Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: nq2olADCiL2Mrj1CMNMywtuz9oef2ChmsuKD5Mza4OQ=
Subject key identifier: A5:10:18:28:AB:A1:58:66:A2:63:F2:3E:5B:3F:9C:2C:89:0E:8C:27
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019D992B6B0B4995E830AC889635E1E6D440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0CBA
Signing time: Fri 17 Apr 2026 02:00:52 +0000
Manifest this update: Fri 17 Apr 2026 02:00:52 +0000
Manifest next update: Sat 18 Apr 2026 02:00:52 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: HT8xykhHGSi6+L3cmBZhuIjhOUqbGrz6VBe2yi76pgs=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6b:0b:49:95:e8:30:ac:88:96:35:e1:e6:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Apr 17 02:00:52 2026 GMT
Not After : Apr 18 02:00:52 2026 GMT
Subject: CN=a5101828aba15866a263f23e5b3f9c2c890e8c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:88:55:d7:29:01:88:6b:0d:27:b4:18:99:
27:21:5d:e9:ca:b7:1a:4a:ef:5d:25:c2:7e:0f:a8:
a1:02:24:4e:70:3f:71:ef:b5:07:fe:90:d8:bf:ee:
f3:e6:6e:34:1c:ee:f7:03:42:a8:10:d1:e2:61:6f:
a8:c4:b9:bf:df:e9:25:63:f2:d5:03:58:d1:71:49:
ed:d8:6f:c5:cf:ec:48:d2:bb:a6:0c:7b:79:47:fe:
44:76:a7:20:87:d4:2c:7d:c6:b3:08:20:da:e8:d1:
bc:22:dd:a8:2c:75:0b:fa:f0:50:10:fc:d3:41:a1:
2b:b6:8d:48:76:39:e0:ca:15:9a:58:4d:41:64:83:
39:cd:2c:98:4e:4a:93:b8:2e:18:87:81:97:00:68:
56:0d:3c:3e:26:47:dd:3c:aa:18:f7:6e:c8:52:2a:
e0:b8:69:8a:a4:60:11:83:f2:5f:32:ad:33:02:2f:
f9:a4:12:35:73:ad:5f:08:40:13:a2:4e:18:c9:9f:
17:ee:b3:be:a5:b9:aa:25:7b:5f:1d:fb:03:16:58:
4a:e6:f3:8a:42:d1:0a:92:dc:d5:b8:b1:cc:68:3c:
b4:31:92:a7:1d:0f:31:05:42:fd:ae:d1:6d:ed:20:
4e:4c:86:77:08:a1:59:15:59:c0:ee:5a:f2:4e:fb:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:18:28:AB:A1:58:66:A2:63:F2:3E:5B:3F:9C:2C:89:0E:8C:27
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:b1:87:a5:8c:e3:7d:c8:64:72:ba:3b:3e:f2:71:5f:d5:
5d:4c:dd:95:cc:ad:8c:5a:88:1f:c6:79:00:42:f9:de:f7:01:
48:a4:eb:44:fb:be:4c:1d:e8:af:3e:c7:e6:94:92:56:89:e2:
0b:b3:b7:16:39:d4:49:e8:46:70:8d:32:58:60:09:85:4e:82:
48:1e:37:fd:83:18:ed:5a:49:e0:9a:5e:a7:67:de:6f:0b:9b:
b7:1d:6b:f2:ad:91:f1:8d:e8:0b:97:4c:97:4d:dc:50:b2:c4:
75:1f:ed:27:00:35:ec:78:36:f3:6f:ab:af:b8:64:2e:2b:01:
95:c3:2e:2a:71:ea:64:77:9d:4d:a5:15:37:98:f6:8a:7e:51:
42:e9:01:87:31:20:d5:aa:6f:b1:c1:dc:6b:3c:26:6a:d3:c6:
c3:a6:47:99:5b:32:6a:f1:23:b5:e6:bd:3a:5a:91:52:09:33:
27:a8:b8:5d:ff:93:74:21:b6:ad:98:fc:e3:6a:fc:b5:48:e7:
82:d5:4c:5c:e3:8a:09:68:42:8f:42:4c:59:a3:e2:1f:11:aa:
a2:6f:df:20:b5:bc:8c:8b:e2:76:74:e3:e6:2c:0c:9b:01:07:
ec:82:7d:76:ec:30:df:bc:e2:59:9c:d3:11:f3:50:8d:ab:09:
b6:bd:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:56 2026 by rpki-client