Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: OqVVYVhHuGUWyCK/Xjd1Rp3MkbVMCGjonomvNEJWMqM=
Subject key identifier: B2:27:6C:2F:7B:DD:F3:C3:BC:08:19:8A:0F:DD:4F:75:DE:73:B6:4A
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019FACACE799BDE904963EE4982E9735D1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 1303
Signing time: Wed 29 Jul 2026 07:00:40 +0000
Manifest this update: Wed 29 Jul 2026 07:00:40 +0000
Manifest next update: Thu 30 Jul 2026 07:00:40 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: YE/n8O3t5KsOU+enAgaTBZLQW3/C3qCOdtYJ4HaphKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:e7:99:bd:e9:04:96:3e:e4:98:2e:97:35:d1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jul 29 07:00:40 2026 GMT
Not After : Jul 30 07:00:40 2026 GMT
Subject: CN=b2276c2f7bddf3c3bc08198a0fdd4f75de73b64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:d4:e4:86:1f:e3:d3:70:2f:fe:44:4c:58:
0f:5e:d8:cf:d7:ba:98:3f:c0:0a:2b:09:5f:bd:cc:
57:1b:12:95:58:0b:63:ec:a1:1d:3a:4b:56:5a:a2:
c6:c6:77:4b:cc:f4:18:e3:5b:6b:14:c3:88:88:93:
b6:e7:df:40:2b:36:40:ce:6b:bb:b6:be:9f:4c:8f:
32:be:16:ee:33:f9:ac:87:fa:e0:9e:79:47:f1:0c:
50:4d:4b:2d:8b:eb:6d:3b:46:32:ab:70:55:28:65:
c6:44:54:34:cb:c7:16:4a:53:7f:0d:24:6d:ff:71:
14:5f:ca:26:78:d3:b9:de:e0:2c:78:ed:4d:9f:07:
de:10:3e:8d:3f:7d:33:c9:61:57:be:7c:68:0b:79:
5d:97:7f:a2:4e:74:b1:fc:73:0e:db:4e:45:45:70:
fc:3d:6f:12:ac:66:c5:6c:9a:23:cc:d0:05:a8:4d:
2d:c0:35:73:07:75:0d:34:f2:c5:2c:7e:54:a4:9d:
9a:5b:e9:2d:38:fb:68:f5:85:0d:66:17:a6:3b:49:
28:21:95:65:c1:ff:af:1e:01:6c:1a:53:1e:5e:35:
56:11:af:bd:df:07:c8:23:d4:12:3b:20:d6:28:55:
f4:06:a2:13:3d:1d:7e:e1:d5:62:25:43:7f:06:bd:
07:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:6C:2F:7B:DD:F3:C3:BC:08:19:8A:0F:DD:4F:75:DE:73:B6:4A
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:31:19:20:eb:f8:33:f2:5b:af:e8:97:9a:64:58:d9:99:10:
79:56:4d:02:30:92:2b:d2:e2:aa:25:4f:f2:dc:42:f6:5c:85:
ff:af:46:0b:53:7e:96:db:24:1c:fd:27:f2:20:9c:54:64:9f:
57:00:68:da:df:b2:46:d8:03:78:6f:bc:00:45:d0:75:1b:61:
ca:df:c6:25:8f:92:79:2a:ea:93:4f:ec:d9:2c:5f:8e:8b:91:
94:69:40:4e:ed:c1:6f:e0:07:5c:7c:76:6c:f9:54:0c:bc:d8:
29:b1:71:f7:4e:dd:f9:d6:3e:23:64:e4:df:1d:17:30:97:67:
83:78:af:ef:b3:f2:77:57:9a:ea:67:1d:71:34:a6:79:5d:97:
d0:67:12:1a:73:06:00:74:01:61:fb:01:1e:7e:71:f9:86:56:
63:a5:3b:49:39:2c:d3:2d:c7:17:32:3f:b0:b2:f3:c4:3d:b8:
11:75:36:c7:db:d3:ac:b5:0e:e1:67:c7:fe:ad:6f:d5:4e:70:
b0:9e:35:d9:c8:b8:cd:3b:ac:f9:fd:fd:05:0d:30:e4:d0:b7:
a1:94:57:9e:19:5f:11:b9:df:ab:5c:d5:75:22:b1:98:4c:3e:
e5:9d:8f:1d:dc:48:29:3a:40:eb:43:9f:b0:a1:a7:74:86:6c:
c3:38:17:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:32 2026 by rpki-client