Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json)
Hash identifier: sHUM/SOZXTqdeMwmAe80XBog/BTE/497ZWgcT9TSXW0=
Subject key identifier: 98:F5:9B:06:F0:61:EC:BA:96:10:0F:A0:2C:D2:FA:1F:72:DF:63:A8
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial: 019CACEB5843B5670F85B57B269769C66850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
Manifest number: 10B5
Signing time: Mon 02 Mar 2026 05:00:30 +0000
Manifest this update: Mon 02 Mar 2026 05:00:30 +0000
Manifest next update: Tue 03 Mar 2026 05:00:30 +0000
Files and hashes: 1: bzcWIOR530kfZXQw__qDEK1p8UI.roa (hash: t4Fa41wgJdlSaS1EXeWWpyDSCXN0855ilnaAwd5UGbU=)
2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: IV1R24d6yn9bFqhZR6pHf+KSUsVXhZM7HyyhF5OEfmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:58:43:b5:67:0f:85:b5:7b:26:97:69:c6:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Validity
Not Before: Mar 2 05:00:30 2026 GMT
Not After : Mar 3 05:00:30 2026 GMT
Subject: CN=98f59b06f061ecba96100fa02cd2fa1f72df63a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:a6:52:c8:44:97:1c:b8:1f:0b:57:2a:1f:
5d:81:59:00:0d:9d:dc:15:64:04:8e:2f:b5:a8:a9:
1f:96:63:3c:fa:4e:92:25:67:5f:d8:2c:ad:3e:07:
39:56:7d:ab:fc:52:3b:59:52:86:60:ea:e3:24:a8:
ac:c8:68:9b:16:36:e5:4a:a1:1b:94:0b:f4:22:71:
5c:8d:9c:ec:7f:30:7f:0e:69:f8:aa:31:35:e5:1b:
c3:39:2a:54:a0:bd:36:2d:f2:d9:87:91:62:b9:d1:
23:c1:0e:c5:a7:71:ee:64:48:f0:8d:e8:f3:00:6c:
c6:94:69:45:6a:f4:1b:ee:fa:b2:2a:f9:02:22:ed:
13:d8:d8:32:8a:b6:5e:5e:f1:92:cd:35:3e:cb:69:
8b:a5:b8:42:45:43:9c:78:09:8a:c1:17:8b:57:19:
1e:c2:c1:37:ce:f4:ea:f0:fd:6f:29:78:60:f0:ed:
4c:c8:e0:39:0a:c8:c1:db:6e:43:93:5f:52:a0:99:
17:32:fe:be:ae:e6:7b:37:a1:30:17:7b:ec:5d:ce:
b3:8c:49:c3:6a:d0:04:a2:00:5a:83:67:5c:2b:06:
ee:e9:fd:5e:f7:71:a0:9e:14:09:11:fc:14:9c:2f:
6f:15:35:9d:c4:19:f8:44:b3:d0:7a:7d:3c:13:95:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F5:9B:06:F0:61:EC:BA:96:10:0F:A0:2C:D2:FA:1F:72:DF:63:A8
X509v3 Authority Key Identifier:
keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:37:3e:f8:cd:35:b4:36:aa:b7:76:30:1a:0d:ef:11:ee:08:
1e:f4:ba:4a:17:25:b5:00:d2:70:84:42:51:b3:f0:25:71:eb:
c5:a3:3a:c9:0e:65:e0:1d:66:79:f8:83:de:00:b4:73:60:a4:
63:be:35:98:26:82:d7:7e:2f:ac:1b:f6:82:30:f6:0e:ba:fa:
f5:70:52:0a:11:e6:90:a3:cb:24:9e:f4:3d:6b:7a:b9:ff:37:
06:c9:25:9c:06:a3:0a:79:c7:60:74:6f:fe:8a:ea:46:0c:63:
b3:8f:d0:e3:bc:1c:43:cf:7f:82:75:19:08:56:23:f5:a6:45:
60:2f:b3:8f:06:21:96:2d:af:d4:75:4c:13:41:39:e9:e6:78:
f3:22:89:61:8b:c1:90:c9:09:4c:a0:64:a2:a0:5f:3d:e3:71:
03:7a:40:3f:14:72:c4:1f:47:bb:7e:12:0f:7d:4d:b0:8b:27:
d6:08:5e:86:7b:a9:1f:e3:f1:6c:07:76:3b:ca:b7:68:a8:7c:
af:4d:0c:01:ef:e9:ed:f2:59:43:bf:cf:d8:00:c0:7a:2b:eb:
9d:e8:43:7d:c0:87:c5:48:69:6b:40:a9:5c:32:bf:4d:e0:53:
f6:20:fd:03:43:c9:1f:e3:02:b2:53:23:47:cf:84:b2:6d:4c:
a5:8e:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:14 2026 by rpki-client