Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
File: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft (raw, json)
Hash identifier: SD7JOvX+Ep6Jrff+7pqMQJtqlCD6rg14glghyEeAI4k=
Subject key identifier: 81:19:A2:A9:06:9B:08:B2:1C:E6:ED:3A:B4:F5:D5:CC:FE:A8:20:D6
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 01A12DD74F7E8F98F79CD66A9CEAF193016E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
Manifest number: 070E
Signing time: Mon 12 Oct 2026 02:00:47 +0000
Manifest this update: Mon 12 Oct 2026 02:00:47 +0000
Manifest next update: Tue 13 Oct 2026 02:00:47 +0000
Files and hashes: 1: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl (hash: gbc3Z3fwBLxZjNE/jQ3yEP5alRknkBMZxMeLgT7YaZc=)
2: 30rxoEVpWSXkeYOFsrzuW4wuGPQ.roa (hash: oZbCMBZPUvgToSoCiHyNVoP2atS7g7LnbwIeau6Z9sU=)
3: Xudz0hLe8s3SLmiPVONXMND3hRM.roa (hash: oORSmt43XgnSynXZgH2ISuQJ8Cm/DBrmnJwy75rrXHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:4f:7e:8f:98:f7:9c:d6:6a:9c:ea:f1:93:01:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Oct 12 02:00:47 2026 GMT
Not After : Oct 13 02:00:47 2026 GMT
Subject: CN=8119a2a9069b08b21ce6ed3ab4f5d5ccfea820d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:63:61:e0:7b:08:bb:aa:78:1b:9c:85:8b:
12:2d:f9:e0:a9:53:0b:9b:b6:78:09:27:2b:3c:f2:
e0:b2:ec:e8:7f:83:3b:e7:cc:7b:42:ea:1f:a4:e7:
be:b8:d3:a1:52:10:e4:01:d9:12:a5:e8:81:26:6b:
3b:b0:95:e3:df:4a:1c:3d:fb:5b:08:fa:9f:a0:25:
ab:3c:cd:a0:24:5b:d7:39:07:56:61:19:4b:35:f0:
3a:a1:21:ca:e9:a2:ca:20:ea:f9:0e:14:42:21:09:
8b:c5:b2:59:d1:4a:27:48:df:28:10:39:78:97:e8:
d9:69:89:8d:8e:42:39:6e:6d:45:79:8e:a4:34:3d:
65:75:56:0f:7c:c9:4d:ca:3a:f5:0e:ae:98:89:dd:
1a:76:13:60:b7:10:2d:eb:98:db:e0:a2:5a:f2:e7:
28:e6:70:f5:7a:9e:8f:8e:98:f0:29:ba:f2:7f:a0:
b8:94:db:a5:fd:77:c9:29:8d:02:0d:0b:36:fe:73:
c5:09:26:9b:e1:34:db:98:11:f8:b7:f0:62:14:2d:
64:aa:49:ef:9f:94:50:f6:85:4a:f8:d8:b4:c5:24:
6f:2d:5a:4d:0c:d2:51:4e:e6:17:ce:e0:61:71:4c:
bb:6d:08:c0:f2:fe:fc:ac:c6:c3:85:bb:08:72:b9:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:19:A2:A9:06:9B:08:B2:1C:E6:ED:3A:B4:F5:D5:CC:FE:A8:20:D6
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5d:6f:d5:33:0d:f8:a2:20:5b:4c:c1:a2:38:2a:c9:eb:af:
44:0c:21:3c:3b:72:8a:f7:6b:19:6b:4e:17:16:09:cd:24:a3:
07:42:7b:43:4a:12:11:4f:80:09:e9:21:22:7a:1b:bd:60:1b:
