Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.mft
File: moDsOJXDspmkXSaYzTqnyfESGtw.mft (raw, json)
Hash identifier: YRr38wqVHRP9nTNVtkVtsMuRJR3FhfytpOMoPjmNsK4=
Subject key identifier: CE:8B:A8:E3:C5:5A:58:74:3A:A3:04:65:E5:40:05:8D:20:13:5D:2B
Authority key identifier: 9A:80:EC:38:95:C3:B2:99:A4:5D:26:98:CD:3A:A7:C9:F1:12:1A:DC
Certificate issuer: /CN=9a80ec3895c3b299a45d2698cd3aa7c9f1121adc
Certificate serial: 01A1592FF61FE3A1489901D350359EE597E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moDsOJXDspmkXSaYzTqnyfESGtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:17 +0000
Manifest this update: Tue 20 Oct 2026 12:01:17 +0000
Manifest next update: Wed 21 Oct 2026 12:01:17 +0000
Files and hashes: 1: keEHUJ43Y9IN2xDD5mG2qVm1goM.roa (hash: hG1ssbYdtn0NJi+ksNOCJNHwyFqRe5pVzdnEry6sJ7Q=)
2: moDsOJXDspmkXSaYzTqnyfESGtw.crl (hash: aXAQlvkLwZj/znRHhEQ6o7Dp81/R71+/LmK8MzgGiEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/moDsOJXDspmkXSaYzTqnyfESGtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:2f:f6:1f:e3:a1:48:99:01:d3:50:35:9e:e5:97:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a80ec3895c3b299a45d2698cd3aa7c9f1121adc
Validity
Not Before: Oct 20 12:01:17 2026 GMT
Not After : Oct 21 12:01:17 2026 GMT
Subject: CN=ce8ba8e3c55a58743aa30465e540058d20135d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:69:06:25:14:a0:60:b0:60:06:3f:8a:6b:
f7:d1:bb:e2:fa:f3:cf:a4:e8:50:c5:41:1e:89:03:
83:ed:c0:5b:bb:0d:15:85:59:c4:e9:44:55:53:c2:
5d:f3:a6:ee:ef:e3:10:52:4a:89:7e:17:90:2e:28:
04:ae:16:2d:8f:97:2b:51:d5:a0:c0:bb:f9:71:d7:
fa:b4:a5:5e:1a:30:ff:48:48:ba:b9:c9:f2:18:b6:
fc:9e:aa:fc:f6:6e:11:cf:2f:1d:bc:06:ce:b3:43:
ef:ed:38:77:f8:76:78:ce:c3:48:27:2a:43:cd:41:
91:b9:88:5f:9f:e6:35:70:f9:74:d2:d1:d8:a5:be:
db:6b:c9:4e:63:17:e7:e2:f5:8f:71:c8:d6:77:98:
62:db:41:35:76:c3:99:d9:62:d4:cb:55:23:0b:38:
a6:36:22:d5:3c:32:1c:d6:82:c6:d2:50:26:11:f1:
9c:7c:49:1a:75:0a:56:9d:93:d0:d1:ef:e8:80:b1:
8d:8e:36:ac:49:5c:82:7e:30:c7:f0:99:38:73:52:
71:e5:44:aa:88:8e:48:96:5b:25:8c:9e:9f:df:c5:
62:ed:f7:99:d1:48:d9:1e:9a:85:72:1e:ee:23:83:
3e:00:7e:fe:0a:af:4e:b5:ca:73:b3:a4:76:31:3b:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:A8:E3:C5:5A:58:74:3A:A3:04:65:E5:40:05:8D:20:13:5D:2B
X509v3 Authority Key Identifier:
keyid:9A:80:EC:38:95:C3:B2:99:A4:5D:26:98:CD:3A:A7:C9:F1:12:1A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moDsOJXDspmkXSaYzTqnyfESGtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1a:f8:47:15:53:4f:f0:96:bb:cc:6c:ab:b0:00:f6:85:15:
