Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
File: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft (raw, json)
Hash identifier: vL+XtqJMk3GLSMESHDW9YHFEk0maEgogYhXNVBG4Tes=
Subject key identifier: 09:C1:42:26:8B:18:C2:94:B4:C9:F3:67:8C:C0:E7:C3:0C:22:09:CD
Authority key identifier: D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
Certificate issuer: /CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Certificate serial: 01A14E07739C725006D0B54CF783EB0D2210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
Manifest number: 0101
Signing time: Sun 18 Oct 2026 08:01:13 +0000
Manifest this update: Sun 18 Oct 2026 08:01:13 +0000
Manifest next update: Mon 19 Oct 2026 08:01:13 +0000
Files and hashes: 1: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl (hash: eGvp8DZ8D+A+ZZqM9NagEj63/Z2/F0hv/i63tdT+f0k=)
2: 4eTqXPsY2k0nfIKnegQTKL9VsZc.roa (hash: J2j96Igp+h3cc2jy3MZ29Vf0gTNVfHTR+h+cL3q6LnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:07:73:9c:72:50:06:d0:b5:4c:f7:83:eb:0d:22:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Validity
Not Before: Oct 18 08:01:13 2026 GMT
Not After : Oct 19 08:01:13 2026 GMT
Subject: CN=09c142268b18c294b4c9f3678cc0e7c30c2209cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c1:d5:a4:d0:3d:29:a6:71:7e:ff:2d:9f:f8:
9d:8e:ed:17:63:ba:1d:de:cc:b3:18:76:31:dc:e0:
6b:f3:69:b0:bd:f1:fa:0a:f7:a9:c0:80:76:b1:83:
02:40:fc:18:1f:d4:c6:dd:e7:10:81:61:b6:25:f4:
db:91:11:aa:fb:78:44:c4:91:dd:f5:b1:2f:84:39:
c3:99:22:a8:cb:9b:cb:10:f6:b0:fd:a9:20:7b:8d:
1b:14:ba:f6:3d:35:03:56:93:f0:71:b3:b9:1e:34:
e7:7b:26:b7:d3:09:0c:a9:90:05:01:63:10:02:4f:
88:1d:a9:76:04:4b:1e:07:ce:61:3e:99:d8:89:f3:
79:1a:f5:94:db:d7:a1:48:23:64:9f:7c:e0:ca:d3:
21:7f:95:e9:01:e6:c4:d3:b1:95:21:5c:ad:0d:d4:
dc:a3:40:b6:e0:95:b6:9e:cc:ae:3a:ce:ef:79:35:
c5:a0:25:ff:e5:71:9b:85:2a:c0:a8:10:d5:be:e5:
83:e4:a8:87:a4:b4:9a:5b:a3:6e:ee:27:40:d1:66:
8c:30:9f:17:2f:da:59:74:81:5a:a7:15:82:d4:de:
26:b5:67:13:33:99:02:a3:d8:9a:9e:70:ce:18:c3:
a0:e9:c3:e2:d3:e4:c1:be:ce:c1:02:0c:6c:34:ef:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:42:26:8B:18:C2:94:B4:C9:F3:67:8C:C0:E7:C3:0C:22:09:CD
X509v3 Authority Key Identifier:
keyid:D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7c:de:c7:7d:5e:8f:6c:94:0b:00:a1:ec:e6:8c:36:a9:44:
00:bb:3e:ed:b8:2d:0b:37:bc:08:a2:30:94:06:3e:04:29:48:
