Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File: IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier: 0lZ8sm2n1zhXrwWvrlXqnGMl6mDs3W7ssdQQPlIRNV0=
Subject key identifier: 2A:2D:83:F4:7A:00:06:87:62:55:4D:B0:DF:E9:B5:C0:DB:CD:4D:67
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer: /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial: 01A003CB28F37A19D1D0B3CE4B565D6F959A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 05:00:40 +0000
Manifest this update: Sat 15 Aug 2026 05:00:40 +0000
Manifest next update: Sun 16 Aug 2026 05:00:40 +0000
Files and hashes: 1: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: qXRzcZ6dPKiuwBR6+ODcJw/V+boPMjSmosQAY+GitOc=)
2: ToOm_DRG8L881LK0bTvQrJEi9zE.roa (hash: DCNqoXRqfdwODxjtc8J2/AVxGOKRF24UDLD2fHtc4vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:28:f3:7a:19:d1:d0:b3:ce:4b:56:5d:6f:95:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Validity
Not Before: Aug 15 05:00:40 2026 GMT
Not After : Aug 16 05:00:40 2026 GMT
Subject: CN=2a2d83f47a00068762554db0dfe9b5c0dbcd4d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:a4:53:69:c4:72:c5:8b:ed:a8:e1:97:82:
36:76:d0:df:5e:e7:6c:ca:d4:0c:6d:8d:6d:ec:94:
94:f4:6d:d7:29:bc:e0:42:8f:6d:44:44:8c:14:d7:
d5:80:8b:37:77:03:bf:13:a6:37:5c:fc:a2:08:95:
f4:1d:e0:ee:98:dd:16:b6:46:88:8c:f6:b4:b1:2a:
d7:a9:c7:96:1c:86:b8:e2:91:5f:d7:b2:fc:2b:ea:
ab:9c:ac:b8:53:0f:6f:3e:79:14:a5:78:ee:f0:1a:
50:4a:21:60:e3:00:71:6b:52:69:c7:d2:c8:0d:dc:
8c:ce:24:f0:09:0f:6d:48:0c:c2:b7:c3:ae:ae:f2:
d1:3c:07:61:22:be:1b:6e:56:f9:77:2c:71:02:85:
38:fc:57:8d:c0:28:d3:25:7d:35:50:3d:de:8e:0c:
bc:ce:a9:77:9e:6b:df:e3:b2:a3:b4:e0:f2:3b:4f:
a1:f6:6c:92:c2:3c:f2:e4:d5:d0:2f:01:28:92:21:
f6:83:fe:52:e7:f9:92:0d:fd:5f:38:ff:56:b4:23:
95:74:64:46:af:5d:e9:06:d5:c6:8c:7d:5c:05:99:
c8:09:bb:2c:82:da:24:df:4e:db:68:91:f6:9e:89:
69:55:21:8e:44:99:0f:f8:55:a1:53:ed:77:2c:75:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2D:83:F4:7A:00:06:87:62:55:4D:B0:DF:E9:B5:C0:DB:CD:4D:67
X509v3 Authority Key Identifier:
keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:8a:fb:d6:89:6b:0e:bc:64:17:28:c6:9b:2c:2a:1d:08:
3c:58:1c:bd:30:10:c3:9f:37:07:5c:bc:0b:b4:62:9e:a7:93:
1e:01:db:cf:ee:e5:c4:59:9d:d5:74:f2:e5:c2:f4:f4:9d:6f:
b0:af:7e:86:82:82:de:a3:27:02:4b:ae:63:40:f5:e2:49:f8:
9e:56:6a:c7:46:e0:e9:72:7a:ce:5b:70:ca:fd:69:60:f6:b0:
65:3f:37:e4:10:98:54:61:85:ad:9e:74:79:57:a8:6a:d7:9a:
18:a8:af:7f:10:5a:71:4d:a7:5d:b8:cc:d3:cc:2a:be:a9:9b:
0d:0b:80:5e:b7:71:99:9a:f2:87:d9:3c:d7:ee:5e:53:1b:de:
6a:83:01:d4:c4:cf:fa:3d:84:93:86:f1:23:fa:cb:25:27:9f:
42:18:02:4f:b7:de:56:a7:4a:58:1e:33:f8:df:6e:04:9f:7c:
a0:9b:2d:49:0e:ef:2f:c4:d1:91:30:16:a2:fb:1a:1c:a2:92:
e4:f0:05:13:4a:c2:7f:19:67:34:87:4c:4d:78:0f:ec:6e:e2:
7f:bf:fc:92:2c:d9:cb:e5:2b:d5:4f:55:4d:a1:7c:e3:d7:bf:
9d:62:d8:43:9a:b5:0e:a4:00:34:d9:1e:e0:c5:ed:13:9e:c2:
b4:13:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:50:30 2026 by rpki-client