Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: 2k5JCxTmKfJmXOe5lsizscFCUdOI8ds58WQ7SqJORPk=
Subject key identifier: 72:0B:93:AC:D0:7D:67:B5:99:1E:D1:72:A6:81:FD:93:2B:ED:B5:77
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019FA296D622B9C3A98BE832737198CF1DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0DC8
Signing time: Mon 27 Jul 2026 08:00:21 +0000
Manifest this update: Mon 27 Jul 2026 08:00:21 +0000
Manifest next update: Tue 28 Jul 2026 08:00:21 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: miloYuNk6IMAZPFAtxMI9+M6w7x2ioFzhPW93JWVQIE=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:d6:22:b9:c3:a9:8b:e8:32:73:71:98:cf:1d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Jul 27 08:00:21 2026 GMT
Not After : Jul 28 08:00:21 2026 GMT
Subject: CN=720b93acd07d67b5991ed172a681fd932bedb577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:83:bb:86:49:d9:2b:0b:b7:34:48:73:28:
09:43:af:4a:72:48:cf:fa:ba:8f:a0:d7:96:03:62:
12:57:52:8f:95:ba:04:80:a9:ff:a4:b3:f2:f8:8b:
f5:9a:b9:0d:7f:00:71:b1:72:20:be:f7:51:7f:a4:
ed:56:59:ae:ea:49:2e:30:fe:36:f6:0c:f3:a7:9b:
1b:e8:89:09:f0:25:ae:cd:05:67:15:1a:fe:97:ea:
b1:dd:d1:ea:85:24:b7:51:61:59:99:5f:e7:c1:c6:
a3:f0:ee:6a:f4:fd:1e:d0:a3:8b:fc:cc:93:ed:2f:
05:92:34:9a:a5:8e:4e:b9:95:d6:88:ca:0e:9b:a0:
2d:0b:e9:00:76:aa:81:b3:41:c3:0f:06:d7:9c:07:
01:03:90:cd:06:54:fc:bb:ad:59:9c:9e:16:6e:82:
0f:8d:e0:1d:ef:0b:ad:0f:20:ab:0a:18:01:4e:ca:
4d:0c:60:f7:07:e0:25:1a:71:1c:7b:d8:7b:c1:85:
71:23:20:9c:56:d0:94:01:a0:0f:2a:00:34:56:0c:
1b:b5:cc:4b:61:61:6b:e4:91:32:a1:37:c8:55:58:
9b:a6:1a:f3:0a:54:8d:b4:45:f3:11:2d:8f:58:46:
04:8c:e1:f4:6a:5f:28:0a:49:d4:dd:03:0e:9f:40:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:93:AC:D0:7D:67:B5:99:1E:D1:72:A6:81:FD:93:2B:ED:B5:77
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:53:de:6a:84:4c:44:ae:b0:17:f5:4a:3d:32:26:75:34:1e:
f6:3c:ca:27:17:d1:7a:30:9a:2b:8e:d2:47:4d:17:f2:81:c5:
7e:56:12:92:a9:c9:de:09:52:33:80:24:e2:e6:af:94:82:96:
2d:cc:5d:57:92:a0:55:bb:57:d0:5f:e0:42:85:45:c4:df:f8:
ab:43:f7:2b:99:34:16:67:bf:bd:15:85:b2:c4:88:ec:20:0a:
06:e0:0e:34:63:b2:f1:01:31:5a:67:f8:99:8f:f0:b9:5f:75:
c5:48:ea:97:e5:ef:d9:eb:ec:c1:92:15:b0:84:c4:48:73:1f:
57:f9:ba:67:fb:43:34:38:fb:e5:cd:7a:cf:f2:9f:30:1c:aa:
c9:26:91:41:b9:5a:87:fd:04:0b:11:2a:59:85:de:84:11:f5:
8e:5e:3f:b3:68:37:39:65:dd:52:03:73:23:30:98:ba:b4:19:
6e:d6:2d:00:8e:a2:1d:63:ba:cc:2b:5b:81:a1:57:5f:8d:f1:
3a:8b:81:b7:21:3a:e0:a6:e2:46:48:8a:8f:89:98:6e:cf:52:
7f:3b:68:55:27:03:86:a5:ce:b7:47:4c:16:23:38:15:95:12:
01:b1:56:c9:32:ed:f6:d8:d8:cf:8d:06:8a:6b:61:c1:4f:c5:
f5:52:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:30 2026 by rpki-client