Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: F9h43QWXRACI1DblV6enjSusibgnFa09+e7DGVXO2dg=
Subject key identifier: 18:A0:67:BB:48:04:3A:7E:04:9A:15:14:41:6A:5D:3C:01:02:CB:21
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019FAC3ECAD77A6F0FDB98CF33A6B78D6A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0DCD
Signing time: Wed 29 Jul 2026 05:00:24 +0000
Manifest this update: Wed 29 Jul 2026 05:00:24 +0000
Manifest next update: Thu 30 Jul 2026 05:00:24 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: S87moY3lq14sTqJBr50iAhVpeRrm9WW44kDYcQx2hKw=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:ca:d7:7a:6f:0f:db:98:cf:33:a6:b7:8d:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Jul 29 05:00:24 2026 GMT
Not After : Jul 30 05:00:24 2026 GMT
Subject: CN=18a067bb48043a7e049a1514416a5d3c0102cb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:d2:59:48:65:8c:3d:d1:68:4a:81:69:07:
ea:38:5d:31:c6:5b:a2:c9:46:72:66:dd:77:1a:a4:
2c:d3:46:22:c3:fb:71:9a:37:72:02:ad:fc:03:94:
c6:53:5e:e7:49:b3:28:e4:0c:79:9f:d8:ce:c1:f8:
b1:4d:37:53:30:77:35:82:9c:40:ad:4d:29:a7:14:
5c:eb:54:82:01:2f:3a:86:d7:e8:07:08:87:4a:02:
c3:2e:38:62:91:ff:80:4d:92:02:27:cc:e0:44:84:
98:1e:3a:7f:11:d3:93:bb:77:b7:e5:f1:26:3d:b2:
91:e3:48:00:02:2b:43:27:4f:e8:bf:e1:80:f3:1f:
91:21:58:e2:8f:14:c2:bb:03:4c:81:6b:a3:c1:12:
3f:4e:bc:c5:f7:6b:e8:86:f1:a4:d2:3d:93:f7:0f:
2e:fd:54:4d:e6:a6:08:82:bf:47:7c:57:53:60:81:
1b:f4:31:a1:97:7b:4b:a3:61:03:28:e2:e1:c0:cb:
a9:ae:28:5c:5f:3e:08:d6:bc:43:e1:69:aa:fa:61:
81:84:54:73:85:fb:6c:ff:e7:76:7b:db:4e:ac:79:
2b:99:41:c9:95:db:77:2e:20:71:78:e9:47:b1:e8:
ac:d3:32:9b:7e:de:3a:c1:1b:d4:a5:2a:fa:39:62:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A0:67:BB:48:04:3A:7E:04:9A:15:14:41:6A:5D:3C:01:02:CB:21
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:2e:6d:72:b7:0c:93:76:f1:ef:a6:a5:bc:82:02:24:c4:
87:b7:94:21:29:e4:7f:ba:7b:01:0b:c2:10:67:14:bd:1e:e2:
ad:3a:da:a6:b5:af:4f:20:ef:3f:d6:34:df:63:35:11:80:42:
8d:11:bb:b5:1c:45:dd:aa:86:f8:9a:02:89:9a:0a:26:50:86:
17:9f:ad:ee:2d:dd:5f:32:d3:f1:00:0d:ca:fa:52:c2:f6:99:
2b:5f:c1:7e:83:81:a7:80:46:35:0c:58:2a:a2:a5:a6:2f:ab:
95:d6:ba:ee:d7:bb:d2:46:7e:c5:e5:55:9f:6d:bf:c9:27:a2:
80:24:d4:5e:6d:a4:2c:fa:54:af:02:f7:b0:28:45:3c:cd:24:
cd:72:1c:a0:9b:c4:86:35:7f:f3:8a:9d:a7:db:c3:0e:79:7f:
8c:84:1c:eb:96:dd:30:3e:f3:fd:98:94:27:9d:e4:a0:79:84:
aa:35:ea:65:3d:18:ae:84:30:08:4d:a5:7a:51:c7:ca:f8:d2:
1d:c8:3f:d3:ce:30:8c:b5:96:1c:b5:61:cf:9f:75:90:79:68:
1f:68:df:f3:e0:fc:fd:db:7a:ff:47:d3:11:c8:01:5e:d0:d5:
f1:ff:ca:35:e1:a7:02:34:67:7f:57:bb:5a:94:be:d9:ec:ad:
63:a1:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:09 2026 by rpki-client