Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: CBdqMiOwJxCvho9RnP9Z8LdEZ7xZ+AEN+RHXEwj7VM0=
Subject key identifier: 9A:98:56:27:0C:DC:70:71:F3:3B:A0:60:D0:DF:E6:83:F1:E1:88:5B
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 01A090589E3E6BAE5D3D42D12E4EA810DB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 1A54
Signing time: Fri 11 Sep 2026 12:02:01 +0000
Manifest this update: Fri 11 Sep 2026 12:02:01 +0000
Manifest next update: Sat 12 Sep 2026 12:02:01 +0000
Files and hashes: 1: YEoEVaZZgvqaYQs0c-KsGpSetUI.roa (hash: skVAsfQ5Llg9Q4qr15jtmY0awC3+4GF+G11QXTFhMHI=)
2: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: 2Z/AZLYf0NiCNyH05DTa8bfvbmgwjhALw5tdDTdO7nc=)
3: q0hXo__MCYbBoR7iChz8rniPI6M.roa (hash: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 12:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:58:9e:3e:6b:ae:5d:3d:42:d1:2e:4e:a8:10:db:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Sep 11 12:02:01 2026 GMT
Not After : Sep 12 12:02:01 2026 GMT
Subject: CN=9a9856270cdc7071f33ba060d0dfe683f1e1885b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:bd:64:8b:5e:e8:63:53:cc:22:0b:b4:70:
17:b7:c3:19:cf:3d:7f:e0:31:bd:e4:6d:ad:5f:43:
70:88:3b:54:44:72:4e:6d:3d:e6:d4:e9:44:3d:c0:
b5:ff:69:ad:a3:48:15:ac:b4:19:4c:01:3a:8a:65:
da:14:41:f3:7c:63:78:e0:ea:46:4b:11:b6:2b:82:
75:bf:4f:e9:9f:87:d8:00:09:67:e7:b5:d3:a4:0e:
0e:f2:14:99:6c:39:b2:64:e4:b8:2e:67:53:62:62:
42:2e:9b:0a:99:79:82:36:7d:dc:e9:d9:2a:cd:e1:
1e:a9:27:01:b5:ef:6a:b7:5f:47:7c:ae:e2:45:bc:
97:e4:48:50:4e:20:90:0d:a2:8c:4b:cb:34:f2:15:
7d:57:5c:3b:e2:ac:c1:33:7b:83:cf:49:7b:2e:f9:
ce:c0:c6:1b:99:1b:80:df:25:48:97:a4:10:fa:5c:
5a:b9:c2:88:39:19:d8:6f:c1:87:b3:b0:90:53:45:
6d:13:84:cb:33:80:7b:cf:1c:4e:cf:e8:1b:a2:b9:
10:a9:fd:b8:c8:08:5a:bc:20:de:b1:62:fe:fb:66:
ca:9f:60:60:23:59:76:6d:62:55:7a:7a:c8:77:c4:
62:3d:dd:7b:ef:75:52:70:47:84:bc:9e:38:ab:7b:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:98:56:27:0C:DC:70:71:F3:3B:A0:60:D0:DF:E6:83:F1:E1:88:5B
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:09:18:31:29:84:8b:b5:40:ab:ca:28:fd:74:e0:c1:f7:51:
75:d8:b4:c5:4c:40:d3:f7:4d:00:ab:b7:82:ce:01:c6:b4:94:
23:d2:fc:00:72:2b:55:1d:e9:03:0b:70:cf:bc:72:6a:c4:5a:
b5:e7:56:fa:20:c2:1f:90:ff:df:d3:47:c9:e2:ce:30:87:f2:
78:e1:e7:ed:4d:3a:52:32:13:e6:ff:24:0a:31:a2:e1:cf:77:
11:95:04:b5:c8:d7:c4:2d:4f:98:6a:f4:e2:af:e3:6e:26:98:
a3:29:0f:c3:38:96:43:41:a5:44:d1:c2:54:5e:83:3e:54:93:
76:17:cf:4f:0b:55:2c:0b:6c:d9:d8:d4:65:52:31:c3:1f:ab:
e2:42:b9:66:62:b4:b5:2a:23:47:9a:f2:7b:f0:9e:09:a1:e0:
9d:90:ec:e0:1c:fc:32:58:94:5e:98:0b:14:d6:f8:9c:eb:d9:
9f:54:90:e9:81:f8:ec:a2:a4:20:7a:c0:f3:ae:5b:ba:40:fd:
bc:d4:8b:08:4f:fd:82:9b:98:9b:4b:a8:a2:6c:0e:12:6b:0e:
f0:3f:9a:4f:47:a5:3f:39:84:c6:b6:e3:3c:62:87:81:4b:f7:
52:be:9f:94:a9:6b:40:a4:26:e5:9a:3d:73:c1:30:bc:6f:86:
d0:5e:12:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCQWJ4+a65dPULRLk6oENsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMjAwZDBlN2FkM2NlZjcyMjM4YjUxNjRjNGIyY2RkZTIz
YTZhMWUwHhcNMjYwOTExMTIwMjAxWhcNMjYwOTEyMTIwMjAxWjAzMTEwLwYDVQQD
Eyg5YTk4NTYyNzBjZGM3MDcxZjMzYmEwNjBkMGRmZTY4M2YxZTE4ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb69ZIte6GNTzCILtHAXt8MZzz1/
4DG95G2tX0NwiDtURHJObT3m1OlEPcC1/2mto0gVrLQZTAE6imXaFEHzfGN44OpG
SxG2K4J1v0/pn4fYAAln57XTpA4O8hSZbDmyZOS4LmdTYmJCLpsKmXmCNn3c6dkq
zeEeqScBte9qt19HfK7iRbyX5EhQTiCQDaKMS8s08hV9V1w74qzBM3uDz0l7LvnO
wMYbmRuA3yVIl6QQ+lxaucKIORnYb8GHs7CQU0VtE4TLM4B7zxxOz+gborkQqf24
yAhavCDesWL++2bKn2BgI1l2bWJVenrId8RiPd1773VScEeEvJ44q3sZvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqYVicM3HBx8zugYNDf5oPx4YhbMB8GA1UdIwQY
MBaAFJsgDQ560873Iji1FkxLLN3iOmoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2Mt
YTRmMDhkYmI4NWE1LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2MtYTRmMDhkYmI4NWE1
LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgkYMSmE
i7VAq8oo/XTgwfdRddi0xUxA0/dNAKu3gs4BxrSUI9L8AHIrVR3pAwtwz7xyasRa
tedW+iDCH5D/39NHyeLOMIfyeOHn7U06UjIT5v8kCjGi4c93EZUEtcjXxC1PmGr0
4q/jbiaYoykPwziWQ0GlRNHCVF6DPlSTdhfPTwtVLAts2djUZVIxwx+r4kK5ZmK0
tSojR5rye/CeCaHgnZDs4Bz8MliUXpgLFNb4nOvZn1SQ6YH47KKkIHrA865bukD9
vNSLCE/9gpuYm0uoomwOEmsO8D+aT0elPzmExrbjPGKHgUv3Ur6flKlrQKQm5Zo9
c8EwvG+G0F4S4A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 21:53:57 2026 by rpki-client