Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: z+GNX+kAmw3iwlndITtUReZcy7EjcI6B/kiCpe6y1uE=
Subject key identifier: BA:7D:2E:F9:9A:3A:3B:56:6C:08:84:6C:94:B7:4A:CB:32:69:3C:70
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 019D273B3FA98F2D822FCD04F3D58848846A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 0286
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: G06i-715DWwzIGeO7ozFvpuVglo.roa (hash: NAlau0Ue6s6TBIRjFefwCaMBe6vvRr2rxlG4HQ5m2NM=)
2: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: BDQ+283FVaudVo5+AEl6JTFCzsCG6+ltNAY14toyOIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3f:a9:8f:2d:82:2f:cd:04:f3:d5:88:48:84:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=ba7d2ef99a3a3b566c08846c94b74acb32693c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:64:56:3b:94:ae:2c:d4:81:f1:3c:a1:27:
ca:92:29:e0:03:27:6b:bc:7f:be:f3:04:82:c3:80:
70:36:2a:5e:cd:a5:36:dd:61:14:d7:c3:4e:71:41:
71:b6:71:f8:c7:2f:1d:eb:ba:79:dc:21:c6:c4:bf:
c4:25:20:7d:57:38:7e:80:91:97:5d:2b:92:40:d2:
51:f9:d9:56:20:4b:87:83:6c:19:dd:a5:66:b9:c8:
26:db:16:ab:6c:d4:15:b3:9f:e7:88:13:c6:ed:41:
b6:b8:f1:d3:6d:bd:35:cd:e6:6f:09:a6:9a:49:14:
03:0a:e4:cb:bb:9f:d6:a6:f5:44:15:98:4b:19:25:
59:27:9f:19:46:d9:e9:9b:2a:a7:f3:9d:a7:56:79:
33:03:c1:33:b8:d8:bd:22:01:6c:96:d4:38:f3:e4:
b9:e6:49:08:86:1d:4d:6d:00:ef:d3:49:f8:3e:5e:
3a:70:3e:f9:e4:3b:ae:19:2d:05:2e:e4:e7:73:3f:
19:53:b6:3a:21:2a:15:94:cb:59:58:73:fe:69:b6:
25:fa:92:2b:f4:d4:a8:cf:21:1d:d2:99:3d:34:bf:
6c:fd:de:da:2c:6d:15:52:46:60:4c:8a:7f:7b:44:
0c:0b:61:28:91:4f:5b:e4:e3:7d:00:99:f7:d7:b9:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:2E:F9:9A:3A:3B:56:6C:08:84:6C:94:B7:4A:CB:32:69:3C:70
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:04:c4:15:df:d3:31:c6:43:cf:a3:05:cd:f5:b7:a4:62:35:
3c:62:1a:16:54:a9:c1:31:81:11:3b:6d:92:66:18:72:a3:7c:
b0:eb:9f:ba:1d:e9:8e:13:0d:c8:fa:e5:60:09:58:87:24:a9:
8a:3c:89:7b:29:c4:5f:2e:9e:90:34:83:42:85:36:36:70:e2:
ab:9b:0d:8b:1e:f6:42:a6:14:53:1c:00:ab:01:e3:27:bf:70:
10:1c:da:c1:05:4a:3d:31:b0:3d:65:2a:2c:67:ac:7c:27:9c:
b9:db:37:2c:98:2b:23:9b:41:59:ad:fe:24:3f:9e:2a:68:00:
00:61:2c:64:69:67:66:6e:65:90:0e:8f:5c:f5:d0:27:3c:6a:
20:17:9f:4f:0e:53:90:ac:54:21:ae:ed:ec:70:b3:9c:e7:f3:
c8:cd:f2:61:7f:06:58:57:fe:c4:7d:86:48:54:b1:cc:d1:e5:
1a:3e:e3:e5:10:9b:4e:e6:b8:83:d1:1f:48:35:0c:38:5e:25:
47:87:51:3b:0c:6d:3b:36:1d:bb:ed:b5:f9:10:0d:13:98:e6:
f9:33:ea:7f:8a:45:86:a1:f1:8c:08:0f:05:72:81:c0:b2:b5:
77:a6:11:57:8f:bf:21:63:4e:74:c9:8a:9d:b9:f3:1a:bb:d8:
ca:92:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:32 2026 by rpki-client