Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: Rdv2KVov+zauYdST3cYonB1PMec53U8lTNfWZgsmBOo=
Subject key identifier: 56:2C:75:89:77:AC:A4:A4:A8:10:0A:1E:58:E5:DF:94:3C:AC:73:64
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019CABA2573714011D036C4A02B83AE67E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0C3F
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: uUX9m6vhEBhvpPQ/oZ61thFNTWk/2uAtcE/pb6duKFc=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:57:37:14:01:1d:03:6c:4a:02:b8:3a:e6:7e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=562c758977aca4a4a8100a1e58e5df943cac7364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:c3:a5:b5:83:4f:a9:0b:6a:80:31:5c:39:
8a:e9:e2:f1:01:b0:04:31:a7:81:11:f6:c6:dd:dd:
d1:37:f2:7b:5c:61:11:7a:45:36:5c:9d:12:ce:6a:
67:c6:28:d1:8b:b4:e4:60:e3:49:3f:1a:88:f0:cc:
7c:89:e6:23:5a:99:04:a3:e6:a7:d9:05:53:a9:c6:
ee:fb:3f:72:8b:51:46:b9:93:84:95:58:c7:a3:b5:
c7:56:c9:ac:00:2f:65:a7:72:eb:28:35:be:56:44:
21:77:36:d8:b3:30:57:cd:b9:d3:9a:1a:6f:db:2c:
da:43:01:2b:d7:70:e0:5f:25:ab:20:21:29:d5:79:
b5:9f:77:8b:db:3e:ae:3d:75:7b:cc:f7:a9:38:86:
61:6d:f7:ab:0e:5a:a2:b0:25:bd:05:92:3d:4a:45:
11:71:52:63:69:a9:ab:b9:b8:c6:aa:a3:89:68:16:
cc:cc:3e:e3:ce:46:f4:5b:a0:27:fa:2a:2b:4e:ec:
eb:f2:97:7c:17:8f:86:b1:eb:70:c7:7e:ed:a3:83:
60:ad:9b:59:1c:ae:a9:a9:44:66:32:96:f0:66:c8:
95:4e:fe:36:25:b1:50:a4:e9:aa:ae:8e:43:65:d2:
b5:69:e4:6c:f2:70:35:82:0a:60:f2:83:8b:f1:51:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:75:89:77:AC:A4:A4:A8:10:0A:1E:58:E5:DF:94:3C:AC:73:64
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f5:4e:62:4e:e6:96:81:23:0d:11:9a:2e:0b:f0:43:a0:08:
4c:1e:14:7a:99:09:e5:ae:3b:5b:28:53:ac:1b:c2:69:50:77:
fb:c9:85:17:5a:ee:d1:af:13:1f:3c:b8:ca:c9:51:b7:a5:6e:
55:ac:f0:d0:7d:62:6a:9a:42:73:ac:66:ea:81:2f:32:6a:e1:
d7:a7:17:75:62:22:9c:2d:da:b6:80:3c:47:a0:4e:f2:32:86:
a0:90:ca:78:a8:67:0d:56:8d:79:0d:3e:5d:14:43:19:4d:b1:
15:0b:12:28:a6:56:43:d3:c5:88:65:ad:a9:53:36:ab:6f:62:
7d:3e:53:c4:9b:9c:6d:8d:61:42:16:2c:44:2f:50:06:08:7c:
94:4e:57:8b:0d:36:b8:78:bd:ff:0c:05:75:6b:93:f2:8a:c5:
fa:e3:94:89:51:ce:d6:83:62:0c:0a:8d:5a:f1:eb:17:ef:b0:
ac:d5:9e:69:bc:b5:70:3e:b1:52:0e:c9:a2:91:1a:dc:fe:f5:
73:e0:04:2e:3a:48:39:7b:57:e7:9d:63:d0:56:c8:8c:e8:e4:
b7:51:a7:f5:1a:76:7a:d5:43:08:96:76:af:00:d8:11:a1:77:
55:cc:f5:1b:c2:65:85:1d:02:e7:35:36:fd:38:d8:d1:5b:8e:
f1:29:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:45 2026 by rpki-client