Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: mu3z6zYCU43zZ4GD66k/628t1t/NmM3a5Y/eyPgS24k=
Subject key identifier: 4A:55:07:B4:AD:E9:CE:F9:03:CE:82:A8:B1:B7:67:D8:AD:6D:98:9F
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 01A119AB651BCAB21C6B7F79D0A8CFC76CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 13C0
Signing time: Thu 08 Oct 2026 04:00:24 +0000
Manifest this update: Thu 08 Oct 2026 04:00:24 +0000
Manifest next update: Fri 09 Oct 2026 04:00:24 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: 2cKtlW5ooVfqo6w225yJlE/zuwDgASBrqVYTxrO+qtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:65:1b:ca:b2:1c:6b:7f:79:d0:a8:cf:c7:6c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Oct 8 04:00:24 2026 GMT
Not After : Oct 9 04:00:24 2026 GMT
Subject: CN=4a5507b4ade9cef903ce82a8b1b767d8ad6d989f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:7b:02:46:03:16:a9:c3:68:0e:87:94:98:
35:77:58:ac:2b:58:74:fb:5a:ec:75:a0:18:2d:7b:
19:ee:19:29:c1:14:30:6a:12:2e:b8:a0:68:c1:f6:
5e:f1:9f:aa:15:a2:56:35:5a:43:bf:4f:85:a2:70:
00:31:0a:00:33:47:19:47:d7:c3:6f:21:c5:2e:d1:
c0:1d:d0:e4:5e:6a:be:e5:a7:1d:e5:1b:f8:37:05:
1c:ac:15:c6:23:7f:b9:d1:a5:b5:1f:33:b5:8f:db:
30:45:fb:99:1d:5f:58:3d:21:88:f8:b6:73:0f:11:
db:16:4f:1a:f6:33:6f:59:f5:76:bd:c3:c7:8d:83:
ea:3c:69:f7:6f:91:a3:1f:93:2c:0d:2c:74:c1:3a:
f2:c8:c8:04:10:ce:0a:ce:01:93:b1:ac:b0:66:c5:
5e:5e:e2:aa:c2:94:60:03:8d:2f:aa:86:fd:ec:80:
0d:6c:21:51:a6:ad:49:3b:d7:3a:dc:56:8d:15:2a:
71:da:fe:3e:37:fd:f8:58:dd:35:c4:84:db:02:59:
47:3e:b2:fd:19:d5:26:00:c5:5d:d6:60:11:8f:b3:
20:65:05:6a:a9:8e:b3:20:eb:ab:9e:f8:ca:27:65:
4e:17:3c:2b:4f:2b:2c:94:55:65:14:94:a8:25:0b:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:07:B4:AD:E9:CE:F9:03:CE:82:A8:B1:B7:67:D8:AD:6D:98:9F
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:03:2d:44:68:49:73:d2:50:78:a9:51:c2:bd:be:93:02:6a:
3a:ca:39:53:44:ea:ac:4e:dd:13:9c:20:2a:53:49:ba:6d:e6:
9a:5b:20:69:5b:f5:e6:19:f4:85:66:80:57:03:d1:d4:be:6f:
bc:5a:66:74:94:33:85:35:b8:c0:00:c3:41:0b:8c:8b:e5:3e:
e5:de:31:e9:4b:41:5e:a4:00:1a:c8:5f:8d:10:aa:30:bd:d1:
fd:8a:ab:78:a3:5c:75:a7:6f:63:19:b6:52:ef:90:87:f1:18:
c2:87:14:af:64:a4:81:91:a4:71:70:8e:6d:76:5e:98:54:a4:
5c:bd:da:dd:16:f1:ea:1d:33:46:40:7d:4f:07:43:aa:f6:6c:
d0:1f:f2:c9:41:d2:8f:ec:5c:79:e5:90:0d:60:2e:62:f7:a8:
40:61:2b:21:c1:71:87:14:e3:84:1f:03:96:e6:8f:05:a2:82:
7d:86:96:76:ce:6c:c4:3e:2c:2d:62:55:dd:2b:66:24:16:ff:
5e:c4:f6:2b:00:cb:ce:45:44:34:69:0f:3e:86:d7:b4:05:b2:
17:6c:4f:e6:c5:95:80:d8:58:e3:79:dd:79:62:a5:8f:24:68:
b7:84:99:c8:e9:35:b0:0b:28:f8:91:9b:26:3f:15:43:02:29:
1a:a4:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:33:16 2026 by rpki-client