Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: lBbBlCHuQ8n34lylyLHuzdbpGzoRnYRwv/UqsJJiuQc=
Subject key identifier: 04:4C:F5:3D:99:8F:20:F2:2A:7A:2C:81:89:32:6A:B9:BE:BE:D9:A1
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019CAC1066FBB344F846B7FA2229E53F065D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 1175
Signing time: Mon 02 Mar 2026 01:01:21 +0000
Manifest this update: Mon 02 Mar 2026 01:01:21 +0000
Manifest next update: Tue 03 Mar 2026 01:01:21 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: gRnooiF9BM4gsxZmGdYB1T1CiJ3q/BPMXwWKFpP7P7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:66:fb:b3:44:f8:46:b7:fa:22:29:e5:3f:06:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Mar 2 01:01:21 2026 GMT
Not After : Mar 3 01:01:21 2026 GMT
Subject: CN=044cf53d998f20f22a7a2c8189326ab9bebed9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:be:68:a4:fd:b3:7e:b9:a8:ea:3a:09:cb:
26:6b:7c:c2:18:91:b0:8c:4f:a8:db:24:a9:96:37:
20:8e:c8:52:c8:55:f1:39:43:c9:41:27:c2:1e:e6:
c3:89:74:45:e5:f8:ce:44:5b:48:b1:94:c7:0f:a6:
2d:b0:30:93:79:20:f7:d5:4b:89:7c:70:33:db:18:
b5:ab:30:52:22:0e:df:12:ff:c2:26:9f:79:02:01:
ea:9e:0d:c9:66:c2:d7:4b:96:69:bc:b3:a0:c2:19:
98:6d:bd:ec:b1:5b:b5:3f:c8:4f:ca:24:d5:fe:f7:
50:e5:d5:fc:b8:82:d8:d7:e2:e8:ac:37:94:84:44:
33:ee:68:a3:ae:ea:0d:1f:27:fe:2b:8e:aa:b6:1b:
5e:43:1e:6e:d8:67:f6:07:5b:0c:5e:a2:b5:98:c1:
ba:aa:7d:a2:38:e9:66:f1:d3:dd:ba:d0:bc:10:1a:
3d:bb:1b:a2:c2:cf:ca:8a:bd:8a:12:31:a2:98:63:
a4:33:4e:09:89:e0:37:98:01:c0:10:9a:b2:d9:ba:
cd:ec:72:71:88:57:8f:99:c0:d3:a4:e3:58:0a:7f:
d5:06:77:80:4a:5c:82:a7:79:7f:96:0f:a7:66:ec:
20:32:96:54:3e:dd:f6:c4:52:bb:b6:0a:b2:ab:5a:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4C:F5:3D:99:8F:20:F2:2A:7A:2C:81:89:32:6A:B9:BE:BE:D9:A1
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ca:b6:19:00:01:9c:41:56:4a:87:e8:a3:7c:44:4e:12:ba:
c7:18:ea:b1:7e:cd:a1:38:a7:89:a7:d2:d2:0f:8a:f6:c1:6d:
63:dc:a6:fd:17:b6:16:a1:84:2b:9a:5d:25:d8:f5:2b:6b:a3:
88:a3:25:2f:00:8d:84:6c:47:d8:7f:1a:2f:64:97:95:98:a1:
eb:3d:6d:f8:d0:35:83:19:b4:79:a8:76:6d:99:5a:59:93:3a:
33:19:cc:8e:5e:5e:d9:d8:12:db:8e:a2:96:15:f9:17:4a:80:
d9:f2:61:f6:49:61:8f:5c:bd:c8:a8:70:f1:82:46:7e:b6:f2:
c8:8f:91:26:c2:96:44:c2:8b:0b:d1:e4:22:a3:f6:51:02:ff:
58:0b:bc:28:28:71:ec:b3:b2:fa:98:a9:ec:81:51:0c:35:df:
7d:dc:b9:f3:67:6d:84:e1:45:fc:53:0d:91:31:e1:8c:ee:6c:
22:54:92:75:5d:36:19:af:45:a9:c8:37:49:99:7f:57:e9:f7:
4f:97:31:63:74:9a:4f:7d:2a:21:b2:d2:e6:dd:06:68:4f:a0:
a2:52:6b:c7:52:5a:c7:0f:25:92:79:88:e8:91:7e:b3:c9:7d:
6a:8e:6d:d7:58:a7:26:43:40:70:1f:1a:ec:cb:2c:d6:8a:ea:
2d:27:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:24 2026 by rpki-client