Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: r96cey8gO71I/mGCDA3Tg98B6MEwlekE43QjTCqblvY=
Subject key identifier: 65:80:79:F4:6A:36:CE:D6:FD:4A:9E:47:D2:B4:C2:BD:6A:BF:9B:52
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 019D299778A5CA31503F41577F7C4E85E2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 0B0D
Signing time: Thu 26 Mar 2026 10:01:25 +0000
Manifest this update: Thu 26 Mar 2026 10:01:25 +0000
Manifest next update: Fri 27 Mar 2026 10:01:25 +0000
Files and hashes: 1: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: M63N0+YananpDt6spvaA1GOUeNKtG+cwTMXSjRpeGx4=)
2: pgGnSHyUvU2MCidf2eDuWrDOeCY.roa (hash: oty+EyubS3vsZNVfWcxWo/GIVhsqz3pi2U3eHoewYe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:78:a5:ca:31:50:3f:41:57:7f:7c:4e:85:e2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Mar 26 10:01:25 2026 GMT
Not After : Mar 27 10:01:25 2026 GMT
Subject: CN=658079f46a36ced6fd4a9e47d2b4c2bd6abf9b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:91:f1:b5:86:34:bd:f2:f7:64:bd:93:f7:
95:52:de:c1:9a:c2:e0:12:c2:3c:32:34:23:5e:3c:
29:92:57:5b:df:ba:a2:e9:f2:0d:4b:f2:ea:8b:98:
67:1f:10:bb:f9:ea:f5:18:5e:e9:ff:74:2f:a8:47:
4c:3b:eb:c1:ed:d3:9b:c5:93:99:ff:ae:2a:cf:a8:
12:e8:e4:ef:81:37:65:13:e0:b7:fa:44:2e:06:73:
d8:22:3f:3a:46:11:b3:31:92:78:7e:15:7b:c2:44:
ea:46:9e:28:27:f3:ae:5c:08:39:8d:e1:34:a0:37:
a3:a9:99:f0:b4:7f:be:fd:7d:bb:ac:24:5f:64:3a:
e4:82:7f:2e:b3:23:8b:9f:be:94:e5:df:21:0d:8c:
8d:37:e3:be:ae:dc:84:c7:9d:5e:1e:89:dd:a7:d8:
0e:ac:25:a9:52:91:16:51:56:98:92:6f:73:db:3d:
e5:54:4d:8d:8d:e9:4c:42:13:51:d7:0e:80:c7:4c:
06:56:6b:15:54:ad:fb:bc:ae:a4:a3:6a:a7:1d:79:
06:5e:5e:90:2a:73:ad:24:23:21:66:8b:cf:8e:ce:
c3:5c:23:36:b3:43:fc:9f:8d:5e:e3:ef:be:43:23:
c5:8e:45:cc:b9:24:6b:d5:98:32:ae:3e:db:23:39:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:80:79:F4:6A:36:CE:D6:FD:4A:9E:47:D2:B4:C2:BD:6A:BF:9B:52
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:89:6b:ad:be:a4:bb:21:35:60:71:64:0f:14:45:2b:53:34:
87:ef:4e:65:57:19:6e:3e:f1:13:7c:58:4f:61:81:76:ac:36:
de:db:60:45:dc:1d:1a:64:ba:f6:a6:25:50:38:2f:75:cc:4c:
e1:55:93:3f:21:ca:4e:3d:dd:41:4a:cf:73:e8:95:15:1f:24:
0e:af:54:2f:e3:1c:9b:71:4c:3d:a1:47:88:77:16:40:14:63:
02:d4:43:3e:f2:de:09:b3:a7:70:88:c1:04:ee:5b:4c:7d:87:
07:8d:25:b9:ab:b9:75:15:6f:e6:c9:da:e8:61:ee:a0:ab:3a:
e2:6d:9b:d7:a2:cd:b7:bb:22:8a:ae:43:8a:5e:ea:c2:a2:24:
a4:f6:97:0a:f9:ce:ad:da:56:ac:c9:57:67:dc:f7:11:b5:36:
44:8a:a8:1c:49:57:11:ca:cd:e0:0e:0d:06:01:00:1e:a4:99:
03:bf:8e:3f:37:74:90:ba:ea:16:d0:8f:61:32:65:a8:49:7d:
3e:e0:bf:ba:71:cb:09:89:58:1a:63:59:60:09:62:4d:3e:69:
f1:4e:53:f5:f7:83:7b:cb:4f:bb:f7:80:5a:af:40:12:f6:ca:
76:27:bd:f4:a2:2b:83:14:9e:68:10:6f:ba:75:b7:f7:a7:e9:
90:cc:81:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl3ilyjFQP0FXf3xOheK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWE1MjU1Zjg4ZDRiOTU3MTg5YzE0MmY4YWM1NjgxYzUw
YzY4YTYwHhcNMjYwMzI2MTAwMTI1WhcNMjYwMzI3MTAwMTI1WjAzMTEwLwYDVQQD
Eyg2NTgwNzlmNDZhMzZjZWQ2ZmQ0YTllNDdkMmI0YzJiZDZhYmY5YjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaSR8bWGNL3y92S9k/eVUt7BmsLg
EsI8MjQjXjwpkldb37qi6fINS/Lqi5hnHxC7+er1GF7p/3QvqEdMO+vB7dObxZOZ
/64qz6gS6OTvgTdlE+C3+kQuBnPYIj86RhGzMZJ4fhV7wkTqRp4oJ/OuXAg5jeE0
oDejqZnwtH++/X27rCRfZDrkgn8usyOLn76U5d8hDYyNN+O+rtyEx51eHondp9gO
rCWpUpEWUVaYkm9z2z3lVE2NjelMQhNR1w6Ax0wGVmsVVK37vK6ko2qnHXkGXl6Q
KnOtJCMhZovPjs7DXCM2s0P8n41e4+++QyPFjkXMuSRr1Zgyrj7bIzkveQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWAefRqNs7W/UqeR9K0wr1qv5tSMB8GA1UdIwQY
MBaAFIjqUlX4jUuVcYnBQvisVoHFDGimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzkt
ZTdjZTI2ODg0YmU2LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzktZTdjZTI2ODg0YmU2
LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIlrrb6k
uyE1YHFkDxRFK1M0h+9OZVcZbj7xE3xYT2GBdqw23ttgRdwdGmS69qYlUDgvdcxM
4VWTPyHKTj3dQUrPc+iVFR8kDq9UL+Mcm3FMPaFHiHcWQBRjAtRDPvLeCbOncIjB
BO5bTH2HB40luau5dRVv5sna6GHuoKs64m2b16LNt7siiq5Dil7qwqIkpPaXCvnO
rdpWrMlXZ9z3EbU2RIqoHElXEcrN4A4NBgEAHqSZA7+OPzd0kLrqFtCPYTJlqEl9
PuC/unHLCYlYGmNZYAliTT5p8U5T9feDe8tPu/eAWq9AEvbKdie99KIrgxSeaBBv
unW396fpkMyBuA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:21 2026 by rpki-client