Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: KdWznm3dw1kTNPazJHxYwDXJOdqtJZN/7DEePkBJBtI=
Subject key identifier: D1:F1:30:B6:CD:C5:A6:5D:6B:4B:B4:F9:89:B5:81:C5:66:10:80:34
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 019EB8EAAADD657185ECCE4BEA8BE8E3D9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 0931
Signing time: Thu 11 Jun 2026 23:00:47 +0000
Manifest this update: Thu 11 Jun 2026 23:00:47 +0000
Manifest next update: Fri 12 Jun 2026 23:00:47 +0000
Files and hashes: 1: IwgOR8SpECdLjDFzz0M9A3eTqHc.roa (hash: bqzQ3UtBaN9yvyQu2pNXKzVdfCP2Omy5M2vD+gjTY/A=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: dl/pYlE+6sEung1i03cOXqni8fHlxxVAUmwD0p4dm4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:aa:dd:65:71:85:ec:ce:4b:ea:8b:e8:e3:d9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Jun 11 23:00:47 2026 GMT
Not After : Jun 12 23:00:47 2026 GMT
Subject: CN=d1f130b6cdc5a65d6b4bb4f989b581c566108034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:e5:39:95:19:6e:90:57:69:3a:c9:d8:6d:
28:1b:f9:7b:a5:bf:01:eb:0e:a8:04:f3:e2:dd:49:
b7:30:d7:d9:be:e4:f3:43:2b:a7:07:f6:a9:6c:20:
cc:88:f8:d5:20:1b:70:d1:b1:b1:6d:8b:05:74:40:
ae:74:c8:c5:b5:b2:0a:09:34:54:a8:3e:cf:44:fe:
54:5f:56:4d:70:25:6e:b1:9e:a1:4a:4d:a5:97:87:
f7:a9:18:b9:9c:ac:94:dc:dc:7d:4f:0a:99:b5:2b:
29:82:82:24:74:a2:6b:e9:46:c1:40:19:79:f5:f6:
f3:7a:df:8a:39:d2:93:87:38:9b:02:7c:c9:42:e2:
0c:d0:35:b2:a7:cf:e1:d8:80:bc:99:2a:45:ee:e1:
94:6a:bd:fc:e6:88:71:96:41:cb:68:4b:c0:85:05:
7f:ea:24:6e:6e:53:a5:d7:c7:5c:5a:fd:7f:b9:d3:
e2:ec:c3:ad:2a:74:a0:0d:8e:c5:a4:a3:75:3b:c0:
9a:94:b2:44:0d:e5:f0:08:07:d2:88:b1:04:20:fb:
12:91:58:c8:a5:e6:88:e3:cf:7f:67:ba:79:40:b9:
90:e3:26:4d:79:2c:a3:cf:d5:81:f4:88:ba:23:54:
dc:f1:df:92:36:22:0d:f1:80:d5:ed:40:31:ca:1e:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:30:B6:CD:C5:A6:5D:6B:4B:B4:F9:89:B5:81:C5:66:10:80:34
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:52:66:0e:11:23:49:51:d1:ed:ab:41:21:d5:7c:e2:dc:06:
57:71:c7:13:bb:54:13:6c:2e:c3:30:92:59:d9:ca:dc:dd:b6:
e5:29:68:09:34:c2:a6:32:db:af:86:44:80:7d:05:ea:26:c0:
04:c8:3e:88:de:6d:06:b5:98:46:83:d7:6b:1d:cd:fb:ac:1e:
4d:5d:b0:59:68:87:c3:77:3f:59:7a:ca:81:58:b2:c6:f9:5c:
d4:0e:16:1e:ad:7a:91:52:44:c9:97:d9:6a:40:e2:de:17:2a:
57:e9:8f:03:ec:ca:b8:16:0e:d7:bc:43:8f:36:3b:80:91:78:
b4:ce:8c:33:fb:40:cb:cd:19:e2:f2:c9:8b:f7:16:d5:0b:90:
cd:90:0b:01:e7:97:fb:2b:95:10:50:09:73:9c:bf:11:a2:57:
aa:0c:fd:8f:62:9d:ec:d7:f1:24:1c:b6:13:f7:13:18:89:4b:
d3:c0:88:f5:d4:67:9c:90:1e:66:8f:9a:b5:52:b7:ec:d6:e6:
73:af:0d:b2:26:f4:c5:f4:84:62:94:2b:e5:c1:58:c7:59:56:
63:b2:41:40:c1:ed:ed:2a:2e:94:c5:2f:4c:2b:07:e0:8a:c1:
d2:58:3c:c5:b9:e7:56:c1:ef:ff:ac:31:70:7c:ec:fc:e2:ae:
61:e3:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:27 2026 by rpki-client