Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
File: iMzUohaNl27yVSiXv8cZINYzvFU.mft (raw, json)
Hash identifier: 30LB+zm/v4GJI03FyE2T+KixpBrzxNfT+q/bL7DAbNM=
Subject key identifier: 25:F8:52:BF:64:BA:B7:1B:7F:46:DC:2A:AD:8D:DA:86:39:04:7C:9C
Authority key identifier: 88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
Certificate issuer: /CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Certificate serial: 01A08C43FEA02221F99F3499CDA7C3C1769E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
Manifest number: 50
Signing time: Thu 10 Sep 2026 17:01:01 +0000
Manifest this update: Thu 10 Sep 2026 17:01:01 +0000
Manifest next update: Fri 11 Sep 2026 17:01:01 +0000
Files and hashes: 1: Sebdq3Z-zI97Q_QmObG2yD2EvOo.roa (hash: 6XBHsle9CbbB6Dp19ZfuZYsFS8Vr9CEB/OKP2y66uY8=)
2: iMzUohaNl27yVSiXv8cZINYzvFU.crl (hash: EaFHj8As9dc1z4nH0BKAYX/k5vZR0ThM8jb8ZDTJ/aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:fe:a0:22:21:f9:9f:34:99:cd:a7:c3:c1:76:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Validity
Not Before: Sep 10 17:01:01 2026 GMT
Not After : Sep 11 17:01:01 2026 GMT
Subject: CN=25f852bf64bab71b7f46dc2aad8dda8639047c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:96:ba:3a:01:5d:59:76:e2:ba:ce:21:3d:
a1:04:44:f2:43:64:44:59:ba:4a:13:93:98:b9:10:
46:a2:69:f0:f7:17:64:cb:c5:8e:56:06:58:fa:79:
1e:80:e7:6b:64:e0:69:fc:a3:ce:b6:1b:3b:8e:6e:
c5:b4:47:c0:a6:02:67:19:e4:88:c8:1d:b5:e4:1e:
99:2a:f1:45:3d:fb:15:8c:37:b2:1c:5a:14:16:e1:
a0:53:1b:28:53:15:aa:aa:06:7d:c8:83:12:30:82:
d3:20:62:0a:ca:6e:f4:99:45:ae:51:39:55:8e:0b:
cf:01:1e:fc:00:f1:14:f9:ee:80:a8:c5:1f:de:05:
5d:3a:8d:96:7e:9e:8c:cb:68:2e:64:b9:f3:16:4a:
7a:60:4e:ab:5c:f3:e6:5d:4d:24:26:83:11:ef:13:
e5:b4:22:b5:a4:08:b9:d7:91:54:25:29:de:21:f9:
0e:9a:cb:60:47:96:72:09:3f:9b:f8:2a:9e:53:c7:
3f:09:13:c9:85:68:93:58:aa:aa:18:44:5b:c3:ab:
da:81:49:5b:91:f6:a4:e0:fc:b8:d9:30:ee:a4:ba:
5e:1b:19:8d:27:c3:60:7b:1a:4a:b3:7f:3c:4e:85:
ad:c2:27:fb:5b:49:f7:0e:76:74:fc:9e:c4:68:78:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:52:BF:64:BA:B7:1B:7F:46:DC:2A:AD:8D:DA:86:39:04:7C:9C
X509v3 Authority Key Identifier:
keyid:88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c1:f1:69:ff:36:df:f6:fc:bd:08:c5:ba:5c:53:0a:82:a8:
66:c8:04:7d:b4:94:37:e5:de:e6:88:61:a7:15:da:56:a4:e1:
b1:81:a3:64:d6:50:76:30:4c:6a:df:94:9c:d6:10:95:80:06:
6f:e5:75:24:83:34:57:6b:80:b5:79:32:37:9e:a4:69:50:9a:
85:2a:92:7d:f4:79:90:b3:c5:83:ad:66:a5:19:c8:da:58:1b:
06:fc:b5:25:ee:71:f5:b9:ed:70:69:5c:46:90:dd:e9:63:ff:
8f:42:d6:52:43:2f:fb:54:ba:c4:88:8a:2f:4f:77:ae:bb:d4:
af:c6:77:25:30:de:fa:a9:c1:98:00:98:3e:96:3d:54:92:c9:
de:eb:35:df:dd:7c:8d:b4:f8:7a:54:00:6f:d4:9f:b1:65:26:
20:e7:17:74:90:af:a6:59:c2:f8:6b:05:b3:05:98:71:3c:ce:
72:11:be:9b:8f:68:a1:60:c0:a4:db:7d:33:14:3c:0e:ba:a3:
0e:3e:30:2a:35:e8:85:81:ae:d3:11:27:9c:a2:9e:2c:9d:23:
b9:27:01:a9:fb:9d:ec:85:97:0c:7f:f9:84:af:a9:4c:ee:24:
60:c3:32:ca:fe:2e:e4:78:0f:42:2e:a0:87:47:d6:f5:ec:a4:
fd:c6:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:25 2026 by rpki-client