Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: lih/mLs7B/13x+IOCkjohHbdse91sYsCquUrY9U2ZRg=
Subject key identifier: 91:EC:50:4C:C7:29:DE:33:59:03:61:E5:A0:65:A1:85:35:1B:B2:30
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019EFB01FC36671FA303744576BCD584B686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 12A7
Signing time: Wed 24 Jun 2026 19:01:11 +0000
Manifest this update: Wed 24 Jun 2026 19:01:11 +0000
Manifest next update: Thu 25 Jun 2026 19:01:11 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: +U5FYyQ3vSIKUyIkP7q2q90jn6wYNrdzsPDLVlSVIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:01:fc:36:67:1f:a3:03:74:45:76:bc:d5:84:b6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jun 24 19:01:11 2026 GMT
Not After : Jun 25 19:01:11 2026 GMT
Subject: CN=91ec504cc729de33590361e5a065a185351bb230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5d:d7:c1:32:63:2a:a6:5b:f4:61:80:17:11:
b7:32:c3:07:fa:4f:71:9c:88:bc:84:00:fa:5b:14:
42:93:b7:8c:37:4d:e9:54:d4:fa:27:b3:0a:fd:0c:
a4:22:31:3d:8a:18:df:c7:d5:18:8a:21:30:e5:3a:
ce:86:93:0c:6b:45:6b:11:62:62:dd:c9:e6:73:88:
98:16:3a:33:ce:44:24:ed:1b:20:af:53:e2:e5:6c:
e7:93:7a:77:6c:49:c8:bd:fb:f0:64:bd:04:0f:df:
38:a8:5c:72:e8:7a:cb:9d:f7:77:e3:07:75:bc:7b:
8a:c0:4f:a5:96:a5:85:56:0f:56:93:9e:de:cf:11:
39:4f:56:c4:a6:c7:b7:cc:a5:10:ab:90:47:de:98:
a9:f5:a8:a7:48:7a:5b:11:fb:2f:86:5b:57:b0:2b:
82:13:43:b3:e0:10:c9:53:51:52:1b:f8:46:ea:24:
a5:b2:d8:d9:96:a3:88:88:7c:67:ee:93:5a:d1:42:
79:f5:4a:e8:67:8b:85:6b:45:e3:00:10:68:0d:b3:
33:7e:39:90:a4:88:6b:9f:9e:bb:a3:c4:16:a7:d7:
29:d5:d7:f7:65:a7:8d:b0:56:c0:ea:f0:ea:9d:2e:
28:2a:ca:89:53:c2:a8:67:79:30:50:51:21:12:ce:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EC:50:4C:C7:29:DE:33:59:03:61:E5:A0:65:A1:85:35:1B:B2:30
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a5:8b:71:11:76:ad:c0:86:39:d7:a3:d9:40:0f:2c:88:e5:
7a:75:22:16:eb:cd:c1:15:85:9b:f2:ad:8f:99:35:a8:f4:3c:
13:ca:1f:f9:b7:a5:54:ad:40:1b:4d:45:37:b2:45:69:c8:be:
56:9b:ee:ae:a4:58:9d:47:84:22:bb:29:f9:f8:f9:b1:15:63:
88:1b:fa:9b:29:8a:ea:16:9f:a4:56:e0:7d:e4:05:22:63:35:
0c:87:83:8a:31:72:a5:7a:c6:ea:0f:b4:17:16:ea:77:01:98:
2e:e5:bc:57:05:ca:3d:54:8c:c0:f6:fe:6b:d4:e2:9b:5f:e5:
90:f7:b9:03:31:e1:d8:a9:7b:60:e1:0b:ab:a9:d0:6e:5e:92:
1a:73:cf:8f:34:68:a1:8f:36:f4:72:24:dc:e3:49:bc:5d:15:
92:7b:fa:b3:2e:41:0c:9b:7a:2a:fe:d8:bd:5c:ff:59:96:3d:
52:bc:17:e0:ed:d3:38:f3:b0:56:3d:41:7c:dc:50:ce:9d:77:
82:97:bc:8d:db:22:d4:6a:5f:d4:97:10:4e:fb:11:26:eb:85:
18:3c:1d:54:1f:bc:42:84:c9:40:b9:68:d4:b2:f4:fc:10:64:
9c:f0:f8:94:7b:7d:b8:04:c2:12:8c:b7:d0:88:cd:8c:89:b6:
30:55:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:57 2026 by rpki-client