
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: CnG9FFiHfm0Z2jqigP62l4Ce7NYWaVd9jcJfEg+7T5M=
Subject key identifier: F1:64:69:1F:90:C1:C8:B0:25:7E:FF:9A:8D:4D:D8:08:B7:A7:D0:66
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019EBF233187E2D53790A854A7784BBB7D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 1288
Signing time: Sat 13 Jun 2026 04:00:15 +0000
Manifest this update: Sat 13 Jun 2026 04:00:15 +0000
Manifest next update: Sun 14 Jun 2026 04:00:15 +0000
Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: YY4zCdDEFkf4cOaguZXwPM05zhct2UWQM+x/YEGMB+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:31:87:e2:d5:37:90:a8:54:a7:78:4b:bb:7d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jun 13 04:00:15 2026 GMT
Not After : Jun 14 04:00:15 2026 GMT
Subject: CN=f164691f90c1c8b0257eff9a8d4dd808b7a7d066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:bf:ff:5f:a2:b7:75:44:01:3e:22:76:b7:
da:b1:63:ae:bd:fe:f2:75:55:ee:c4:2f:78:f9:49:
89:2a:24:92:54:35:7d:3a:6f:54:98:f7:ce:7b:d8:
aa:1f:f7:40:cc:5c:ba:47:d4:70:c3:a6:ef:55:ac:
24:7a:67:da:9e:57:5c:2b:cd:f6:be:cc:23:cf:9a:
90:58:ea:c5:82:78:fe:02:27:ef:c5:7b:fe:25:25:
46:16:46:72:11:f2:2b:42:81:d0:c2:83:c0:73:aa:
59:93:2d:2c:20:8c:18:04:53:65:c4:ac:87:7c:e7:
d6:17:93:5b:72:fd:6e:9a:8c:a6:a4:dc:74:fb:dc:
af:31:47:c6:fd:78:6b:48:c2:75:f9:6e:e5:ae:12:
91:5b:cd:e5:3d:a8:8f:13:aa:f4:c5:8b:8f:2c:ce:
55:24:12:d1:80:b2:7e:ae:f3:0f:f1:fd:d7:ff:b6:
91:2b:90:1f:72:be:52:2d:18:d7:88:c7:6d:ca:68:
d9:53:7b:e2:8e:70:e3:68:0b:b3:da:a5:29:7f:71:
f8:26:32:c8:bf:4b:c2:f0:52:b6:ac:c4:c8:ac:81:
cc:03:7c:7f:95:8c:82:01:80:ab:1f:83:81:93:a5:
b1:f0:15:d7:92:3c:7e:70:45:0f:47:eb:6a:38:65:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:69:1F:90:C1:C8:B0:25:7E:FF:9A:8D:4D:D8:08:B7:A7:D0:66
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:84:64:6a:d6:1f:46:f1:c2:1f:8d:71:fb:07:68:d0:a9:78:
40:af:f1:f7:08:4a:1c:e7:a5:16:cf:7b:23:03:e0:09:00:70:
e6:35:3d:4b:5f:d9:ba:02:34:e7:a5:5b:8a:3b:63:5d:2b:01:
df:69:35:ed:e1:07:71:cf:fb:44:03:0f:62:b8:f9:95:0c:0d:
bf:80:fa:91:d5:26:ac:53:6b:52:24:2a:e9:8e:50:65:46:85:
2a:84:4d:2e:54:1e:b3:0e:b8:cb:6f:a4:fa:8a:24:87:89:4e:
78:cd:b9:80:87:29:04:18:d7:b8:eb:33:97:25:b7:b2:f5:40:
3d:98:69:e7:38:9b:2a:3f:46:cd:9b:ca:97:c1:72:91:39:00:
8e:09:5e:3b:ff:0c:85:63:05:08:35:36:a0:18:ab:c6:8f:72:
4b:24:bf:65:a2:44:a6:75:eb:23:07:24:af:30:bf:77:3a:30:
a3:d4:2f:33:5f:0b:c0:07:80:94:bd:40:cb:92:dc:c4:a6:a2:
8c:65:b0:cc:51:8c:51:ad:b6:c5:4e:30:7b:52:cd:55:a8:da:
8f:57:34:81:29:e4:8e:c4:74:e3:1f:64:25:c8:fe:48:e9:18:
32:73:87:2c:84:b0:f2:0c:c5:3b:c7:b9:ba:74:bf:07:c0:3f:
1d:9a:0d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/IzGH4tU3kKhUp3hLu31OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWQwYzA5MDFjNjllNWM1ZDhmNTFhNjc1ZDA1NTk4MmY5
MWQyYTcwHhcNMjYwNjEzMDQwMDE1WhcNMjYwNjE0MDQwMDE1WjAzMTEwLwYDVQQD
EyhmMTY0NjkxZjkwYzFjOGIwMjU3ZWZmOWE4ZDRkZDgwOGI3YTdkMDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bG//1+it3VEAT4idrfasWOuvf7y
dVXuxC94+UmJKiSSVDV9Om9UmPfOe9iqH/dAzFy6R9Rww6bvVawkemfanldcK832
vswjz5qQWOrFgnj+AifvxXv+JSVGFkZyEfIrQoHQwoPAc6pZky0sIIwYBFNlxKyH
fOfWF5Nbcv1umoympNx0+9yvMUfG/XhrSMJ1+W7lrhKRW83lPaiPE6r0xYuPLM5V
JBLRgLJ+rvMP8f3X/7aRK5Afcr5SLRjXiMdtymjZU3vijnDjaAuz2qUpf3H4JjLI
v0vC8FK2rMTIrIHMA3x/lYyCAYCrH4OBk6Wx8BXXkjx+cEUPR+tqOGUnkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFkaR+QwciwJX7/mo1N2Ai3p9BmMB8GA1UdIwQY
MBaAFIjtDAkBxp5cXY9RpnXQVZgvkdKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMt
OWQ5ODhhNjAwNzU3LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMtOWQ5ODhhNjAwNzU3
LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4RkatYf
RvHCH41x+wdo0Kl4QK/x9whKHOelFs97IwPgCQBw5jU9S1/ZugI056VbijtjXSsB
32k17eEHcc/7RAMPYrj5lQwNv4D6kdUmrFNrUiQq6Y5QZUaFKoRNLlQesw64y2+k
+ookh4lOeM25gIcpBBjXuOszlyW3svVAPZhp5zibKj9GzZvKl8FykTkAjgleO/8M
hWMFCDU2oBirxo9ySyS/ZaJEpnXrIwckrzC/dzowo9QvM18LwAeAlL1Ay5LcxKai
jGWwzFGMUa22xU4we1LNVajaj1c0gSnkjsR04x9kJcj+SOkYMnOHLISw8gzFO8e5
unS/B8A/HZoNIw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:14 2026 by rpki-client