Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: ZW1uyjK7aC4A3tDgqYhikT7v5p9t/H3tr+wmLXGggho=
Subject key identifier: AD:6B:C4:1E:7F:C5:60:52:B6:A5:16:B0:4F:44:C9:80:7A:B4:BE:CA
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019D389C1DC069A8080B25100F91A8B6866F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0C88
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: ghmr+wthr92mQYhCygnHqmSpAoeAzfmsqs1p/67deLg=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1d:c0:69:a8:08:0b:25:10:0f:91:a8:b6:86:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=ad6bc41e7fc56052b6a516b04f44c9807ab4beca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:e2:43:a9:75:cf:4f:57:4c:2c:72:1c:43:
83:89:dd:ba:29:c3:b9:b9:5d:6d:c7:04:be:94:1f:
e2:79:5d:11:64:a1:9a:00:97:28:90:ca:30:e1:95:
36:76:de:37:6c:36:12:2b:7f:e1:7c:8a:4c:11:9a:
cc:e9:a8:87:4e:fd:6a:6e:bc:52:8b:55:74:60:3f:
5b:e0:1f:6b:32:cb:89:36:5e:1f:5c:24:ad:35:1f:
70:ab:28:84:fe:a9:75:6b:d9:3d:0e:c9:42:91:14:
32:4f:98:d2:66:91:e1:21:57:1b:41:11:ab:f7:6b:
ba:17:23:74:f0:3b:d7:a8:97:d7:64:75:f7:57:a1:
16:2a:c1:88:0b:9c:79:e7:4e:b7:30:1c:b6:9b:1c:
4b:4d:06:60:b0:de:d1:3e:bc:a0:d8:93:a3:79:58:
29:d0:29:71:15:8c:66:8f:af:e9:7d:62:d4:fd:c0:
19:32:6a:1c:26:20:d4:cb:ed:21:2d:d2:a7:f2:3b:
2e:7c:35:f2:76:4a:eb:0f:ee:c6:5a:6d:38:15:1b:
1c:d0:15:09:63:33:d0:a8:13:e3:af:0b:15:38:7f:
e8:57:9b:ce:75:7b:40:0b:55:2a:f1:b9:36:b3:d2:
2c:54:c9:3a:3d:8b:6c:23:19:27:a7:65:5a:24:9d:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6B:C4:1E:7F:C5:60:52:B6:A5:16:B0:4F:44:C9:80:7A:B4:BE:CA
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e8:30:db:26:8d:39:b2:c0:8a:ff:53:4e:85:bd:8d:57:50:
11:db:53:0c:10:ed:75:c1:f7:33:91:f3:d5:cb:89:e1:20:ea:
24:1f:d2:44:e1:51:14:e3:c0:2b:40:61:ff:2e:8a:1e:23:ea:
5c:9b:fb:25:f3:25:9d:f5:f6:38:dd:a8:aa:20:36:12:66:4b:
f5:9b:2e:aa:f9:0a:10:fe:7c:47:b6:3f:98:98:f1:f3:06:ce:
4b:e9:f2:98:39:79:ee:cc:25:0d:b9:5f:7b:b9:b8:1d:8b:33:
a3:2d:50:98:5c:cf:23:d8:fa:e2:ec:10:b2:82:01:32:4d:e9:
cd:97:5b:45:f2:69:66:e3:5c:01:bf:eb:84:cb:76:ab:ff:15:
c0:05:02:56:54:7d:08:93:f3:85:ec:8a:a8:64:15:31:f9:32:
e1:cd:83:91:7e:52:96:1d:46:3a:b1:c3:5a:da:dc:16:f9:7e:
58:12:20:7f:83:41:fa:be:13:ad:8e:90:e4:cf:74:4d:07:29:
56:23:0d:55:61:6c:77:bd:8d:ff:80:cd:43:3a:91:b0:c0:d8:
96:63:74:c5:0f:27:34:90:74:21:db:4b:cf:38:83:68:53:06:
29:7c:ca:54:31:4a:0d:99:73:06:65:db:40:f0:ea:6a:95:f1:
96:c4:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:37 2026 by rpki-client