ce:cb:01:42:39:21:3e:35:63:12:be:3d:d8:ec:ac:78:bf:1e:
f5:8c:4c:ae:67:e6:9f:e6:ed:ec:13:32:a9:d2:9c:ab:ab:ee:
f0:44:10:e4:b6:a3:2c:e8:d1:14:5c:cc:29:95:19:84:0d:a3:
79:36:be:91:f2:0f:cd:a0:fe:3f:ae:49:0b:6f:9f:d1:e2:54:
28:22:4f:f9:51:31:7e:46:9b:e1:9e:2f:15:21:06:c0:fb:3f:
00:ce:e3:80:a1:59:cd:b3:6d:48:8a:d7:57:0b:43:cb:69:e1:
4f:d8:9f:d4:41:31:b7:55:04:cb:6a:4c:b8:af:fa:30:62:29:
ca:f7:e2:d1:3a:d5:3d:a4:6e:40:d7:4f:01:fb:32:92:2c:0b:
0b:5b:06:d6:48:07:62:f4:e2:58:8d:d1:b7:8c:d5:ad:4f:31:
1b:60:65:25:6b:99:b6:db:b8:75:ca:3a:2e:c3:b4:d1:bb:39:
70:d6:d4:4a:64:56:65:45:28:76:a4:42:43:0d:e9:9a:66:5d:
b7:37:ab:7b:2b:a0:a6:6e:79:40:8b:8d:32:a2:2c:09:47:a3:
35:88:d6:8e:fe:64:9f:5c:64:3a:2b:1f:d3:81:15:1b:64:ef:
9e:17:cc:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFZL/Yf46FImQHTUDWe5ZfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhODBlYzM4OTVjM2IyOTlhNDVkMjY5OGNkM2FhN2M5ZjEx
MjFhZGMwHhcNMjYxMDIwMTIwMTE3WhcNMjYxMDIxMTIwMTE3WjAzMTEwLwYDVQQD
EyhjZThiYThlM2M1NWE1ODc0M2FhMzA0NjVlNTQwMDU4ZDIwMTM1ZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgBpBiUUoGCwYAY/imv30bvi+vPP
pOhQxUEeiQOD7cBbuw0VhVnE6URVU8Jd86bu7+MQUkqJfheQLigErhYtj5crUdWg
wLv5cdf6tKVeGjD/SEi6ucnyGLb8nqr89m4Rzy8dvAbOs0Pv7Th3+HZ4zsNIJypD
zUGRuYhfn+Y1cPl00tHYpb7ba8lOYxfn4vWPccjWd5hi20E1dsOZ2WLUy1UjCzim
NiLVPDIc1oLG0lAmEfGcfEkadQpWnZPQ0e/ogLGNjjasSVyCfjDH8Jk4c1Jx5USq
iI5IllsljJ6f38Vi7feZ0UjZHpqFch7uI4M+AH7+Cq9Otcpzs6R2MTtgLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6LqOPFWlh0OqMEZeVABY0gE10rMB8GA1UdIwQY
MBaAFJqA7DiVw7KZpF0mmM06p8nxEhrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9Ec09KWERzcG1rWFNhWXpUcW55ZkVTR3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEt
MmNkMDliNTc3MDY2LzEvbW9Ec09KWERzcG1rWFNhWXpUcW55ZkVTR3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEtMmNkMDliNTc3MDY2
LzEvbW9Ec09KWERzcG1rWFNhWXpUcW55ZkVTR3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhr4RxVT
T/CWu8xsq7AA9oUVzssBQjkhPjVjEr492OyseL8e9YxMrmfmn+bt7BMyqdKcq6vu
8EQQ5LajLOjRFFzMKZUZhA2jeTa+kfIPzaD+P65JC2+f0eJUKCJP+VExfkab4Z4v
FSEGwPs/AM7jgKFZzbNtSIrXVwtDy2nhT9if1EExt1UEy2pMuK/6MGIpyvfi0TrV
PaRuQNdPAfsykiwLC1sG1kgHYvTiWI3Rt4zVrU8xG2BlJWuZttu4dco6LsO00bs5
cNbUSmRWZUUodqRCQw3pmmZdtzereyugpm55QIuNMqIsCUejNYjWjv5kn1xkOisf
04EVG2TvnhfMeQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:46:35 2026 by rpki-client