Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: 7nQUf0JbNyGTYZk7Ko/aVz+vOiYDtPkFOCi0XNM+i78=
Subject key identifier: 35:40:0C:20:AF:C3:03:8D:A1:99:92:06:62:37:FA:82:3C:FB:CD:79
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019D999904EA9FAF26E7397A6976AABAA44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 11F0
Signing time: Fri 17 Apr 2026 04:00:35 +0000
Manifest this update: Fri 17 Apr 2026 04:00:35 +0000
Manifest next update: Sat 18 Apr 2026 04:00:35 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: NF7souiRDdEA08Ou2B5cTh6W4ftt+9NnWyoDjQIcVNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:04:ea:9f:af:26:e7:39:7a:69:76:aa:ba:a4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Apr 17 04:00:35 2026 GMT
Not After : Apr 18 04:00:35 2026 GMT
Subject: CN=35400c20afc3038da19992066237fa823cfbcd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:a5:c2:af:7e:d5:00:76:c0:f5:91:38:61:
3d:8c:29:7f:bb:a2:e0:27:a1:56:a5:8d:ed:b1:e7:
c0:0d:c9:4d:6a:ce:f4:cf:9c:f6:63:91:37:54:b4:
34:51:dd:2c:ba:c8:05:47:96:a8:97:d6:2d:6e:3d:
e1:1f:7e:88:b6:39:ae:87:cc:8d:36:fb:40:f7:9d:
1c:18:b4:98:1e:0a:f0:46:8f:98:6d:9a:97:da:fb:
40:51:4e:3b:fa:e4:0d:c3:04:93:06:27:7d:86:5c:
21:89:fb:53:2f:80:3c:20:43:80:43:a1:3b:5e:a8:
54:3a:b9:5e:a7:96:46:1a:a0:9f:07:05:f2:e6:e3:
f4:f4:e6:d3:82:a9:4b:95:d1:f9:aa:58:3a:05:6d:
0e:4c:f2:be:ab:e5:a2:68:26:c3:f4:fa:17:cd:14:
04:6e:66:6f:55:7b:61:5f:83:0f:5c:a5:48:a1:44:
b8:1d:d5:89:76:89:46:e0:b3:87:3f:46:bc:32:14:
1e:30:89:3f:4a:25:e2:b0:f5:1d:5e:11:53:e4:31:
df:7b:0a:6b:ab:f0:cb:88:a3:0a:85:30:57:df:7b:
94:d3:4c:01:12:15:70:c4:b7:f7:70:fb:93:ab:c1:
95:4c:e8:d4:e6:43:34:71:2c:18:2b:49:ac:3c:e5:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:40:0C:20:AF:C3:03:8D:A1:99:92:06:62:37:FA:82:3C:FB:CD:79
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4d:f9:a1:3b:83:2c:8f:7e:0f:f4:e9:f8:de:72:ef:42:a3:
e3:aa:d8:f2:cb:54:3a:a1:11:69:6b:93:2c:14:3b:59:7e:1d:
c5:27:c5:63:b7:b8:e0:4b:37:d5:14:5c:8a:e6:ae:7d:88:5a:
ac:76:ce:f1:d3:73:2e:bd:02:ec:d3:aa:58:b6:d6:94:23:56:
b8:6b:e1:09:76:05:e0:ff:33:e6:ef:94:48:0d:74:1a:1b:f2:
0b:4d:6c:6a:1a:86:b7:c2:f5:b8:20:1a:bd:9e:81:b9:4b:f6:
76:16:22:bb:8c:33:7f:83:12:4e:55:6c:f5:c6:89:64:62:b4:
1d:7a:82:db:30:fe:6c:84:4d:8d:09:2a:f6:ed:ca:e9:87:14:
c9:34:0c:a5:ec:da:48:b6:d1:31:b0:d6:9e:45:e2:98:74:d2:
40:0d:ee:44:ee:96:15:7e:ab:22:90:d1:9d:6e:ec:15:30:f5:
6b:58:e4:d3:5d:4b:31:1a:08:9c:86:f1:18:eb:ca:9a:88:12:
bd:3e:5a:90:b5:8c:ee:97:d1:95:f4:a4:9b:b6:71:ea:fa:ff:
df:f6:f9:9a:c2:bf:d9:ba:3e:09:f6:38:c0:61:84:37:cd:c2:
e2:39:c9:a0:00:af:34:63:40:9f:f0:ac:a1:7b:a1:8e:4e:78:
c4:27:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:14 2026 by rpki-client