Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: Rqg1m2iJomofpBEZhSV6skujhcU4TwFi23qlLukIqtA=
Subject key identifier: 14:41:05:5B:38:96:B6:A8:C8:16:4D:3A:5B:81:F9:ED:5C:CD:09:B1
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 019F93919C33FCA3D9427B28177A9AE9C2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 03CA
Signing time: Fri 24 Jul 2026 10:00:20 +0000
Manifest this update: Fri 24 Jul 2026 10:00:20 +0000
Manifest next update: Sat 25 Jul 2026 10:00:20 +0000
Files and hashes: 1: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: r1ucTNHQN7toxD6ha5IyG0HJyayDxoEh9vZTRUPeX9I=)
2: ZVUh7y26ToxL-oq8YITOKQgfF08.roa (hash: mGiVKv+1/ai9DnwEadL7YecZ7TPX9VgOuJDaNOyNIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:9c:33:fc:a3:d9:42:7b:28:17:7a:9a:e9:c2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Jul 24 10:00:20 2026 GMT
Not After : Jul 25 10:00:20 2026 GMT
Subject: CN=1441055b3896b6a8c8164d3a5b81f9ed5ccd09b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:90:38:dc:5b:e5:47:d9:f7:18:e9:85:8f:
d0:62:dd:7b:81:6c:df:2f:a1:28:f3:1b:cf:57:57:
46:56:6c:95:90:6a:57:1c:08:b6:8e:1e:8a:a2:50:
fe:4b:54:9e:78:f5:fa:3c:53:fe:6d:5c:21:ca:01:
04:33:e5:c8:db:66:13:9e:2a:9d:09:27:54:49:84:
f0:2c:34:6e:84:c3:ba:98:91:42:1a:8d:76:6d:93:
eb:58:30:d9:07:66:47:59:e8:03:bd:53:f5:b3:97:
64:d8:ce:be:91:5c:0d:5e:c8:a2:de:4e:1e:64:e0:
cf:c5:dc:f8:53:81:33:d4:d9:66:12:ec:c4:50:f9:
c0:ac:3e:2e:11:ec:04:01:bd:78:8a:63:2b:cc:19:
f1:cf:c4:fb:97:00:d5:0a:e9:c3:e3:1e:0d:93:23:
8f:af:d8:bd:4d:3e:d5:f2:a9:e6:0b:af:db:7c:89:
78:6c:6d:35:75:65:bf:76:59:2f:c0:65:af:7e:a3:
f7:0d:95:51:d7:da:81:7d:eb:f5:58:f2:7c:80:83:
26:28:12:8f:e3:0e:0e:45:0f:70:bb:60:22:d0:a9:
81:01:be:b1:7c:0b:d0:aa:88:1e:86:f3:9f:5d:dd:
92:68:12:2c:42:68:9e:5f:9d:2d:31:c3:9d:10:bf:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:41:05:5B:38:96:B6:A8:C8:16:4D:3A:5B:81:F9:ED:5C:CD:09:B1
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:31:4b:10:71:e2:2b:65:f1:82:83:82:79:25:92:a6:bc:7d:
4f:67:79:14:bb:d7:4a:ec:70:b5:a1:67:a1:bc:a2:68:c2:1c:
49:75:9a:1a:96:43:7e:17:17:27:df:ac:d8:61:af:3a:af:e5:
aa:0b:1a:1d:2d:0f:32:31:eb:f7:c0:af:ff:6f:01:cb:36:f2:
97:9d:6b:4a:47:79:c3:f2:41:49:8a:e7:2d:2b:db:2f:a7:ef:
98:ca:2c:fd:1d:f9:49:c3:87:11:df:13:1c:73:12:f1:32:f1:
8a:81:85:78:89:06:d9:d7:d6:a4:b5:20:e2:29:f7:3c:0d:bc:
05:5b:10:da:d9:17:2f:d9:aa:1a:3e:95:11:b8:ac:9f:e8:a6:
cb:41:4f:ae:b3:c9:85:25:bb:96:fe:c3:79:6e:8b:10:4a:6b:
2e:07:14:42:67:b6:f4:72:8d:b5:7f:f2:69:6b:67:e0:df:0d:
6a:cc:eb:a5:ed:12:60:13:95:00:b7:bb:ac:03:cc:2a:d1:1b:
63:de:0c:4b:21:df:8f:a8:65:c6:87:6e:22:64:e3:a1:1f:6b:
a9:50:c4:da:73:e7:22:5c:4e:be:50:80:fe:a4:ac:30:5f:3f:
3e:8a:0b:6d:ae:02:8c:4c:8d:97:ec:f3:0a:44:cd:4a:c1:65:
da:2e:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:20 2026 by rpki-client