
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: lWKnj8Gz4hbMU8XQc1paRis+PzHRDDjM+I/FOJxlIsw=
Subject key identifier: 0B:BE:D1:D4:81:03:F5:27:88:55:33:61:1D:15:98:64:C5:39:6C:AF
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 01A0F18BA8CFAC30D2C3DFDE2E554CC91923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 0480
Signing time: Wed 30 Sep 2026 09:00:56 +0000
Manifest this update: Wed 30 Sep 2026 09:00:56 +0000
Manifest next update: Thu 01 Oct 2026 09:00:56 +0000
Files and hashes: 1: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: INhNHbsrv5TVKySfPuH60IQ4Bc7NtDLXqvfZJWMJrXU=)
2: _rLpPddQQHnYtK6c1M2OfbveI78.roa (hash: cy/Yh9TRIkqxvWrNpFvB7cECUr1O0AAoYui7fpbBSbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:a8:cf:ac:30:d2:c3:df:de:2e:55:4c:c9:19:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Sep 30 09:00:56 2026 GMT
Not After : Oct 1 09:00:56 2026 GMT
Subject: CN=0bbed1d48103f527885533611d159864c5396caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:89:2a:f7:12:9c:a4:4a:cf:57:49:d0:e0:78:
a9:bf:54:ca:85:81:c5:a3:69:23:a3:48:02:bd:38:
77:7b:ad:f1:8a:bf:9a:77:c3:0f:b4:e5:e0:5d:87:
63:d0:8b:12:6f:f8:42:ee:3e:0a:ec:04:21:9f:eb:
df:b5:22:52:b2:a6:79:2b:1a:d2:f3:1a:33:58:f1:
62:a7:2b:76:9c:65:17:94:a4:07:dc:ee:8c:c9:bf:
4d:f6:39:02:22:0d:9c:0a:0b:e6:21:dc:f7:3b:bf:
a2:c4:bc:3c:15:9a:cf:e4:8f:1e:be:91:93:db:08:
16:b4:4a:a8:2d:d3:4f:92:14:64:2b:86:c9:8e:c0:
29:d4:d2:46:9c:98:ae:f1:c5:af:9a:2c:16:2b:d3:
b5:0a:7c:41:f0:1a:a0:8d:bc:96:3f:89:42:f5:9a:
0b:2c:14:21:ab:33:63:51:3a:23:4b:54:3a:6f:6a:
3b:59:70:7f:74:b6:cb:d7:db:35:92:fa:af:72:c9:
8e:3f:cf:5e:3d:ff:e2:62:46:50:3b:7e:51:0d:f2:
f2:21:1f:19:6e:07:4a:c9:6b:47:65:0b:2c:9d:2d:
cb:17:5a:64:95:dc:b8:20:27:2b:8e:f9:2f:58:27:
45:51:48:9f:cb:4a:01:ae:18:b5:22:d4:eb:2c:50:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:D1:D4:81:03:F5:27:88:55:33:61:1D:15:98:64:C5:39:6C:AF
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:99:4f:7e:ba:4b:c4:70:b4:df:6e:2e:12:bf:ee:73:98:a9:
9a:0e:bb:bc:07:b0:9b:3d:2b:b9:ee:10:48:35:4c:ac:b5:be:
56:65:09:90:09:54:50:3a:93:ad:74:c9:0f:7a:5a:48:30:8b:
1d:19:c3:e3:7b:08:6a:1b:89:16:cb:47:10:1f:bf:7f:8b:51:
d4:e1:5b:70:98:fb:81:83:bd:3a:22:78:94:6f:57:5a:94:b2:
e0:53:94:80:41:82:a6:c5:c2:5d:a7:bb:9d:97:30:48:f2:d7:
6d:72:23:82:1e:47:12:da:1c:c0:60:91:a5:1b:15:d5:df:fb:
86:47:e5:63:49:c0:df:7d:27:e7:f5:64:46:fd:f4:fd:95:61:
7a:34:e4:9d:c1:a8:ad:d5:c5:54:bb:fa:b8:ae:94:12:29:99:
a1:4f:b0:b0:5d:0e:c4:bd:2b:6c:78:a4:fc:cc:d3:26:0c:0c:
58:0e:22:e4:98:a3:cf:92:b9:d8:7c:f0:d2:b9:68:28:f2:0a:
ce:f2:6c:fa:78:22:79:6e:02:7a:00:a7:f2:31:31:3c:a2:5d:
b8:9a:b6:06:89:64:22:68:3f:78:a6:c9:53:1b:ba:ec:9a:cb:
bc:58:50:eb:bf:b0:a1:57:1d:04:9c:91:25:73:9a:e3:fc:c1:
49:e7:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 13:33:23 2026 by rpki-client