Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: Mmr+1R2EYzkzogMX+12TEG6r5pN5sWWO5a1Uu62O2TY=
Subject key identifier: 87:D1:C9:43:EF:78:73:D4:68:9F:64:02:8E:08:86:E7:93:00:22:20
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 01A1148650BF1B6D6A12FD1928BC42AFB641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 17B5
Signing time: Wed 07 Oct 2026 04:01:48 +0000
Manifest this update: Wed 07 Oct 2026 04:01:48 +0000
Manifest next update: Thu 08 Oct 2026 04:01:48 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: /kueQGiK9mZgGYvTjF29cMB1ZNbB177DpMHCOKII93U=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:86:50:bf:1b:6d:6a:12:fd:19:28:bc:42:af:b6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Oct 7 04:01:48 2026 GMT
Not After : Oct 8 04:01:48 2026 GMT
Subject: CN=87d1c943ef7873d4689f64028e0886e793002220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:0e:e9:81:ad:de:d0:32:b2:87:84:c1:2b:
f7:ec:1d:56:09:ed:e3:df:cc:18:c7:14:ca:91:a6:
a4:60:38:0a:d2:b6:1d:c4:50:44:96:e5:9f:27:25:
72:d4:b5:17:14:fb:dc:76:00:8c:a3:ae:fa:cc:2c:
bf:b4:d7:d9:32:95:84:28:b1:48:35:24:da:68:84:
63:61:60:b4:63:e7:01:5f:7d:76:1a:21:1b:94:4c:
ee:70:0c:58:ca:69:a8:5e:0d:97:82:42:e0:a9:ab:
94:c0:77:89:44:92:fc:05:b2:60:4e:e5:ee:c7:86:
a2:06:7e:e7:8a:a7:10:85:df:11:73:7f:6a:fc:6e:
60:1c:b3:ad:9d:d0:f8:4e:5a:7d:c4:68:13:77:46:
26:29:12:92:37:e7:97:53:51:f4:37:0e:30:4d:df:
81:dd:30:29:43:6d:6a:34:85:3c:81:e9:c4:e7:0a:
b7:e1:d9:55:ea:2a:fd:b9:20:62:cd:3e:55:f4:16:
a3:4c:0a:11:c7:0e:5f:01:fb:84:e4:63:85:cb:17:
c3:be:74:d2:b2:4c:b0:b3:ec:43:53:13:fb:04:8c:
b7:7a:1c:5c:c1:bd:c1:e6:b8:9f:d2:3f:67:dd:b9:
f5:d7:87:d1:54:e2:ec:2f:0e:a4:1c:13:3e:11:58:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:C9:43:EF:78:73:D4:68:9F:64:02:8E:08:86:E7:93:00:22:20
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:69:8f:d1:1e:93:d8:dd:c2:e7:45:f6:2a:39:52:ac:ee:54:
f0:ec:70:e2:bc:ce:82:39:71:da:e8:cd:c1:a2:d1:c0:e9:51:
d5:e4:95:aa:20:23:b2:cf:ca:4b:bd:9f:b0:ac:9e:9d:6a:02:
4e:3d:45:73:39:90:fb:94:37:0b:d0:77:3b:53:51:0f:07:27:
f9:c2:f4:d9:a7:52:71:8f:1e:28:23:62:98:57:b5:bd:19:bd:
4d:4b:02:30:c5:fd:44:f8:c3:f4:5d:d6:b0:eb:a6:8b:e3:61:
f6:72:13:d7:c1:11:4f:34:d9:f8:ec:e2:ce:8e:85:cf:77:95:
32:da:5d:58:15:14:ca:15:b5:f2:a7:88:c4:fd:44:f1:f3:f2:
52:5a:b8:62:10:d7:44:66:41:03:fb:c0:73:7e:04:68:9b:dd:
02:20:13:e3:2a:ff:b3:5c:6d:77:fb:5a:cc:19:04:3b:8d:e9:
c1:d1:35:f3:69:a3:a5:15:bb:d2:b8:66:67:ef:fa:4e:01:0b:
73:93:8f:7a:99:e3:d4:71:38:48:66:2d:46:72:e2:b1:10:f8:
57:6c:07:fc:fd:4c:f4:a3:16:6c:93:6a:a3:d9:59:dd:a2:fa:
42:e5:ef:35:37:c0:0d:ab:26:e3:bf:a3:ae:03:ca:23:98:c0:
ef:6d:7b:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEUhlC/G21qEv0ZKLxCr7ZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw
YTlhNGMwHhcNMjYxMDA3MDQwMTQ4WhcNMjYxMDA4MDQwMTQ4WjAzMTEwLwYDVQQD
Eyg4N2QxYzk0M2VmNzg3M2Q0Njg5ZjY0MDI4ZTA4ODZlNzkzMDAyMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3IO6YGt3tAysoeEwSv37B1WCe3j
38wYxxTKkaakYDgK0rYdxFBEluWfJyVy1LUXFPvcdgCMo676zCy/tNfZMpWEKLFI
NSTaaIRjYWC0Y+cBX312GiEblEzucAxYymmoXg2XgkLgqauUwHeJRJL8BbJgTuXu
x4aiBn7niqcQhd8Rc39q/G5gHLOtndD4Tlp9xGgTd0YmKRKSN+eXU1H0Nw4wTd+B
3TApQ21qNIU8genE5wq34dlV6ir9uSBizT5V9BajTAoRxw5fAfuE5GOFyxfDvnTS
skyws+xDUxP7BIy3ehxcwb3B5rif0j9n3bn114fRVOLsLw6kHBM+EViwVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfRyUPveHPUaJ9kAo4IhueTACIgMB8GA1UdIwQY
MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt
MWVlY2Q1ODVkYjhjLzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj
LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWmP0R6T
2N3C50X2KjlSrO5U8Oxw4rzOgjlx2ujNwaLRwOlR1eSVqiAjss/KS72fsKyenWoC
Tj1FczmQ+5Q3C9B3O1NRDwcn+cL02adScY8eKCNimFe1vRm9TUsCMMX9RPjD9F3W
sOumi+Nh9nIT18ERTzTZ+Ozizo6Fz3eVMtpdWBUUyhW18qeIxP1E8fPyUlq4YhDX
RGZBA/vAc34EaJvdAiAT4yr/s1xtd/tazBkEO43pwdE182mjpRW70rhmZ+/6TgEL
c5OPepnj1HE4SGYtRnLisRD4V2wH/P1M9KMWbJNqo9lZ3aL6QuXvNTfADasm47+j
rgPKI5jA7217OQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 13:10:00 2026 by rpki-client