5a:f8:61:c7:fe:49:93:6a:85:e3:57:d6:a6:68:c4:7a:cc:ba:
f4:90:12:46:8b:35:ce:1b:d5:1b:ea:3e:ed:bb:6f:12:f1:67:
c3:02:99:ee:65:ab:10:f7:c7:52:d8:79:0c:25:a5:66:e0:3b:
5b:4d:21:87:28:e7:7b:0e:19:4f:2d:0a:e0:75:3f:94:bc:33:
08:4c:0c:03:69:b5:e8:13:6b:73:59:4e:d8:87:07:9d:88:a0:
20:25:32:92:49:c0:3f:10:fb:f7:16:74:3f:15:b2:9c:b7:7c:
60:66:ed:db:c5:68:aa:e7:dc:0e:b2:73:f4:1f:98:d5:f4:a8:
7d:c0:53:bc:c9:2a:83:ac:c2:be:1f:b1:7d:e2:fb:05:ef:69:
9b:b7:9b:c1:35:21:b2:e2:f3:b6:58:9a:37:01:e6:d1:7c:67:
b2:e0:fb:c8:71:1f:90:5a:51:9f:9b:6b:f2:d4:13:62:50:11:
4b:d2:20:52:fb:20:7c:00:d6:95:38:9f:04:50:84:22:9d:35:
92:84:00:58:e1:c9:55:6f:f4:b9:32:ba:65:c4:4e:f2:d8:b8:
e6:d1:20:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFOB3OcclAG0LVM94PrDSIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMDA0YTg2ZTg3ZDNlNjliZTMyMTBkNzBjY2MwMGJlZjhh
MDk5NjgwHhcNMjYxMDE4MDgwMTEzWhcNMjYxMDE5MDgwMTEzWjAzMTEwLwYDVQQD
EygwOWMxNDIyNjhiMThjMjk0YjRjOWYzNjc4Y2MwZTdjMzBjMjIwOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MHVpNA9KaZxfv8tn/idju0XY7od
3syzGHYx3OBr82mwvfH6CvepwIB2sYMCQPwYH9TG3ecQgWG2JfTbkRGq+3hExJHd
9bEvhDnDmSKoy5vLEPaw/akge40bFLr2PTUDVpPwcbO5HjTneya30wkMqZAFAWMQ
Ak+IHal2BEseB85hPpnYifN5GvWU29ehSCNkn3zgytMhf5XpAebE07GVIVytDdTc
o0C24JW2nsyuOs7veTXFoCX/5XGbhSrAqBDVvuWD5KiHpLSaW6Nu7idA0WaMMJ8X
L9pZdIFapxWC1N4mtWcTM5kCo9iannDOGMOg6cPi0+TBvs7BAgxsNO9J0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnBQiaLGMKUtMnzZ4zA58MMIgnNMB8GA1UdIwQY
MBaAFNEASobofT5pvjIQ1wzMAL74oJloMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFFCS2h1aDlQbW0tTWhEWERNd0F2dmlnbVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZTBlYWQtZWVjMi00ZDIxLWFiZTkt
MTZiZDhkYjg1ODkzLzEvMFFCS2h1aDlQbW0tTWhEWERNd0F2dmlnbVdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZTBlYWQtZWVjMi00ZDIxLWFiZTktMTZiZDhkYjg1ODkz
LzEvMFFCS2h1aDlQbW0tTWhEWERNd0F2dmlnbVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnzex31e
j2yUCwCh7OaMNqlEALs+7bgtCze8CKIwlAY+BClIWvhhx/5Jk2qF41fWpmjEesy6
9JASRos1zhvVG+o+7btvEvFnwwKZ7mWrEPfHUth5DCWlZuA7W00hhyjnew4ZTy0K
4HU/lLwzCEwMA2m16BNrc1lO2IcHnYigICUykknAPxD79xZ0PxWynLd8YGbt28Vo
qufcDrJz9B+Y1fSofcBTvMkqg6zCvh+xfeL7Be9pm7ebwTUhsuLztliaNwHm0Xxn
suD7yHEfkFpRn5tr8tQTYlARS9IgUvsgfADWlTifBFCEIp01koQAWOHJVW/0uTK6
ZcRO8ti45tEgAw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:03 2026 by rpki-client