Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: kJjqy8O6vK6H4YTAVq80/9VWEcqQtgzyp0hEKL/WdjM=
Subject key identifier: 12:98:AA:31:B0:AC:60:B4:AB:45:44:C3:6F:A7:68:27:B2:20:C3:7E
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 01A13DB8D36954DE850C01D3314CDFB69C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0FC7
Signing time: Thu 15 Oct 2026 04:01:25 +0000
Manifest this update: Thu 15 Oct 2026 04:01:25 +0000
Manifest next update: Fri 16 Oct 2026 04:01:25 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: WTsgU0eyK27S9CQ0gss27fmkp+D2hvN00tJtKqggZTo=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:d3:69:54:de:85:0c:01:d3:31:4c:df:b6:9c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Oct 15 04:01:25 2026 GMT
Not After : Oct 16 04:01:25 2026 GMT
Subject: CN=1298aa31b0ac60b4ab4544c36fa76827b220c37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:ae:9d:b5:5a:bc:b4:fd:0c:96:11:aa:64:
53:12:aa:42:a3:72:1c:6d:4f:0f:4a:cc:d3:9a:d1:
22:5e:02:b5:36:19:28:a2:69:a7:26:ad:15:2f:3c:
f2:50:b7:7b:03:cd:85:11:a5:dc:36:43:23:e4:06:
b5:30:dd:37:4c:8e:0a:13:8a:ce:dd:87:69:76:39:
44:49:83:c3:9c:ea:7f:58:62:81:77:62:5f:d1:4b:
d3:d0:ba:70:38:3c:96:2d:c6:3f:40:d1:1a:23:bc:
18:4a:cf:af:09:60:43:57:1e:c6:83:3e:32:89:d4:
45:2d:94:19:ab:3a:39:6f:83:15:9a:a7:eb:b1:2b:
c0:5a:05:a2:5d:42:11:da:ab:11:50:97:1b:63:ef:
60:da:88:55:fd:61:e0:ac:b4:2b:fb:1c:ec:ee:2b:
3b:de:1c:01:cd:7e:b3:28:fd:57:1e:dc:39:43:ed:
90:50:49:de:05:26:1e:27:a0:17:2a:5c:b1:1e:85:
70:42:b6:ac:98:bd:1f:0a:d6:8f:24:3c:e3:82:84:
0c:bc:e3:ef:11:7c:59:ff:88:7d:d9:bb:bc:c9:73:
e4:50:52:92:36:61:8b:41:dc:13:35:7e:d7:1f:21:
05:09:75:83:b7:3c:d3:42:0c:3f:26:89:9b:51:37:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:98:AA:31:B0:AC:60:B4:AB:45:44:C3:6F:A7:68:27:B2:20:C3:7E
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a3:26:62:00:53:38:85:9f:cf:6e:df:8e:be:38:ff:d8:47:
56:e4:cf:3a:6f:da:c0:b4:46:3c:9a:ec:e8:ee:06:4d:8e:11:
38:49:6f:7e:73:89:ad:83:8d:40:37:b0:f9:a1:c8:82:57:82:
8a:d9:c7:2f:0b:e3:bb:c7:11:0c:de:62:5d:b6:63:46:4f:90:
53:02:6a:f0:f8:49:8d:82:79:fd:0e:fb:d5:00:ee:b1:29:1b:
5d:7b:dc:d6:86:7c:60:42:1e:a9:27:81:23:2f:89:4f:68:00:
0a:56:a2:79:27:a6:c9:89:f9:38:86:61:78:de:a5:44:cb:3e:
27:75:dd:af:92:cd:99:ed:0d:c9:0a:7c:a2:a5:a6:ae:0e:8f:
fb:2d:f2:47:46:1f:93:45:50:84:3f:53:ac:84:b6:4a:de:fa:
ab:c1:70:70:54:91:84:cf:3a:2d:ff:aa:e6:9a:f6:97:20:69:
bf:9b:9b:9c:b8:b1:9c:d9:73:d8:ae:eb:29:68:48:ea:bd:f6:
8c:81:2d:a6:50:ad:22:74:e3:03:4f:a9:a1:42:7a:68:72:6f:
07:98:f5:b8:5d:9c:ee:3a:03:f2:b0:9b:89:ff:b0:07:ca:ad:
90:0e:6d:38:42:91:58:80:a0:42:75:18:8f:c3:33:04:99:cc:
65:74:ae:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uNNpVN6FDAHTMUzftpxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTY4Mjg3N2I2YzhhZjc1ZTI3NjBjZjg1NDBlNzg0NTJk
NGJlYzAwHhcNMjYxMDE1MDQwMTI1WhcNMjYxMDE2MDQwMTI1WjAzMTEwLwYDVQQD
EygxMjk4YWEzMWIwYWM2MGI0YWI0NTQ0YzM2ZmE3NjgyN2IyMjBjMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQWunbVavLT9DJYRqmRTEqpCo3Ic
bU8PSszTmtEiXgK1NhkoommnJq0VLzzyULd7A82FEaXcNkMj5Aa1MN03TI4KE4rO
3YdpdjlESYPDnOp/WGKBd2Jf0UvT0LpwODyWLcY/QNEaI7wYSs+vCWBDVx7Ggz4y
idRFLZQZqzo5b4MVmqfrsSvAWgWiXUIR2qsRUJcbY+9g2ohV/WHgrLQr+xzs7is7
3hwBzX6zKP1XHtw5Q+2QUEneBSYeJ6AXKlyxHoVwQrasmL0fCtaPJDzjgoQMvOPv
EXxZ/4h92bu8yXPkUFKSNmGLQdwTNX7XHyEFCXWDtzzTQgw/JombUTetBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKYqjGwrGC0q0VEw2+naCeyIMN+MB8GA1UdIwQY
MBaAFNIWgod7bIr3Xidgz4VA54RS1L7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEt
ZGU5NzEyYzZlN2M3LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEtZGU5NzEyYzZlN2M3
LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaMmYgBT
OIWfz27fjr44/9hHVuTPOm/awLRGPJrs6O4GTY4ROElvfnOJrYONQDew+aHIgleC
itnHLwvju8cRDN5iXbZjRk+QUwJq8PhJjYJ5/Q771QDusSkbXXvc1oZ8YEIeqSeB
Iy+JT2gAClaieSemyYn5OIZheN6lRMs+J3Xdr5LNme0NyQp8oqWmrg6P+y3yR0Yf
k0VQhD9TrIS2St76q8FwcFSRhM86Lf+q5pr2lyBpv5ubnLixnNlz2K7rKWhI6r32
jIEtplCtInTjA0+poUJ6aHJvB5j1uF2c7joD8rCbif+wB8qtkA5tOEKRWICgQnUY
j8MzBJnMZXSu4A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:52 2026 by rpki-client