Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: UwvY9763h6AiLdNX/7Qcf6VeNybFvNFhbVTmN5Oe/10=
Subject key identifier: 31:2B:E9:CD:F2:20:8B:60:50:FB:B6:44:49:44:75:63:19:73:AC:58
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 019CAD903483C545A533A7D221D7511C5AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 0247
Signing time: Mon 02 Mar 2026 08:00:34 +0000
Manifest this update: Mon 02 Mar 2026 08:00:34 +0000
Manifest next update: Tue 03 Mar 2026 08:00:34 +0000
Files and hashes: 1: G06i-715DWwzIGeO7ozFvpuVglo.roa (hash: NAlau0Ue6s6TBIRjFefwCaMBe6vvRr2rxlG4HQ5m2NM=)
2: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: K5n30AsHuV+74opy2WLVvzgXT1CNO8rWY07Jze8EfWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:34:83:c5:45:a5:33:a7:d2:21:d7:51:1c:5a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Mar 2 08:00:34 2026 GMT
Not After : Mar 3 08:00:34 2026 GMT
Subject: CN=312be9cdf2208b6050fbb644494475631973ac58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:0d:db:85:52:82:23:0f:f1:d5:08:95:65:
36:88:5f:84:bd:3e:d6:d6:39:52:f5:81:5e:58:4f:
55:51:a7:66:9a:c5:f2:4a:99:4e:bf:94:be:70:38:
70:f3:28:f4:ed:49:39:52:b8:54:24:ab:21:fb:a4:
65:b5:ce:6a:b1:db:11:c3:2a:a4:e4:9f:ca:f8:1e:
6b:e1:a9:e9:8e:b2:f2:f7:79:ac:b2:39:d7:4d:f7:
10:ce:53:37:2d:d5:10:88:b7:e6:86:50:00:10:01:
8e:d5:a7:65:76:f6:48:3f:e8:30:80:57:32:02:d7:
08:42:14:51:89:fd:13:0b:8f:12:32:d8:d1:a5:a7:
4e:e5:d2:d0:78:a9:27:cb:5a:a1:15:0c:19:33:f6:
64:f0:0d:54:87:44:2c:e3:19:a5:f4:55:c0:1e:61:
04:26:a9:c3:ee:00:cd:94:9b:6d:71:74:13:20:c9:
f6:63:b0:50:d2:a2:f5:0d:b3:29:0e:80:92:9f:cc:
9e:73:4e:13:97:52:73:69:83:93:87:d0:29:94:40:
e4:75:f0:f8:2e:99:02:8b:69:a9:d1:c3:79:bf:9a:
6c:ce:a5:97:bd:e7:d9:c8:25:42:05:16:65:b9:26:
c6:56:4e:f5:4a:ae:2d:58:04:f6:6a:44:d6:a7:c9:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2B:E9:CD:F2:20:8B:60:50:FB:B6:44:49:44:75:63:19:73:AC:58
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8d:b2:b8:eb:2a:e0:74:2b:5c:6b:7a:05:ce:77:70:a5:29:
df:35:70:dc:dc:5c:f3:32:92:8b:41:75:37:f8:5f:d9:88:9c:
1a:b3:87:68:9e:65:a0:48:ca:af:71:db:97:a2:e5:56:66:35:
86:d4:88:e2:75:9f:b0:d1:a2:d2:82:91:e5:c8:d1:8c:af:70:
18:6a:74:3c:a7:f0:41:f4:ec:eb:5a:d2:75:b8:50:e6:02:c5:
9e:1e:3d:c7:06:93:23:40:c5:67:07:5c:8a:f2:0a:29:05:3e:
2c:45:f2:ee:38:7a:67:52:8f:0f:21:35:6a:cf:6b:ef:03:a8:
42:a5:20:d3:ef:1b:7a:9f:8f:6a:a3:e3:59:91:d1:0c:46:57:
5e:03:2c:09:08:06:18:14:80:1c:04:87:a7:37:0f:0c:52:75:
c8:b2:3a:28:fa:b3:9d:38:95:21:0f:4c:a4:ee:98:88:e0:58:
4d:f6:4e:bd:8e:12:e0:e1:b5:04:0d:ff:5d:94:d8:40:04:4e:
05:0b:84:14:3e:a4:8a:8e:45:f9:33:ab:22:8a:76:85:7f:c3:
a5:6e:53:bd:a1:52:3c:f9:8a:74:71:26:37:da:38:2e:5f:a6:
d0:d0:0e:fa:8f:a3:f5:ff:a7:83:7d:0b:8e:9a:b4:19:17:73:
c7:f0:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:45 2026 by rpki-client