Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: y5NpxZiuxkL9xM6t1Nq9eNQE0jRhSDN43+0pGTAt89A=
Subject key identifier: 93:D8:0D:FB:49:F7:20:B8:1E:C0:24:16:1F:71:94:78:C2:B7:62:81
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 01A17F98B0039999F3671A2078D10E1DD635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 23:01:15 +0000
Manifest this update: Tue 27 Oct 2026 23:01:15 +0000
Manifest next update: Wed 28 Oct 2026 23:01:15 +0000
Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=)
2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: ejpHNaGdquHojXs02JILYkLdRQYFev+X8RkhpEgPrQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:b0:03:99:99:f3:67:1a:20:78:d1:0e:1d:d6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Oct 27 23:01:15 2026 GMT
Not After : Oct 28 23:01:15 2026 GMT
Subject: CN=93d80dfb49f720b81ec024161f719478c2b76281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:81:a0:39:7c:2b:c9:6c:e0:9b:3a:bb:5c:
c5:73:b4:98:51:4c:c8:00:95:16:0a:a5:06:c4:b1:
e9:19:d5:22:1b:34:d9:77:c5:27:bf:c8:e8:67:a9:
2c:bb:1f:7c:b0:47:57:0b:de:26:28:37:f5:0e:ca:
91:b0:dd:c1:e6:d8:ba:ed:a4:6e:60:6e:57:31:a3:
3c:f6:b9:47:c2:55:57:4a:4f:0c:9e:d9:94:06:32:
8a:ef:27:e5:ec:18:f2:87:7e:b0:3f:62:4e:43:d7:
3b:00:39:73:d1:b3:bd:aa:9d:f9:92:d8:5f:44:be:
97:77:74:f1:74:a3:95:6b:41:08:8b:f0:20:70:ac:
2e:df:bb:56:81:2a:39:dd:c0:69:a8:a9:d2:94:21:
c1:67:be:14:65:b9:d4:7c:c9:c4:75:10:87:01:9a:
cf:09:61:aa:2a:18:46:a6:dc:55:d5:9d:4a:b6:20:
d5:33:e8:20:d3:cb:18:82:57:bb:38:39:64:88:07:
27:43:63:2f:51:96:d2:55:36:b9:55:d0:b2:e9:b2:
75:cd:8d:9e:1e:91:fb:8c:ab:9f:8b:0c:70:c3:ec:
df:32:a0:d7:1e:21:a4:4d:45:74:5c:99:0a:1b:e2:
bc:1a:85:5d:11:72:a0:fe:3d:f9:33:8b:47:ab:77:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D8:0D:FB:49:F7:20:B8:1E:C0:24:16:1F:71:94:78:C2:B7:62:81
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:50:c9:62:fa:a1:27:39:6e:66:0a:38:bb:5b:c7:f2:ae:ee:
a2:50:91:9d:79:5e:0c:90:f9:a5:90:92:52:b7:a4:42:ee:ce:
d5:4e:42:7e:fa:95:a9:6b:b9:23:4a:d3:62:75:65:80:8e:60:
5b:be:38:be:6b:db:c6:e4:db:6f:d0:5d:ed:e1:c3:8f:80:a7:
21:74:6d:55:14:44:13:f2:9b:21:52:12:93:ad:f1:bb:a9:2b:
fd:1f:b9:8f:2e:63:15:d9:53:82:b2:d9:ac:af:7d:55:b3:23:
54:70:7c:7f:c2:62:ee:d2:e3:82:10:5c:12:53:85:0c:98:f9:
2b:ba:c3:c2:37:68:60:1b:1c:4d:01:4e:f2:cd:4a:20:bb:07:
01:7e:e7:7f:10:5f:60:dd:c4:27:7a:55:01:16:4e:41:03:34:
3d:f6:fd:af:b9:5f:36:66:10:cb:91:99:ff:ea:60:5c:f1:f8:
83:ad:dd:4b:ac:15:c1:71:99:3e:97:af:39:4e:e5:ef:07:90:
51:8d:04:59:39:64:47:d7:92:88:58:c3:0c:82:89:5a:ea:b5:
7a:57:5a:d7:aa:e1:b5:de:87:46:f2:2a:0e:c1:b8:0a:0d:3c:
9d:a4:94:69:90:17:48:75:53:07:2f:70:e5:e5:1c:23:4e:2c:
1a:f9:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:48 2026 by rpki-client