34:e6:68:f8:6f:4b:68:08:66:dd:73:af:6a:0f:08:16:51:40:
6c:ff:54:2c:a8:ab:e4:05:3f:f1:66:27:ba:c5:44:67:55:de:
0b:cf:47:20:be:15:b2:3b:02:5a:b3:cd:c5:1b:a7:cb:18:7c:
38:1b:66:76:b3:d7:ac:a6:8c:3d:ec:16:df:e0:85:52:a7:90:
21:13:29:00:de:c0:3b:bb:6f:8d:a2:92:20:05:f3:0f:f0:b8:
39:57:be:27:86:84:ea:08:5c:c8:a5:72:ba:45:a6:28:a5:78:
16:76:f0:f2:36:d9:50:c5:c8:04:b2:ba:f9:0c:25:aa:47:4e:
98:cd:0c:57:f8:da:85:01:7a:47:53:54:cf:b7:99:e2:39:f5:
67:9f:6f:a5:4d:fb:0f:52:dd:16:a6:b4:06:31:51:fa:61:2a:
71:8c:13:41:7a:11:b1:f5:0f:dd:93:df:0b:46:e0:d6:72:78:
87:2b:f7:58:e5:2e:60:fd:76:75:8b:10:59:dd:87:67:ee:5b:
bb:46:8e:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEt109+j5j3nNZqnOrxkwFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDgxODU5NTZlNDQzYjU1YjA2MjIwMGY5NjQ1MzdiYzEw
YmMxMzAwHhcNMjYxMDEyMDIwMDQ3WhcNMjYxMDEzMDIwMDQ3WjAzMTEwLwYDVQQD
Eyg4MTE5YTJhOTA2OWIwOGIyMWNlNmVkM2FiNGY1ZDVjY2ZlYTgyMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmNjYeB7CLuqeBuchYsSLfngqVML
m7Z4CScrPPLgsuzof4M758x7QuofpOe+uNOhUhDkAdkSpeiBJms7sJXj30ocPftb
CPqfoCWrPM2gJFvXOQdWYRlLNfA6oSHK6aLKIOr5DhRCIQmLxbJZ0UonSN8oEDl4
l+jZaYmNjkI5bm1FeY6kND1ldVYPfMlNyjr1Dq6Yid0adhNgtxAt65jb4KJa8uco
5nD1ep6PjpjwKbryf6C4lNul/XfJKY0CDQs2/nPFCSab4TTbmBH4t/BiFC1kqknv
n5RQ9oVK+Ni0xSRvLVpNDNJRTuYXzuBhcUy7bQjA8v78rMbDhbsIcrlozQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEZoqkGmwiyHObtOrT11cz+qCDWMB8GA1UdIwQY
MBaAFNJIGFlW5EO1WwYiAPlkU3vBC8EwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtnWVdWYmtRN1ZiQmlJQS1XUlRlOEVMd1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZTg3NWEtMDU3Ni00YTE1LWJlMjMt
YWVhMDU0Y2Y0M2JiLzEvMGtnWVdWYmtRN1ZiQmlJQS1XUlRlOEVMd1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZTg3NWEtMDU3Ni00YTE1LWJlMjMtYWVhMDU0Y2Y0M2Ji
LzEvMGtnWVdWYmtRN1ZiQmlJQS1XUlRlOEVMd1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbF1v1TMN
+KIgW0zBojgqyeuvRAwhPDtyivdrGWtOFxYJzSSjB0J7Q0oSEU+ACekhInobvWAb
NOZo+G9LaAhm3XOvag8IFlFAbP9ULKir5AU/8WYnusVEZ1XeC89HIL4VsjsCWrPN
xRunyxh8OBtmdrPXrKaMPewW3+CFUqeQIRMpAN7AO7tvjaKSIAXzD/C4OVe+J4aE
6ghcyKVyukWmKKV4Fnbw8jbZUMXIBLK6+QwlqkdOmM0MV/jahQF6R1NUz7eZ4jn1
Z59vpU37D1LdFqa0BjFR+mEqcYwTQXoRsfUP3ZPfC0bg1nJ4hyv3WOUuYP12dYsQ
Wd2HZ+5bu0aOKg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 07:10:29 2026 by rpki-client