Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: G4rTftnlqECfmo4b/CR5SmGUojfjnZkKatKs7+IEtDQ=
Subject key identifier: A6:D0:EB:29:AE:B9:FA:25:7F:C9:D4:D0:A3:1E:BD:BD:79:75:0C:0F
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019DECA3CABA8798F1259EA9C2C7328847DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 121B
Signing time: Sun 03 May 2026 07:00:50 +0000
Manifest this update: Sun 03 May 2026 07:00:50 +0000
Manifest next update: Mon 04 May 2026 07:00:50 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: lN6uQv2bJN99INdxoPrLD1gkQ47SqCVZxhD2pERb36Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:a3:ca:ba:87:98:f1:25:9e:a9:c2:c7:32:88:47:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: May 3 07:00:50 2026 GMT
Not After : May 4 07:00:50 2026 GMT
Subject: CN=a6d0eb29aeb9fa257fc9d4d0a31ebdbd79750c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:83:0e:6b:ec:9e:aa:d5:72:f5:98:ab:cf:
35:8e:d2:50:ed:22:2a:f6:81:3c:d3:d3:05:3a:8d:
27:56:ae:23:29:cd:f7:07:48:2a:97:f1:1b:29:79:
00:51:09:66:6b:be:e6:73:b1:84:0f:7c:5b:2c:f8:
7c:78:98:88:a1:b0:c0:9b:6c:80:75:12:63:46:c9:
11:28:1a:2d:02:bc:38:08:0a:ef:34:c9:30:8a:98:
ab:b3:90:02:0f:79:31:e3:e9:9c:ea:ac:c9:58:23:
7b:0e:79:cf:88:cd:b2:5b:3c:b4:3d:a1:06:71:74:
13:7d:65:4f:7e:44:0e:90:7f:f8:e7:fa:a9:5e:a7:
78:fc:1e:ea:16:d0:90:1a:e1:33:16:27:7d:85:7f:
40:c0:01:b5:30:9b:28:3e:7b:93:24:3a:9a:cd:fa:
20:ea:9a:bc:dd:27:78:0a:35:90:76:28:68:2b:30:
f5:6b:35:ea:7f:a7:03:55:2e:98:2a:cf:c2:97:e8:
92:02:d7:e9:55:cc:a0:a7:c5:3b:5c:ee:dd:f2:06:
a9:4f:e7:a3:fe:d4:5f:ad:35:34:68:c2:b2:86:52:
27:d1:7a:b1:f2:91:50:10:a2:b3:3e:77:f8:0a:e0:
3b:74:0c:69:4a:eb:98:2e:62:bd:71:90:eb:94:bd:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:EB:29:AE:B9:FA:25:7F:C9:D4:D0:A3:1E:BD:BD:79:75:0C:0F
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:73:cc:3b:1f:ff:4b:83:e0:a1:3e:fe:3c:b3:31:29:cb:82:
72:f4:95:18:e8:f3:13:d1:e4:33:70:1f:3b:28:af:28:fc:68:
cf:cc:13:2b:68:5c:a2:ed:bb:01:e9:91:72:41:bc:7c:cf:24:
b9:41:21:1c:14:d4:d2:65:99:66:64:be:9a:66:55:09:f6:4b:
14:e8:18:97:87:8a:7d:22:a9:6f:34:ce:c5:20:7f:5a:4d:f7:
4c:b9:d2:c6:0d:6a:ae:38:f0:10:35:be:fd:a1:a2:c9:2f:1b:
1c:24:0d:d8:c5:b8:92:f0:3c:4c:6f:49:8d:fd:dd:52:13:1d:
71:91:ac:d2:24:87:1b:28:c9:c3:03:4a:f3:8b:dc:24:4a:82:
ab:bf:a3:94:7b:8d:01:36:94:93:f2:ef:76:e2:47:54:32:e3:
21:8c:16:dd:f0:f8:79:bf:21:d4:36:45:a6:c8:0e:1b:e3:1b:
26:da:83:8e:3d:b9:88:d4:38:52:d5:3c:ef:27:81:c9:e8:71:
62:74:b7:d4:d6:2a:47:2c:2b:75:3d:7e:20:ac:e2:91:96:01:
81:f3:bf:a5:16:44:e3:ad:b2:8f:9e:a2:7d:a2:1c:c3:aa:c1:
9e:45:60:6d:16:c6:0d:31:33:89:88:44:e0:e9:01:86:44:22:
45:1a:2f:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3so8q6h5jxJZ6pwscyiEfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWQwYzA5MDFjNjllNWM1ZDhmNTFhNjc1ZDA1NTk4MmY5
MWQyYTcwHhcNMjYwNTAzMDcwMDUwWhcNMjYwNTA0MDcwMDUwWjAzMTEwLwYDVQQD
EyhhNmQwZWIyOWFlYjlmYTI1N2ZjOWQ0ZDBhMzFlYmRiZDc5NzUwYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnmDDmvsnqrVcvWYq881jtJQ7SIq
9oE809MFOo0nVq4jKc33B0gql/EbKXkAUQlma77mc7GED3xbLPh8eJiIobDAm2yA
dRJjRskRKBotArw4CArvNMkwipirs5ACD3kx4+mc6qzJWCN7DnnPiM2yWzy0PaEG
cXQTfWVPfkQOkH/45/qpXqd4/B7qFtCQGuEzFid9hX9AwAG1MJsoPnuTJDqazfog
6pq83Sd4CjWQdihoKzD1azXqf6cDVS6YKs/Cl+iSAtfpVcygp8U7XO7d8gapT+ej
/tRfrTU0aMKyhlIn0Xqx8pFQEKKzPnf4CuA7dAxpSuuYLmK9cZDrlL3vdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbQ6ymuufolf8nU0KMevb15dQwPMB8GA1UdIwQY
MBaAFIjtDAkBxp5cXY9RpnXQVZgvkdKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMt
OWQ5ODhhNjAwNzU3LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMtOWQ5ODhhNjAwNzU3
LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXPMOx//
S4PgoT7+PLMxKcuCcvSVGOjzE9HkM3AfOyivKPxoz8wTK2hcou27AemRckG8fM8k
uUEhHBTU0mWZZmS+mmZVCfZLFOgYl4eKfSKpbzTOxSB/Wk33TLnSxg1qrjjwEDW+
/aGiyS8bHCQN2MW4kvA8TG9Jjf3dUhMdcZGs0iSHGyjJwwNK84vcJEqCq7+jlHuN
ATaUk/LvduJHVDLjIYwW3fD4eb8h1DZFpsgOG+MbJtqDjj25iNQ4UtU87yeByehx
YnS31NYqRywrdT1+IKzikZYBgfO/pRZE462yj56ifaIcw6rBnkVgbRbGDTEziYhE
4OkBhkQiRRovtA==
-----END CERTIFICATE-----
Generated at Sun May 3 17:04:38 2026 by rpki-client