Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: Xqiz+P0lRKTOCY63SZHbHeapeRe0AkF2+JpXDf1dcxA=
Subject key identifier: FD:00:A4:B7:FB:E9:1D:48:DA:B5:A7:C9:09:82:F0:1F:BA:6C:0C:78
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 01A0EB533AC2C5D2C792D8D5D5F1EDBA5DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 13A8
Signing time: Tue 29 Sep 2026 04:01:35 +0000
Manifest this update: Tue 29 Sep 2026 04:01:35 +0000
Manifest next update: Wed 30 Sep 2026 04:01:35 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: 5oITaZd1kuECHUp0aDRVdLtvQ1deGo8INz7LeGAk5Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:3a:c2:c5:d2:c7:92:d8:d5:d5:f1:ed:ba:5d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Sep 29 04:01:35 2026 GMT
Not After : Sep 30 04:01:35 2026 GMT
Subject: CN=fd00a4b7fbe91d48dab5a7c90982f01fba6c0c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:bd:3c:ad:ea:2f:35:bd:41:b4:4d:62:fe:
d7:4e:b5:3b:45:21:4c:cb:c0:c2:ab:f2:84:b4:95:
73:d6:49:d0:d3:70:82:e9:84:22:80:e0:ec:da:56:
a1:22:6c:a9:e0:3a:10:d8:f2:df:d3:6d:8c:af:10:
8b:6a:71:7d:fc:a9:56:08:c3:25:3b:01:d1:29:bb:
ec:c3:63:83:a1:74:1d:5e:87:73:c6:80:05:f2:a5:
2f:00:30:b0:91:f1:c8:ac:3f:17:68:41:61:79:f8:
3a:0b:96:26:8a:c2:59:d8:de:90:f3:b4:4f:ea:3c:
39:6f:7f:6a:6b:28:15:ac:39:1b:50:51:b0:e8:17:
2c:79:6e:b5:03:a6:11:07:21:35:ac:2b:f0:eb:f2:
5e:b0:b9:35:b4:57:7d:d9:9e:b4:19:c9:f1:eb:f2:
68:89:02:30:2c:fd:1d:45:47:dc:c7:18:b8:62:30:
36:d7:27:2b:5e:22:55:03:1b:de:99:ac:aa:46:34:
b6:c9:b6:f5:50:59:bd:2a:42:60:ca:8a:94:bb:5c:
61:7f:63:3f:8d:5e:b4:3b:8f:50:32:c5:cc:4c:b5:
9f:7b:04:82:43:3d:4c:82:bd:7e:3d:07:3c:3b:0e:
b9:f1:18:6a:9d:b7:9d:c4:1e:c7:c0:40:e8:d1:8e:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:A4:B7:FB:E9:1D:48:DA:B5:A7:C9:09:82:F0:1F:BA:6C:0C:78
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:03:58:be:64:d3:ab:db:ab:df:b0:db:37:61:ce:eb:8a:
4d:fa:ee:b0:bb:67:fa:f8:e6:5e:2f:75:a8:f8:f4:5f:9e:e4:
91:a4:4c:ae:13:ea:4a:2b:4a:c4:f7:1c:cc:43:5a:16:ff:dc:
96:d6:d2:fa:76:e1:ef:02:1b:6f:14:54:93:b6:cf:94:74:d7:
69:38:06:dd:46:0c:50:c3:0e:b7:45:7e:49:f9:49:ca:af:4e:
c9:28:6c:13:1c:6c:05:9f:bb:d0:26:49:68:e6:74:d8:4d:34:
c8:bb:94:eb:32:00:12:25:f9:1b:25:f9:70:fb:d1:c2:97:3f:
ae:49:58:04:28:13:85:bf:e2:50:dd:d7:7c:68:fd:68:ce:ce:
fa:7e:9f:8b:49:e5:7b:e6:d5:7f:f0:03:e4:33:a9:5a:7e:b8:
5e:fd:81:99:1b:61:c8:23:d1:eb:27:e4:1f:ba:fd:ce:43:9b:
2d:a3:1e:38:bc:f5:55:85:f8:41:e9:99:f0:91:43:bd:96:9a:
8d:9e:c1:f3:36:70:e0:b7:2f:38:78:9f:42:f6:54:f1:f9:3d:
4a:19:4d:e6:46:32:3d:13:5e:e2:7d:fb:5e:bd:a8:ac:f1:8b:
ad:cf:a1:45:06:92:f1:63:b3:5b:e0:a4:4a:e2:9f:80:37:7b:
21:4e:83:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:11:36 2026 by rpki-client