Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: 4hPpZ4T98V0ejQyYjX7FrB6FX67p539ROIaYjSOabjk=
Subject key identifier: 2F:8C:BA:15:60:AF:2B:E9:22:37:52:36:AF:E6:92:A1:E9:43:FF:9E
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 019EE28BBCD16A5BB15A73AA114AE863EE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1976
Signing time: Sat 20 Jun 2026 01:01:09 +0000
Manifest this update: Sat 20 Jun 2026 01:01:09 +0000
Manifest next update: Sun 21 Jun 2026 01:01:09 +0000
Files and hashes: 1: QACcx3bmkYq5FVm71dmit53bn4Q.roa (hash: oQ/m7QfRfNheRWfUqid3dTy2xJX9VnnT62jOhchvHuk=)
2: gux-IxdkibcThQl39PWiMsakK0g.roa (hash: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E=)
3: jpvZw7M6HWfeaPP7BBGWUfnUPW8.roa (hash: m69AM/qWHvVH8vQjk7f2bA/DtDMk2TIVp7SRlmCI4co=)
4: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: x5xnoLApnmKbS+/9i6L3JMSnp9tYAB5uRymqYpQtcVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:8b:bc:d1:6a:5b:b1:5a:73:aa:11:4a:e8:63:ee:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Jun 20 01:01:09 2026 GMT
Not After : Jun 21 01:01:09 2026 GMT
Subject: CN=2f8cba1560af2be922375236afe692a1e943ff9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:ac:eb:56:d4:bb:31:05:81:a3:22:34:88:
3c:bd:9f:29:b5:2d:01:a3:22:c5:9d:f8:bc:fa:e3:
65:15:c0:2b:a3:74:c5:a3:65:6e:dd:2e:b4:66:1c:
25:5a:c3:0b:a9:b7:a1:07:a6:18:93:87:7a:01:27:
78:70:40:28:23:bb:78:68:11:e4:70:fc:f6:e9:27:
af:de:b0:f3:a6:6d:e0:a3:66:3c:ea:ed:62:2d:ce:
8d:e2:9c:6b:0d:a0:59:2e:c3:82:8b:c2:7b:d6:89:
29:33:48:f7:ab:54:b3:52:68:bf:09:f1:ba:ca:5b:
f9:13:78:22:7e:b0:20:25:d3:44:61:f7:b0:b3:5e:
ed:94:b4:c3:60:64:94:ba:eb:1c:a4:7d:f4:f8:9e:
ca:21:cf:ee:9b:0c:d1:56:c2:e5:44:f8:0b:11:61:
72:53:27:a9:69:6b:84:6e:bf:01:d7:bc:40:62:dc:
13:22:a9:b8:a2:6f:84:14:9b:30:f1:e5:86:f1:72:
8e:f3:17:f9:8b:c6:51:e8:56:20:d8:54:01:fd:85:
d8:25:7d:f7:6f:0b:40:70:c3:3b:57:ff:a0:0a:07:
88:e7:63:2d:c2:34:8e:3c:45:1f:cd:56:f0:61:55:
f9:45:a1:75:2d:4e:93:4b:63:30:34:b8:20:11:f9:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8C:BA:15:60:AF:2B:E9:22:37:52:36:AF:E6:92:A1:E9:43:FF:9E
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2f:b6:6d:99:a2:dd:04:89:cf:19:c2:64:18:4f:67:4d:57:
d6:01:de:af:80:a4:09:23:8a:7c:20:eb:f8:11:1f:38:df:19:
53:33:de:f2:e7:8d:54:f9:c4:82:1f:92:52:c8:2b:f9:52:6f:
e6:47:29:03:d6:69:1b:bb:8a:30:6d:00:36:a0:8a:00:8d:8f:
96:3d:64:c4:1a:97:3f:e3:16:d0:8a:14:b1:6c:40:c3:da:61:
51:9a:a8:ef:aa:e5:a5:30:bc:19:dc:b6:ad:87:8f:a2:22:46:
23:3b:c7:a0:f4:4a:63:4b:41:19:d4:f8:57:e8:3e:af:4f:68:
4d:1e:e2:fd:b6:9c:5c:9e:88:9e:2c:49:0d:85:18:a7:7b:f4:
26:49:6d:08:82:90:ab:82:0e:e5:99:c5:a2:05:87:cd:89:a3:
8b:16:d0:39:53:6c:35:07:da:f3:c3:73:e5:d0:11:3e:aa:d2:
4b:00:85:1f:73:67:7d:e1:55:07:5c:9a:a9:46:1e:3e:fc:2d:
a5:6d:d2:60:ac:e5:d1:62:d4:7a:6a:f7:4d:55:0c:23:9b:37:
de:b1:ad:70:26:d4:36:b5:56:8d:ac:ad:a7:4d:19:58:90:42:
93:ec:f8:b9:0a:8d:f3:45:c9:90:e2:51:f4:19:29:19:80:7f:
cb:ce:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 12:16:33 2026 by rpki-client