Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
File: 0oFXratWiKzjVi4u_eWb61rhCKs.mft (raw, json)
Hash identifier: nsRJqygvrbRIOTfQTS3d17cm3/T+e1To7i6+L1ylE7o=
Subject key identifier: 6C:07:6E:30:80:90:39:8F:A2:90:C8:9B:D3:38:6D:D2:42:74:54:97
Authority key identifier: D2:81:57:AD:AB:56:88:AC:E3:56:2E:2E:FD:E5:9B:EB:5A:E1:08:AB
Certificate issuer: /CN=d28157adab5688ace3562e2efde59beb5ae108ab
Certificate serial: 01A0412973D73F620FD79EE8A789F5C6B486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:00:30 +0000
Manifest this update: Thu 27 Aug 2026 03:00:30 +0000
Manifest next update: Fri 28 Aug 2026 03:00:30 +0000
Files and hashes: 1: 0oFXratWiKzjVi4u_eWb61rhCKs.crl (hash: rCACmHMUT9qeoIKpBiolfq7C4TA+tdpp1sVc7xU+ypE=)
2: Nt0mcB8A0d__UowWBxdSbWsaTd4.roa (hash: QVTiG0+ASuYbCz7n6L1CCp82a69UF3h6/hvCYlBXr9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:73:d7:3f:62:0f:d7:9e:e8:a7:89:f5:c6:b4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28157adab5688ace3562e2efde59beb5ae108ab
Validity
Not Before: Aug 27 03:00:30 2026 GMT
Not After : Aug 28 03:00:30 2026 GMT
Subject: CN=6c076e308090398fa290c89bd3386dd242745497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:25:fa:fb:fe:73:04:ad:cd:0c:3a:2c:1b:
f4:24:c3:2f:30:a3:19:dd:f4:02:dc:30:c6:a8:17:
91:1a:c8:5b:88:a2:68:47:9f:6b:29:dc:f3:6a:b2:
d8:7b:a4:8e:6e:5a:9e:89:a1:cb:2d:95:fc:6e:07:
05:b1:99:b8:8c:98:ab:e7:cc:31:97:9d:74:a7:6f:
54:93:9b:5a:18:9c:0c:da:c9:6b:9a:f7:20:a8:1c:
2e:88:97:5d:08:a1:c9:e4:ca:d9:14:b3:e1:a5:d2:
d9:11:e8:46:bf:8b:1b:03:1b:90:85:08:ba:5b:c2:
60:ce:6f:f5:a4:af:ce:df:c5:cb:dc:6c:5f:dc:33:
0c:f4:ba:da:1c:f4:de:9f:65:18:30:5c:41:9c:6b:
5d:ac:d5:2b:27:fc:5a:be:7d:ff:40:b9:34:45:b4:
05:0e:d1:95:5f:c0:09:a4:04:bf:b7:c8:be:a4:9d:
a5:23:66:1a:03:a5:e7:55:db:a2:88:8f:af:de:ab:
64:92:b5:43:b1:8a:3b:34:b0:bb:24:fd:37:17:53:
df:7a:4f:86:94:05:50:b3:a2:93:8d:95:74:96:07:
0d:78:d3:f6:c4:fc:7e:00:a0:7e:9d:5d:15:a7:a6:
a8:f7:ac:b8:6d:6f:81:7e:1f:dc:4e:40:5c:7f:4a:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:6E:30:80:90:39:8F:A2:90:C8:9B:D3:38:6D:D2:42:74:54:97
X509v3 Authority Key Identifier:
keyid:D2:81:57:AD:AB:56:88:AC:E3:56:2E:2E:FD:E5:9B:EB:5A:E1:08:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:af:51:23:20:e5:c6:af:5a:80:50:66:60:50:c4:f9:6c:66:
81:90:4d:cf:38:92:09:08:a8:54:00:11:bd:7e:62:a3:ba:02:
