Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: uCI+Ii3ixLkIcn7+FSOwU+G8/ps5Ku3cEzcyseSh3iI=
Subject key identifier: 83:9A:BB:6E:90:86:A6:C1:CE:B2:4B:CC:30:6F:91:E9:D7:7C:B1:2A
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 01A0208CA63A103A1A938768EFC0B4FACB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 133F
Signing time: Thu 20 Aug 2026 19:01:23 +0000
Manifest this update: Thu 20 Aug 2026 19:01:23 +0000
Manifest next update: Fri 21 Aug 2026 19:01:23 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: hS8x8ZfpAnADkyfyfKL6msFm34/tPc9sQY2C+2Hk+74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:8c:a6:3a:10:3a:1a:93:87:68:ef:c0:b4:fa:cb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Aug 20 19:01:23 2026 GMT
Not After : Aug 21 19:01:23 2026 GMT
Subject: CN=839abb6e9086a6c1ceb24bcc306f91e9d77cb12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:ab:3a:cd:c5:8e:66:31:cf:65:5f:c7:0e:
65:05:f3:fa:bd:7d:85:c3:3a:44:3c:a4:ea:d5:98:
04:5b:9e:a7:e5:95:42:4f:aa:36:15:9a:55:5b:02:
d4:1d:46:df:fe:c4:4d:04:9e:ea:44:56:d8:f5:a9:
09:55:c0:08:c3:34:00:12:85:aa:61:eb:89:94:7e:
65:5d:a5:a4:20:c6:4b:4e:19:bd:b1:1e:70:13:d5:
fa:82:1b:c3:44:c3:85:66:12:d7:ab:e7:d8:00:08:
ff:e1:6b:c5:94:15:d2:8b:03:20:52:0e:4b:a9:49:
ae:bc:f0:ec:11:d3:06:ba:d3:0e:62:06:ad:e9:c8:
22:9f:4b:53:7c:bf:18:52:d4:ed:af:0e:d6:dd:28:
d8:94:5d:df:af:1a:20:9d:99:6f:c8:81:b9:bd:98:
0f:5f:5c:e4:ee:40:b7:ad:86:46:9e:e5:da:fa:94:
dc:89:5f:cb:5f:b2:4b:74:fb:d8:4c:97:9a:9a:f1:
e8:25:ea:da:1f:06:bf:9a:19:eb:2e:32:89:45:3b:
b6:0b:13:a4:77:36:91:0e:fc:de:5e:10:62:f5:8e:
62:35:23:91:d1:af:23:06:d3:4a:05:09:c4:f2:fc:
ff:a0:67:bc:f5:d2:2b:54:bf:d9:84:c1:6f:6a:a4:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:BB:6E:90:86:A6:C1:CE:B2:4B:CC:30:6F:91:E9:D7:7C:B1:2A
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:26:9d:b4:b1:8a:9e:ec:a2:49:f8:2b:47:0d:f5:53:8f:50:
97:4a:8a:36:39:2e:42:64:cc:86:20:18:10:fa:4e:16:b9:ac:
d2:e0:76:a7:4a:1c:a3:d2:21:35:49:16:93:48:e3:ba:5d:f0:
56:47:23:eb:af:50:a2:f1:2c:b0:03:2b:1f:b0:5c:22:13:75:
eb:c8:ce:68:ac:72:0d:0c:ab:fb:e2:65:dd:5f:d0:40:ed:d4:
08:06:b0:02:50:15:6f:0d:03:14:23:df:b5:de:26:c3:6c:e7:
54:e0:39:d7:f0:42:f5:24:1e:d3:a0:fb:b8:64:b8:72:ea:c8:
01:15:fc:9c:99:8b:f6:e1:ba:e1:cb:19:ec:bc:18:f2:ea:f4:
af:d1:17:0d:d2:09:03:4a:22:28:0c:1c:60:48:58:3c:17:f7:
1d:0c:f6:86:07:d0:7c:c2:03:90:ce:7e:7c:e1:7f:3c:04:45:
98:52:50:96:78:6f:c0:45:db:6b:a4:41:c1:fd:f9:c6:de:46:
7a:9c:9c:74:b0:de:0f:2e:b8:56:73:68:36:80:a7:c3:2c:f0:
9f:63:af:90:22:28:48:ad:12:b5:82:68:97:d5:6d:07:bb:93:
45:b9:e6:ad:09:b0:81:44:38:a2:4f:ea:59:7e:7d:77:cf:99:
c2:84:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:57 2026 by rpki-client