Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: TgC+tA7ykNvLxJ2ff4o0rVkuoMPDdsCYz0TD15BJ514=
Subject key identifier: 0F:27:DE:6F:9A:7B:04:94:D5:38:72:59:65:A5:C9:5B:69:35:35:99
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 01A08C43DA76DCD056A9ABADDA3063FD17E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 17:00:51 +0000
Manifest this update: Thu 10 Sep 2026 17:00:51 +0000
Manifest next update: Fri 11 Sep 2026 17:00:51 +0000
Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=)
2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: cxTw9x3AOohHWgZ830zAaiD1SmRvxACSEWDfxlosxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:da:76:dc:d0:56:a9:ab:ad:da:30:63:fd:17:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Sep 10 17:00:51 2026 GMT
Not After : Sep 11 17:00:51 2026 GMT
Subject: CN=0f27de6f9a7b0494d538725965a5c95b69353599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:1f:4c:30:35:d2:bf:58:46:8f:93:81:22:
bd:02:56:e1:ff:85:d8:87:2e:ac:1a:a8:ce:88:31:
39:a2:00:9b:2a:32:97:49:81:ae:9c:2d:69:69:d2:
3c:2f:96:a9:da:40:08:75:34:38:f6:41:7c:9a:fd:
12:aa:a3:03:eb:96:89:1d:f4:56:f2:08:da:3b:57:
bc:37:62:00:62:af:ed:a6:02:1c:a7:09:dd:12:87:
b6:36:14:1f:77:30:a6:97:95:54:46:61:e1:4c:3b:
f7:f7:fe:dc:ec:6e:c6:12:9e:4b:f0:ab:86:61:98:
dc:3c:11:d9:f7:95:43:8b:1f:5b:51:6f:d8:b2:2a:
4b:46:4c:e4:b7:a9:55:07:a2:61:3b:15:9d:64:1a:
23:b5:8c:9c:b4:6e:25:9e:e3:75:94:6b:d5:af:13:
cd:f3:03:6a:f6:4f:73:02:0a:ed:76:9e:aa:3e:4d:
f6:57:b9:bb:55:e3:6d:9d:0a:d1:f4:0f:ab:1b:0f:
2b:38:10:5e:10:ca:ee:0b:20:c6:24:1d:e0:a9:5a:
30:f1:bb:a4:a7:ed:67:cb:0f:38:90:01:77:1a:42:
e2:ec:0f:54:41:50:d2:98:67:c8:5f:55:00:85:a3:
0b:6c:11:a5:ec:bc:b8:47:d1:d6:54:d0:57:58:4d:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:DE:6F:9A:7B:04:94:D5:38:72:59:65:A5:C9:5B:69:35:35:99
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:84:73:74:83:bf:05:2c:f9:31:cd:9e:dc:af:86:1e:24:3e:
c1:b6:2b:af:0b:9a:49:c8:d2:6e:3e:80:30:fc:64:67:81:03:
39:83:62:9e:2d:2d:6d:1d:2a:08:3a:2e:88:b2:f2:05:89:94:
88:0f:88:20:04:11:c7:cc:d4:34:39:ef:d9:6b:92:57:2e:3a:
56:7c:83:1b:04:e3:4b:f0:75:f7:00:51:d7:76:fc:c1:ba:dd:
3f:d5:d1:93:76:3e:cc:e6:83:3e:6c:09:a2:96:cb:67:3a:46:
b4:e9:eb:91:4d:77:95:62:6e:89:03:7a:0e:d5:2a:fc:84:a2:
34:1b:f8:b9:10:76:54:bb:43:32:b5:96:7c:88:5d:ec:35:5f:
d6:a3:b0:d4:3f:72:b1:8f:bb:13:66:b6:d5:69:4c:a0:f1:bb:
8d:ba:be:b9:b1:bc:ff:f4:8d:e4:b7:35:fb:a6:30:21:77:40:
10:3c:43:fd:fe:24:0d:b4:33:2a:cd:59:64:6d:2c:4b:63:49:
69:ca:27:a0:93:2e:ad:d2:d4:d0:86:5f:c0:2e:1e:23:34:12:
e9:b0:4f:89:e9:a4:fd:f4:eb:1f:5c:95:7a:df:1c:98:69:55:
01:52:d3:29:6a:11:05:b3:d8:28:45:05:e2:67:3a:72:3a:41:
5b:ba:14:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:39:00 2026 by rpki-client