Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: FmltPdhw98MlJY5V8iCSOqtmPrsqRAQlnRbBRuHERG0=
Subject key identifier: 5A:2C:0B:B3:F8:5B:C0:B3:D5:83:C3:1C:D5:C5:69:E2:9F:D3:11:3E
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019E28B8A4749701FEBCB3E36C995788B39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0CA6
Signing time: Thu 14 May 2026 23:00:49 +0000
Manifest this update: Thu 14 May 2026 23:00:49 +0000
Manifest next update: Fri 15 May 2026 23:00:49 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: BZujZsTu6kTXqGUH6gpy+QvC4nmeSA3rV0uZfqMKHlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:a4:74:97:01:fe:bc:b3:e3:6c:99:57:88:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: May 14 23:00:49 2026 GMT
Not After : May 15 23:00:49 2026 GMT
Subject: CN=5a2c0bb3f85bc0b3d583c31cd5c569e29fd3113e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:d1:9e:a9:2c:9d:69:1c:bb:aa:37:16:67:
e8:42:26:ac:31:5c:27:ab:eb:32:32:8a:42:b9:7a:
30:ad:09:12:c2:5c:ec:eb:73:47:c2:a3:c8:b2:20:
cc:80:55:53:6e:44:67:ec:0e:17:79:24:82:6f:ad:
bf:55:9e:b5:f4:e1:51:3a:01:17:ed:f1:e2:89:4c:
4c:5c:a1:4b:6a:8b:c7:41:07:88:47:00:2c:82:2f:
f5:ba:27:55:61:c9:4d:8b:32:10:d6:b0:ef:92:91:
4d:7e:2d:b6:0a:7b:b0:97:30:e5:62:83:38:fb:70:
fa:92:45:1e:9f:e5:63:bb:40:2b:24:b2:8a:76:77:
e2:9f:03:1f:12:50:7f:e8:43:e1:3b:0f:98:d0:a5:
44:81:02:72:a0:48:46:0c:6d:bd:ea:de:a5:a4:cb:
74:e2:82:eb:28:f4:6e:8f:69:45:91:8d:5d:22:c3:
c3:47:f7:ad:10:e1:15:a7:46:be:d5:eb:96:3e:a0:
82:d4:b4:f4:e3:cd:18:8f:cb:b5:97:04:e3:05:a1:
66:73:bf:7f:22:8a:3b:d4:9d:1e:a0:08:4c:67:a9:
25:1c:fa:17:40:7d:1a:82:ce:83:fb:8a:e2:1c:ad:
fb:3d:d5:15:0f:6d:9a:29:25:d7:53:3e:6a:25:53:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:0B:B3:F8:5B:C0:B3:D5:83:C3:1C:D5:C5:69:E2:9F:D3:11:3E
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b2:f6:d3:a7:f6:d3:eb:7c:3c:7f:b7:f1:38:31:7f:40:da:
f7:cc:a0:29:0c:a6:9e:18:45:90:1e:75:06:b3:9d:4e:cb:e3:
e6:2e:19:50:df:46:8b:c7:b3:0a:2b:4d:90:b8:d6:4e:c5:5e:
0b:db:4b:91:b6:71:03:4e:ed:c8:91:a0:70:95:7b:cb:e6:72:
4c:4d:a5:f0:ca:c8:f3:cb:e3:a3:fd:e0:3e:6f:b6:19:22:99:
5a:e1:90:76:9c:1b:72:6f:b0:d3:79:b3:17:d8:a7:a8:9b:40:
94:8c:2c:c2:2e:02:46:74:4b:94:f2:dc:c4:d0:9e:02:b9:12:
ba:c7:3b:f2:65:6c:f0:0c:b9:98:95:14:61:e1:67:e5:c7:39:
76:e2:2a:4f:75:1e:4d:e9:b5:e7:8c:f8:31:b1:87:db:80:6d:
ea:a0:57:76:44:b7:b0:a7:58:9a:b0:7d:f4:f5:c4:30:06:4f:
8a:af:ad:af:11:7c:fd:33:10:a0:14:45:75:49:51:6f:cc:ab:
be:a1:ef:f0:e9:a2:e0:1b:b1:a5:6e:19:48:66:e5:dd:40:4c:
cd:43:bf:d7:62:bb:f2:d9:6d:12:50:b4:f2:dd:a1:6f:e6:33:
23:a1:f3:cc:ea:7f:10:51:92:2e:9e:ce:76:32:79:6e:85:e8:
59:88:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:37:26 2026 by rpki-client