Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: ybsJzNa/wEuE8bHPiwYEkwdhs0z12o4GmsPFXFO1CH0=
Subject key identifier: EB:AB:FA:1F:A0:B1:45:4E:43:24:8F:9B:68:D0:DF:05:D3:78:5D:62
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 01A0BE796DDFD1EF5344842DC0E504D32F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 0A3D
Signing time: Sun 20 Sep 2026 11:00:24 +0000
Manifest this update: Sun 20 Sep 2026 11:00:24 +0000
Manifest next update: Mon 21 Sep 2026 11:00:24 +0000
Files and hashes: 1: IwgOR8SpECdLjDFzz0M9A3eTqHc.roa (hash: bqzQ3UtBaN9yvyQu2pNXKzVdfCP2Omy5M2vD+gjTY/A=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: b3OlCHPzGSim8MXBXv5lAjJ/Lyb6E+UZ8hljnBl8eCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:6d:df:d1:ef:53:44:84:2d:c0:e5:04:d3:2f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Sep 20 11:00:24 2026 GMT
Not After : Sep 21 11:00:24 2026 GMT
Subject: CN=ebabfa1fa0b1454e43248f9b68d0df05d3785d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:3f:b3:6c:87:b7:52:a0:5d:c7:7a:19:10:
cc:d2:a7:2a:d1:7a:92:8c:27:69:20:ca:32:34:ee:
07:22:67:77:22:3d:c5:aa:6d:c6:71:d7:50:3c:17:
cf:37:53:3b:cf:41:55:3a:0c:ed:16:58:36:7d:98:
ae:52:f3:1d:42:3d:32:09:61:28:9a:fa:ae:0c:e4:
42:02:89:10:dc:75:ab:0d:0d:97:d0:36:b8:2f:17:
e8:47:e5:3b:bc:f2:8f:ed:7b:90:74:03:91:73:a2:
89:74:d3:b2:8e:96:e4:3b:72:a0:ca:e5:d8:e9:4a:
49:78:4d:78:2f:2e:d4:b0:a3:70:9a:e1:7d:8f:b4:
81:70:5b:74:f5:1a:ef:cf:9b:35:58:b5:4f:66:09:
f1:f6:89:4b:e2:5b:79:b8:d4:66:fc:49:cb:10:d3:
e1:78:aa:ab:e4:92:be:c8:d6:a0:c3:f1:65:e1:5c:
15:d8:2c:f1:bf:72:43:5c:fb:4d:6a:6b:c8:8f:e0:
1f:8b:87:c7:49:2a:9b:c8:c6:82:8e:7c:d2:05:a5:
29:bc:71:e1:6d:28:15:97:47:ef:eb:fd:e0:07:8f:
08:4f:80:b0:0e:71:f6:12:23:13:85:5a:b0:68:40:
90:e0:02:d2:29:c0:fc:aa:33:af:32:fe:42:6b:3d:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AB:FA:1F:A0:B1:45:4E:43:24:8F:9B:68:D0:DF:05:D3:78:5D:62
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c1:49:b9:63:f4:43:19:c2:1a:b9:eb:a7:99:e6:fc:3b:95:
75:7a:5b:a6:e0:94:8b:f2:18:17:df:e7:d6:ba:89:b1:ba:7b:
d4:54:4b:d4:4c:ce:fc:57:3c:95:cb:af:f4:ef:bc:99:90:2d:
da:cd:5c:9b:f7:4f:93:34:82:6b:7c:be:f1:54:0f:67:30:f5:
4e:5e:df:a8:71:6f:af:39:52:41:91:d6:e5:6b:7b:bc:da:00:
49:82:fa:a1:f6:3e:94:dd:66:8b:12:7d:7e:4b:c6:22:c9:ca:
3f:50:94:5d:77:63:40:7d:88:cd:3b:d8:77:8a:e3:3f:f2:01:
bd:e2:81:d0:bd:50:e6:11:b0:87:90:a5:fd:94:ba:f0:af:39:
5f:34:70:f8:51:7f:e7:df:39:a9:2e:31:76:f2:32:4c:ce:9e:
39:9d:b6:fb:e6:af:71:00:a4:ac:d4:96:18:67:25:2a:32:1d:
28:2a:6a:4a:8c:09:6f:15:ac:d6:89:e3:5e:bf:82:6f:6a:97:
7a:f5:15:4b:ed:3a:b1:37:d4:2c:8c:28:16:bd:97:1c:b7:ac:
78:04:34:55:ef:05:63:3d:97:67:79:31:75:2d:fe:8f:8a:99:
0f:a0:21:2d:12:a2:c1:0e:a6:46:e5:53:44:92:d2:31:9b:8d:
16:0c:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:53:15 2026 by rpki-client