66:77:57:b3:b6:cb:24:76:7b:71:e6:8c:49:db:d7:ba:12:02:
55:74:e1:e1:e7:53:1b:c8:18:f6:17:0b:4e:f1:41:64:b2:a8:
ce:68:cf:8c:7a:06:3e:4e:4d:49:71:94:41:17:ba:1f:ff:9d:
ae:04:32:14:ce:4b:c1:ff:0b:d5:6a:03:84:c2:be:d9:5d:19:
a4:dd:9f:33:a7:7b:8c:7d:6c:64:e0:4e:48:8c:41:7f:04:32:
32:95:34:e5:92:77:50:0f:dc:d8:32:59:18:05:99:85:2c:0c:
a8:fa:51:2e:fd:ba:d9:e3:ef:c0:7a:4e:85:8b:c6:79:b5:20:
03:db:0f:1f:fc:ae:01:7d:f0:b5:f2:f4:b2:c6:9e:a3:e4:9c:
28:e5:bd:89:fd:45:14:68:d7:24:54:eb:f5:97:fa:a4:00:fe:
84:f8:72:77:97:58:24:80:2e:d3:46:de:1e:95:b7:79:cd:6e:
fe:bd:ba:c3:a3:18:36:df:54:53:a4:64:4a:f0:a7:d8:78:88:
c1:f6:4d:e9:fd:cb:e3:7e:40:de:b6:6e:34:66:04:86:2b:08:
95:25:fc:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKXPXP2IP157op4n1xrSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODE1N2FkYWI1Njg4YWNlMzU2MmUyZWZkZTU5YmViNWFl
MTA4YWIwHhcNMjYwODI3MDMwMDMwWhcNMjYwODI4MDMwMDMwWjAzMTEwLwYDVQQD
Eyg2YzA3NmUzMDgwOTAzOThmYTI5MGM4OWJkMzM4NmRkMjQyNzQ1NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64Il+vv+cwStzQw6LBv0JMMvMKMZ
3fQC3DDGqBeRGshbiKJoR59rKdzzarLYe6SOblqeiaHLLZX8bgcFsZm4jJir58wx
l510p29Uk5taGJwM2slrmvcgqBwuiJddCKHJ5MrZFLPhpdLZEehGv4sbAxuQhQi6
W8Jgzm/1pK/O38XL3Gxf3DMM9LraHPTen2UYMFxBnGtdrNUrJ/xavn3/QLk0RbQF
DtGVX8AJpAS/t8i+pJ2lI2YaA6XnVduiiI+v3qtkkrVDsYo7NLC7JP03F1Pfek+G
lAVQs6KTjZV0lgcNeNP2xPx+AKB+nV0Vp6ao96y4bW+Bfh/cTkBcf0pyrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwHbjCAkDmPopDIm9M4bdJCdFSXMB8GA1UdIwQY
MBaAFNKBV62rVois41YuLv3lm+ta4QirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9GWHJhdFdpS3pqVmk0dV9lV2I2MXJoQ0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zOTViZTktZDUyNS00ZTY1LWEwMTgt
ZTAyZjIyZWI0OGYyLzEvMG9GWHJhdFdpS3pqVmk0dV9lV2I2MXJoQ0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zOTViZTktZDUyNS00ZTY1LWEwMTgtZTAyZjIyZWI0OGYy
LzEvMG9GWHJhdFdpS3pqVmk0dV9lV2I2MXJoQ0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA769RIyDl
xq9agFBmYFDE+WxmgZBNzziSCQioVAARvX5io7oCZndXs7bLJHZ7ceaMSdvXuhIC
VXTh4edTG8gY9hcLTvFBZLKozmjPjHoGPk5NSXGUQRe6H/+drgQyFM5Lwf8L1WoD
hMK+2V0ZpN2fM6d7jH1sZOBOSIxBfwQyMpU05ZJ3UA/c2DJZGAWZhSwMqPpRLv26
2ePvwHpOhYvGebUgA9sPH/yuAX3wtfL0ssaeo+ScKOW9if1FFGjXJFTr9Zf6pAD+
hPhyd5dYJIAu00beHpW3ec1u/r26w6MYNt9UU6RkSvCn2HiIwfZN6f3L435A3rZu
NGYEhisIlSX8QA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:02:20 2026 by rpki-client