Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: ob299nb6zoye/X47FFVBRbRXjHIJYETcYyoKsdsijI0=
Subject key identifier: E9:F3:45:B7:D0:ED:79:00:BB:F9:1E:D2:F5:9E:18:EF:1C:35:09:2F
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019EC29215CE616A5C2444F4FFCFBDD2CCEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0D54
Signing time: Sat 13 Jun 2026 20:00:14 +0000
Manifest this update: Sat 13 Jun 2026 20:00:14 +0000
Manifest next update: Sun 14 Jun 2026 20:00:14 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: sWAXe8w0RwlxE5FvQxjuEyb/Hwypug3wdI3NBeO1GPU=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:15:ce:61:6a:5c:24:44:f4:ff:cf:bd:d2:cc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Jun 13 20:00:14 2026 GMT
Not After : Jun 14 20:00:14 2026 GMT
Subject: CN=e9f345b7d0ed7900bbf91ed2f59e18ef1c35092f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:f7:0f:9d:02:57:71:81:41:ca:0a:be:ca:
9f:d5:81:8f:cf:3d:83:0c:09:f6:6c:cb:ab:c9:a5:
35:4e:70:15:99:fa:80:5a:bf:95:f2:68:80:5f:7a:
3d:21:72:08:d5:8b:cc:33:19:b5:d8:bc:3f:dd:b2:
e9:7a:76:7e:9a:eb:20:0c:d5:7d:3e:2a:a8:76:96:
77:b3:63:6f:6d:00:d3:ae:c6:64:b9:c8:b5:30:85:
49:2d:c0:2f:94:6d:78:03:dd:d5:e6:22:d7:68:16:
b4:07:ca:3c:4d:df:c5:ad:e9:ba:48:1e:74:63:f6:
e7:f1:8b:c6:42:3c:f8:ec:50:7a:9f:d5:6c:11:74:
71:93:16:d4:db:ba:f6:1a:a8:06:59:f0:d3:72:4e:
3c:c8:bb:65:97:3e:5a:d0:ed:ae:fa:ef:c7:8e:81:
e7:e5:de:aa:af:48:41:ec:35:20:eb:ee:58:ad:b7:
06:9c:41:2b:dc:9f:aa:f2:ba:58:5d:44:39:91:03:
ee:a8:ba:dc:cc:3d:10:9f:50:ed:57:bc:9e:bd:c4:
dc:e3:f4:25:0c:51:24:76:49:d2:ed:a2:fb:14:d4:
9f:68:60:e0:d9:4f:aa:44:6a:95:8b:43:26:83:f9:
ba:9a:6a:a7:65:df:8d:4f:24:f9:91:a8:3b:71:ca:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:45:B7:D0:ED:79:00:BB:F9:1E:D2:F5:9E:18:EF:1C:35:09:2F
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:19:b0:30:60:5e:be:55:70:a1:5a:b4:4b:db:07:6c:bf:f0:
23:17:67:2a:d3:d4:53:c2:7d:99:cd:6b:f4:42:32:a3:34:21:
95:a1:b9:63:ed:0c:78:2d:14:24:9c:42:dd:13:36:3d:03:52:
7d:4c:86:2f:ad:86:93:a8:38:5c:f6:47:4b:8e:80:7b:ef:32:
f5:3c:ee:53:f8:c3:44:09:75:11:9a:f8:30:1d:35:7e:96:cd:
4d:27:e5:e1:e2:0a:4b:03:e6:a0:4e:8e:c1:1c:d8:fb:8c:42:
f5:80:bb:8a:7c:dc:59:9e:e3:32:fe:bc:9a:d3:17:9c:27:16:
56:0b:e6:64:d5:6c:c2:ce:6c:c0:19:c2:ee:5b:36:b6:28:4a:
dc:46:37:02:a9:2f:06:85:ca:e7:b5:ef:fc:0c:6d:39:ea:9c:
18:3d:72:99:be:c3:61:a6:1a:66:5f:06:37:e4:2d:7f:88:bd:
44:cb:a4:5c:e5:31:36:fd:d9:26:bd:6f:c0:81:d2:e6:01:7e:
7a:47:d0:92:9e:88:da:80:98:28:89:0b:17:e7:45:8e:9c:03:
f1:db:ff:1f:a3:f6:9e:c6:52:6d:80:02:07:c7:d8:28:11:a8:
8a:fc:11:e9:74:6d:76:ad:e1:df:3a:e2:47:45:e7:28:23:72:
1b:fe:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:04:57 2026 by rpki-client