Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: wnND6E6EbyfHrCYsd5aqv7nZKJ3HpLokBp5zoLUeL9E=
Subject key identifier: ED:05:82:11:4D:97:B5:B7:60:D8:7F:9B:D5:3B:7F:52:0D:BD:1B:57
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 019D389C3A5AC87E54F51FA7D47DE5D19EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 086A
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: IwgOR8SpECdLjDFzz0M9A3eTqHc.roa (hash: bqzQ3UtBaN9yvyQu2pNXKzVdfCP2Omy5M2vD+gjTY/A=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: MqnqCE1V1NJZvnGKEKm5PDk6eIl0UIBlMyQC/ze7VRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3a:5a:c8:7e:54:f5:1f:a7:d4:7d:e5:d1:9e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=ed0582114d97b5b760d87f9bd53b7f520dbd1b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:ef:86:b9:f9:28:d6:0b:9c:9a:63:1d:34:
66:e3:b6:d8:a0:34:d0:a0:bf:c5:c0:39:1b:33:bb:
02:9b:be:55:6d:d7:1f:11:b5:98:34:fe:7b:ab:96:
a3:91:3a:e6:45:73:53:13:a5:e8:e4:7e:e5:0c:c0:
65:80:2f:d7:05:b7:a7:3a:18:cd:5c:8f:ad:21:12:
cc:79:a5:be:3f:ad:01:8b:a1:48:09:c7:fc:52:73:
fd:b5:83:eb:46:94:4f:69:d0:31:cf:9b:fb:55:84:
cb:5c:fb:76:43:bb:28:01:ed:19:01:86:8e:64:d4:
62:0a:40:83:c4:9d:de:f1:2b:45:1d:ad:17:8d:b2:
0f:e3:5c:f9:03:72:e4:0f:96:44:26:f5:ef:94:82:
d1:7f:e0:8c:47:83:d2:ee:be:51:be:66:fe:80:b5:
8c:db:0b:5f:3c:91:7b:a8:35:14:4d:f7:84:3b:da:
31:ea:32:b0:4b:b7:1b:a4:e5:6b:fa:fc:3c:05:c7:
5a:d9:5d:8d:5d:af:52:b6:3e:64:85:d6:e0:2f:cf:
e9:da:73:14:9c:65:08:66:22:14:3a:a8:b4:5b:a5:
35:ef:eb:ea:bb:4d:bb:ff:0b:bb:a7:41:a1:85:b3:
f2:4f:15:f9:17:77:86:b3:9f:94:0b:16:0d:0d:a2:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:82:11:4D:97:B5:B7:60:D8:7F:9B:D5:3B:7F:52:0D:BD:1B:57
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:58:35:6b:d2:78:8c:e2:b2:5f:ab:2e:e0:7e:33:2e:f7:cf:
8b:04:fe:72:8b:a4:63:f4:c8:1a:44:2a:98:59:10:1a:b1:99:
d9:70:38:aa:b6:de:71:0c:50:d4:36:2c:29:f0:51:43:92:d5:
67:9c:c7:54:3e:cf:4a:3b:77:3b:c7:5f:f8:ba:29:6f:8d:2f:
cc:6f:f2:9a:ce:be:ff:4c:49:3a:bc:b0:4f:ec:17:83:22:42:
13:6d:b0:ee:b6:fc:81:64:4d:19:6b:a1:5f:c7:51:ed:00:3f:
72:d6:61:b2:13:6e:3e:79:8b:36:0f:4c:c0:fe:29:3a:b7:fa:
6d:74:26:61:7a:36:4d:f4:b2:37:01:4c:13:f7:bb:c4:18:d0:
25:e0:7a:88:53:3f:7e:f8:8e:67:e2:dd:fb:5d:7a:3a:e0:34:
9a:67:9b:d9:f2:1a:9f:59:d8:81:68:2f:2e:86:15:61:75:4b:
56:30:75:84:14:ed:9e:6e:84:4a:a3:bc:19:9e:51:67:ab:d2:
1f:73:c0:6f:c6:54:ca:a3:b0:95:44:60:ab:1b:f8:4c:56:b4:
6a:80:e4:98:5a:8a:1c:1e:a5:a8:ec:62:91:94:6c:b2:bb:d7:
f2:d2:03:cc:0d:0d:77:08:09:ff:68:71:26:6a:ff:7b:eb:a1:
eb:b6:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:49 2026 by rpki-client