Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: a4AT1jPoekx+m1u3MT1a0z8SiTPEhZcM6AsUFqb4VME=
Subject key identifier: 21:C1:DE:C4:B6:04:DF:39:7E:61:C2:AB:F8:8A:2E:19:31:6E:D8:88
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 01A0F6B2B4079A5C880D7A0B1EDA6EC1E3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 195A
Signing time: Thu 01 Oct 2026 09:01:41 +0000
Manifest this update: Thu 01 Oct 2026 09:01:41 +0000
Manifest next update: Fri 02 Oct 2026 09:01:41 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: ai/j2uCDSEM0t/+yosZqCJRgI9vp5KAb9BR5//uA7qs=)
2: E5AdQLULTFPqJUlYObxVI6_1WfA.roa (hash: mxZ1AnAnqb7JN49e/B8I8tpnf+4p9JvJ06z2WEs5jMA=)
3: I1JpGCaCnd74s6YyFhtsQo4ffys.asa (hash: 8s5VDkoq2eGGIU5mP2xC+brcRoLXH1bqb0SZr2FGNMI=)
4: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
5: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b2:b4:07:9a:5c:88:0d:7a:0b:1e:da:6e:c1:e3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Oct 1 09:01:41 2026 GMT
Not After : Oct 2 09:01:41 2026 GMT
Subject: CN=21c1dec4b604df397e61c2abf88a2e19316ed888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:f2:31:72:a3:81:b2:6f:e9:6b:bd:6b:be:
15:cf:e2:b3:41:aa:db:10:41:2f:a3:6e:4e:ac:78:
a1:b6:9b:35:81:8a:03:89:ec:c1:b3:a9:03:23:8b:
2f:9a:79:4e:90:9e:d0:9c:68:a4:8e:78:7a:70:88:
a4:ac:ee:69:b9:f0:b1:3f:3a:b0:87:e4:0f:77:7a:
4c:d1:ee:9e:5e:ae:f0:e5:31:2e:7e:36:44:04:09:
60:e4:05:ab:81:bd:72:ea:0d:18:c7:a2:b9:b3:a0:
7e:29:6d:ca:96:95:53:b0:16:ba:42:81:f6:3c:1c:
d8:df:61:35:bc:57:3e:65:fd:a7:9d:99:a6:fb:81:
6e:a5:c1:c8:81:7a:b4:a9:45:3e:7f:51:a7:52:a7:
73:3e:53:21:5f:9c:d0:1b:9d:0a:e4:4a:ed:55:28:
e8:92:b1:90:91:a1:41:f4:c2:fd:12:ca:a5:95:40:
a5:3f:c1:4b:fb:9d:31:ec:5d:57:4c:ce:66:c9:8e:
f3:ae:95:e5:95:40:44:9e:0b:8f:74:f0:2c:ab:57:
91:65:10:87:2e:4d:a6:8a:f4:55:c0:57:4f:24:7b:
28:14:a0:16:4a:05:7b:ac:71:a5:16:2c:5c:f8:1f:
cd:b2:05:31:44:7b:18:ab:85:58:20:79:9f:ea:52:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C1:DE:C4:B6:04:DF:39:7E:61:C2:AB:F8:8A:2E:19:31:6E:D8:88
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a5:5b:1d:ed:fe:67:71:0d:bc:24:bf:3a:3e:f0:29:c6:ce:
27:70:a1:46:f7:a4:50:19:74:ef:12:c0:c4:11:e7:e4:06:91:
90:1d:98:60:44:0d:e6:12:49:7c:f5:8a:72:55:0d:4d:78:46:
5c:27:08:b4:7e:ef:a3:9d:81:21:8c:d3:fe:2f:63:81:7f:34:
67:41:4e:d4:4d:74:4f:84:c7:db:53:d8:e1:e6:7b:8b:6f:79:
82:30:5a:fe:21:3b:9e:1f:fd:f1:ef:a5:ec:c1:a3:38:66:30:
24:0a:f8:8e:ea:14:a4:b5:1b:fd:b0:59:06:8c:17:8b:2c:eb:
7d:85:19:7f:75:a0:5b:e4:62:b2:31:fe:0c:fe:22:ef:98:92:
c0:e2:8e:6f:02:57:9a:8f:51:46:a3:dc:9b:9c:33:63:e9:91:
4a:dd:17:b4:4c:dd:12:e7:b6:8e:51:bc:ad:35:50:3a:bf:6c:
7a:72:83:30:14:77:44:d0:65:3e:bd:31:ae:1e:b4:f0:57:da:
8c:c6:b9:47:1d:6f:32:f7:a1:b3:1e:57:ba:02:d6:a7:3f:50:
22:76:b6:75:51:52:da:34:98:2f:cf:1c:04:db:31:3f:31:db:
d3:18:58:9e:03:0b:df:a5:aa:e2:f9:01:3b:32:46:a9:15:2b:
e8:d5:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:16:45 2026 by rpki-client