Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: Gkb0jQRC5LH7/k6GZnI5kn+5c7U/hLwbEv8AVOmYzSQ=
Subject key identifier: 46:37:16:0B:DB:55:87:1D:92:42:A1:24:DF:BC:C5:A5:88:90:8F:90
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 019EE47A44DFFC25D148F2DCD1AAA18EA05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1977
Signing time: Sat 20 Jun 2026 10:01:18 +0000
Manifest this update: Sat 20 Jun 2026 10:01:18 +0000
Manifest next update: Sun 21 Jun 2026 10:01:18 +0000
Files and hashes: 1: QACcx3bmkYq5FVm71dmit53bn4Q.roa (hash: oQ/m7QfRfNheRWfUqid3dTy2xJX9VnnT62jOhchvHuk=)
2: gux-IxdkibcThQl39PWiMsakK0g.roa (hash: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E=)
3: jpvZw7M6HWfeaPP7BBGWUfnUPW8.roa (hash: m69AM/qWHvVH8vQjk7f2bA/DtDMk2TIVp7SRlmCI4co=)
4: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: EtuBWGnpqw3sH4IUDNaTN7Jzck7qnwjQYtZTvmyi37M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:7a:44:df:fc:25:d1:48:f2:dc:d1:aa:a1:8e:a0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Jun 20 10:01:18 2026 GMT
Not After : Jun 21 10:01:18 2026 GMT
Subject: CN=4637160bdb55871d9242a124dfbcc5a588908f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:2a:c6:e3:c8:e0:46:3a:a5:c3:75:8b:3d:
e7:05:d3:75:cd:3b:d4:9d:de:78:c7:b1:90:5f:8c:
bb:66:45:d6:5b:02:16:10:a2:98:7e:d7:0c:a9:19:
20:25:92:a4:d3:cd:df:05:aa:01:0f:3c:59:ed:4a:
a2:a1:b4:13:70:1a:ce:06:f2:6c:a7:d6:ed:98:9f:
86:29:14:cf:96:a5:48:32:06:30:72:d7:5b:b1:c6:
5e:3e:f0:2d:ef:86:5e:3a:50:02:f6:e2:b8:22:68:
d2:a4:25:c4:99:5f:16:12:ec:40:ef:a1:55:3c:d0:
32:11:2b:b1:0a:59:fb:fd:b8:50:35:4e:c3:c1:f9:
ee:80:89:cf:34:b3:5b:90:f3:60:07:b9:cf:d8:09:
3d:93:5f:2c:0b:2c:35:9b:11:98:cb:fe:f7:f2:4d:
7e:6a:4e:a3:ce:23:d6:a3:da:58:fb:51:fb:c4:86:
73:42:08:8f:a5:37:57:ba:d6:b4:58:f9:87:5d:26:
66:2c:fc:c8:06:5a:8f:0a:10:06:58:6f:1f:ea:ef:
dd:8a:2d:20:2a:d3:86:4f:05:f1:eb:ab:5d:46:99:
ac:b3:ba:54:89:0a:cb:9c:bf:ec:21:c1:c9:05:39:
d2:d2:13:94:31:54:32:ed:ab:ed:d3:fb:f4:93:58:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:37:16:0B:DB:55:87:1D:92:42:A1:24:DF:BC:C5:A5:88:90:8F:90
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ba:5d:f8:84:32:e9:ea:c6:32:a3:45:36:5c:50:ac:0c:b6:
fe:e1:56:93:6e:35:f5:31:22:ba:06:d7:c6:5f:a0:10:92:77:
4d:13:9a:06:40:ca:99:89:03:06:79:15:7a:57:da:10:da:0b:
bb:be:e4:fb:9c:1b:c9:90:3b:bc:59:74:08:d3:10:d3:47:52:
eb:3b:ba:d0:ae:d6:6b:21:52:16:0c:d7:c5:4f:3e:57:da:5e:
b6:f4:d8:44:0d:77:f9:d2:a5:01:46:c8:37:0f:5c:25:2c:04:
ea:b7:a0:6f:25:59:3d:89:d1:90:de:ca:7a:64:c6:4d:0d:6b:
87:ef:95:fb:bd:69:5d:33:19:b6:92:d3:35:f2:81:e5:01:e0:
ec:2c:7c:3d:aa:82:c6:41:96:b2:72:69:74:df:b5:67:14:d6:
81:a2:d6:e2:81:9a:65:98:49:0c:6e:fc:13:20:58:66:38:7d:
e0:bf:63:44:81:ab:21:c2:28:55:85:f8:7a:77:e6:e2:aa:3e:
e9:73:5d:17:20:cf:12:dc:48:eb:19:3c:9f:dc:6c:55:d1:b9:
dd:67:8b:7f:c6:1a:3e:2a:46:0d:6c:0d:36:e9:20:19:1a:be:
1c:95:df:fa:57:a2:6c:46:c4:87:ec:9f:7c:1f:9a:da:d3:e8:
6c:65:6b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:17:48 2026 by rpki-client