0b:48:6a:d2:cc:d5:9c:31:38:37:33:73:15:e8:37:
bf:22:83:98:96:b6:4f:6e:da:c8:72:72:bb:27:54:
d7:aa:d9:d1:49:c6:af:1e:59:1d:27:53:8d:8d:cd:
20:3b:c2:67:2d:36:89:eb:f8:a1:0a:5c:11:97:f0:
95:2f:6b:77:ca:b5:41:a4:fa:4e:75:f7:1f:d4:21:
59:9c:4d:87:8d:be:76:55:56:8a:58:6a:4f:83:90:
1b:50:91:bb:99:dd:ed:c8:01:e9:3e:6e:50:38:8e:
c0:74:f7:36:ca:36:cb:c7:95:a3:a5:10:82:e1:70:
e2:51:f9:fb:82:81:16:19:14:03:d2:bb:46:10:1f:
b7:f5:21:c9:1d:0a:24:a8:9c:78:55:c5:c8:29:90:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1D:14:57:5C:1A:98:F8:32:AE:81:53:00:BE:F1:2F:51:5D:87:95
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:16:6f:d3:c7:19:4b:89:51:20:0d:60:12:7b:b5:a4:0f:4f:
85:9f:4f:4e:61:b1:2e:6f:34:17:12:8a:66:70:a5:c5:74:07:
a9:6f:16:00:4e:0d:4f:45:c1:5b:0f:ef:f8:31:37:02:27:3e:
34:e0:72:82:78:2c:30:99:3a:2c:4f:3c:45:2e:6f:b1:70:aa:
a8:04:07:c5:bc:76:db:51:a8:6f:e3:16:a7:e5:d7:49:c9:d7:
38:8c:e7:38:e7:8b:2e:b6:f6:41:9c:c3:c4:c4:ea:4b:aa:21:
4c:4c:9e:48:ef:10:97:4a:b3:cf:f1:5a:37:47:b8:6f:f5:9f:
b3:24:fa:40:9f:59:b4:03:b2:d4:6f:4f:85:22:71:e4:06:fd:
f4:c5:d4:d5:e9:fd:66:d8:28:dc:13:1e:a7:f4:cd:cc:53:c9:
f3:8d:3b:13:46:28:8b:7e:5c:68:a6:e2:93:39:7e:26:c2:76:
cb:e4:fb:e4:a2:39:bf:00:9e:53:60:e1:51:e2:c3:4e:33:99:
85:6e:7d:04:36:ca:32:91:8d:65:e2:af:e8:9b:2e:10:c9:94:
e6:a2:e5:6c:a3:1c:20:4c:31:75:08:9b:30:c0:41:36:ad:81:
71:e7:8d:a4:75:bb:e7:ba:e8:2f:ad:a9:8f:58:b7:fc:e3:00:
58:80:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:16 2026 by rpki-client