Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: qKf6UnYn6rHjMI7PyMuKFaGsFNuVko3d8JSsEy7yCbM=
Subject key identifier: 2F:F7:7D:6D:04:45:EB:0C:16:E8:F0:11:42:5F:B6:66:4E:84:F6:1C
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 019D3909C7BAB340A7CFDA69B6C2729AD249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 0B15
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: quYplJmRMgz9SPNy3VtDFIPdAwvrT6GqT9MXWUhtCPY=)
2: pgGnSHyUvU2MCidf2eDuWrDOeCY.roa (hash: oty+EyubS3vsZNVfWcxWo/GIVhsqz3pi2U3eHoewYe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c7:ba:b3:40:a7:cf:da:69:b6:c2:72:9a:d2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=2ff77d6d0445eb0c16e8f011425fb6664e84f61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:1e:5e:00:f2:2d:b6:b7:e6:90:1c:a9:bf:
34:83:2f:87:25:ce:00:c5:73:77:cb:8f:77:bb:99:
9a:f6:38:66:e5:0a:06:ab:a6:7e:6e:b2:5b:6e:8c:
7d:06:cd:30:69:c6:04:b9:8a:9e:52:42:fa:49:a2:
23:e5:ee:69:fd:22:68:68:d6:17:41:01:c5:34:34:
49:25:1c:60:92:fa:67:48:3f:f8:bd:37:0a:46:ff:
a4:a4:7b:05:64:4d:e9:1f:e9:6e:93:a9:f3:fa:5f:
a4:a4:05:59:95:6e:97:46:aa:20:3e:56:94:1e:5c:
37:89:ee:df:05:91:35:75:8d:e0:bb:f6:0c:23:d8:
df:bf:d8:c7:06:e4:e7:9a:57:e4:21:e5:21:d6:8f:
a8:10:ba:1f:68:a2:38:9b:56:6d:28:e6:4f:71:33:
06:25:09:14:d2:5c:aa:29:80:b7:5c:cd:5c:c1:5a:
c4:69:d7:82:2f:9a:7a:5c:35:41:a5:b7:40:33:87:
cb:20:21:cf:81:fc:c2:89:d0:ae:ff:00:34:83:38:
97:a5:86:d1:7c:84:2d:2d:80:c2:15:91:56:82:bd:
b0:8d:62:31:59:cb:62:21:12:d9:26:1a:1c:4f:71:
37:a5:96:30:ef:6c:ef:e0:d8:39:f8:c5:3d:d4:a8:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:7D:6D:04:45:EB:0C:16:E8:F0:11:42:5F:B6:66:4E:84:F6:1C
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9e:01:24:ed:de:9f:27:5f:a3:55:64:45:4e:81:6b:ae:e9:
3a:41:9a:fd:f5:38:47:94:a0:7a:2b:f7:85:a2:22:35:37:39:
a8:a9:60:98:76:62:f8:d5:88:aa:cb:83:be:5b:b2:58:33:5b:
71:79:54:62:4f:40:a4:1f:70:6d:a8:10:6a:04:c6:26:b5:11:
c7:fa:db:46:a7:9c:86:03:00:b2:cd:f1:52:de:15:a5:50:de:
c3:13:41:19:47:9b:12:d5:dd:d4:c3:36:c1:7c:76:db:c5:d4:
f7:a8:8c:1a:8a:8c:07:f9:2d:f0:b9:13:10:78:2f:4f:5a:7a:
58:f8:e4:e4:96:5c:4c:96:7b:3d:ed:83:b3:90:11:07:c5:7c:
09:57:0c:c3:b6:c1:9e:32:28:b0:c9:ad:3b:3d:fa:d0:ac:7c:
b5:b1:e2:20:43:71:16:ba:ba:de:ed:11:25:ae:66:bd:4d:5c:
e4:fc:1a:dc:9f:17:2a:aa:2d:f3:2a:28:a7:b2:57:78:69:c4:
03:66:a1:50:65:a6:45:cb:4d:85:c7:15:4f:39:41:a6:f0:2e:
eb:4d:ee:c2:e5:bb:fe:82:60:23:77:03:b7:ce:b1:38:e0:9c:
7e:b9:d1:f6:ce:17:8f:1d:60:64:64:94:0f:08:e1:5f:80:37:
e3:02:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:48 2026 by rpki-client