Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: FNuzlwUQa7xp69cqga+VS2+L/WU7SVjF+QNjkrQZFas=
Subject key identifier: C3:32:AA:6C:96:96:22:EA:FE:ED:B6:D4:E4:58:63:94:C1:73:E9:F4
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 019D992B2FC45A47FB41DC50C4AC310A4821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 089C
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: IwgOR8SpECdLjDFzz0M9A3eTqHc.roa (hash: bqzQ3UtBaN9yvyQu2pNXKzVdfCP2Omy5M2vD+gjTY/A=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: LGoX5KBM3NgvkIEH6CDZy9jnj3Phh/8q81IHySG32E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2f:c4:5a:47:fb:41:dc:50:c4:ac:31:0a:48:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=c332aa6c969622eafeedb6d4e4586394c173e9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:e1:ac:45:85:a2:40:6a:4b:d6:6d:e2:12:
19:97:d2:b6:3b:8a:8e:97:b2:94:ac:fd:40:36:60:
b3:7a:89:38:cb:74:c4:bf:21:56:2e:ce:fa:14:f2:
4d:ce:7f:73:99:8c:88:30:2e:77:0a:3c:e9:c7:00:
74:f3:10:4a:96:c2:f7:f5:f7:55:f9:3f:1a:c5:04:
6b:1d:21:86:e1:10:c5:82:4c:15:b4:1a:d9:e8:77:
8e:49:f3:84:b7:3d:47:51:c2:a4:aa:51:5a:36:c3:
69:e0:2c:cc:82:44:71:3a:d4:35:5c:29:62:85:76:
b5:03:75:23:3e:e8:cd:f7:60:1f:0e:3f:39:70:d0:
ec:77:c7:ab:68:e0:31:1f:e5:43:52:7e:a1:d2:bf:
9c:b4:5f:be:20:6d:ac:f4:06:35:a2:58:a4:7b:3e:
c5:e2:a0:41:61:65:2e:f9:87:71:79:5f:65:83:c6:
c0:b2:2f:fd:53:f9:7a:93:ea:0d:3e:d4:7c:28:58:
bf:48:3e:0a:a0:eb:47:4c:37:0d:92:3a:e1:be:f2:
d8:de:2e:2a:61:ba:b0:27:35:39:ab:5f:6e:bf:83:
9d:44:4e:ae:b7:b1:55:15:8e:03:0b:68:1a:2f:85:
ea:db:bc:ab:c5:b7:c5:6b:b8:44:96:34:bd:89:a3:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:32:AA:6C:96:96:22:EA:FE:ED:B6:D4:E4:58:63:94:C1:73:E9:F4
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:39:38:55:c3:0d:af:02:21:a6:ca:b9:53:18:66:14:2a:c2:
dc:cc:9b:d4:c4:08:4e:0c:25:d3:01:26:17:35:ab:7b:32:23:
2e:1d:f3:48:96:53:83:c6:a2:6e:73:35:d1:4c:9b:04:a8:7a:
fd:ee:01:2c:92:c3:43:f4:f4:dd:6a:88:18:41:14:d1:02:f9:
c0:54:d0:d0:ae:89:ed:6e:0d:db:ab:4e:5d:7a:56:c7:cc:5d:
cb:a8:7a:b4:51:f3:aa:52:a1:a0:5a:3d:6c:df:69:00:35:8e:
13:00:7b:bd:a7:b2:cc:d5:8c:03:bd:cd:37:db:99:7b:8a:2e:
41:f0:05:50:b7:05:27:4e:fa:73:c6:30:27:5e:6c:e4:26:a9:
2c:4a:d6:7e:03:9c:e6:f8:ed:af:10:1e:9d:f0:6d:0b:70:59:
45:59:a3:dd:f7:29:25:39:a0:70:7f:a7:9f:db:ab:02:62:94:
d6:76:ec:b6:75:ca:34:45:5f:b5:ec:88:63:65:1d:52:9f:95:
4b:bf:9b:35:a1:f7:85:f2:16:e9:13:ec:35:bc:df:45:84:b1:
d3:b0:09:a5:4c:18:73:98:d4:c0:25:58:4e:a9:d2:e2:90:f1:
5a:fa:d8:84:e7:5f:2f:d1:84:4c:21:b7:c5:e3:b9:b8:84:39:
e8:d4:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:16 2026 by rpki-client