Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier: cq8xkTSlloQv61ikYxK33jmoUcTOa8C7nYb/SkqOORU=
Subject key identifier: AE:80:4E:49:E9:9F:84:C6:B1:D2:9F:76:53:1A:CB:2F:E0:9C:DD:95
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial: 019D1B6DAD296B0E228BA8B6DF3CB69E4BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number: 066D
Signing time: Mon 23 Mar 2026 16:01:05 +0000
Manifest this update: Mon 23 Mar 2026 16:01:05 +0000
Manifest next update: Tue 24 Mar 2026 16:01:05 +0000
Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: t5aMbzJgXyAhanERaELWdM92Wkvd5GQKzLca9fXte4U=)
2: 1-MrxZrcPXM7BvaVdVabElQiwAhg.roa (hash: 5Yrq+V+8IPQZLxO9mgzwmCCXtczV+ZsgweXRxHjq37Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:6d:ad:29:6b:0e:22:8b:a8:b6:df:3c:b6:9e:4b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
Validity
Not Before: Mar 23 16:01:05 2026 GMT
Not After : Mar 24 16:01:05 2026 GMT
Subject: CN=ae804e49e99f84c6b1d29f76531acb2fe09cdd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:14:05:0a:fa:ed:1a:d2:62:75:da:53:fc:c5:
cf:b2:b9:7e:eb:99:71:cc:70:c6:52:96:00:b7:06:
aa:5c:9e:dc:63:7e:c8:be:cd:0d:8b:03:6a:6b:33:
13:80:fb:e5:b3:a6:7b:01:25:6a:62:aa:6f:2f:04:
6a:cc:a5:04:74:cd:83:78:78:e4:65:b4:d4:d2:8b:
d9:43:f8:76:f3:90:7e:fc:f3:61:d7:8a:32:61:3f:
1e:a1:7a:5d:4c:2a:11:03:67:b1:f1:7b:00:8f:29:
91:cb:bf:fb:3a:cd:90:ae:da:38:93:bd:45:18:59:
61:e6:dc:49:88:01:d5:9c:34:f3:06:d6:f4:cd:1d:
ce:91:9a:b6:9d:6d:95:b6:f9:a0:76:03:26:3f:fe:
fd:91:4d:13:a7:c4:18:4f:c7:19:a6:1a:9b:be:48:
72:c3:31:3d:a4:56:a7:be:f1:fb:8c:f3:23:9f:74:
e1:2d:11:3f:08:5c:e6:12:4e:d3:b9:d2:8f:44:d5:
61:3c:b8:47:04:20:c4:24:00:83:18:05:25:b1:52:
6f:a6:4a:8a:00:cf:56:28:81:27:44:70:f3:f9:d4:
fc:a3:89:22:fb:fc:bc:e0:c3:8b:c0:1d:70:87:71:
17:c6:7a:65:ce:af:97:0d:9b:03:1b:28:70:dd:8b:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:4E:49:E9:9F:84:C6:B1:D2:9F:76:53:1A:CB:2F:E0:9C:DD:95
X509v3 Authority Key Identifier:
keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:14:30:ab:e8:fd:a8:b0:48:2d:21:5a:81:8c:48:7b:71:04:
2c:7f:6b:25:26:c9:10:c0:e8:33:78:ae:be:ae:76:3a:cb:c8:
8d:c8:7f:37:3d:0a:53:c8:4d:60:c2:ed:0f:fa:c3:33:2c:99:
c2:9c:be:07:24:b3:bc:91:05:99:b8:26:f1:35:c7:67:07:cc:
56:42:1d:14:ed:f6:75:39:1b:c9:60:72:b9:a7:9a:d9:13:d3:
7c:89:c5:69:28:fe:93:31:1e:eb:54:62:21:fd:17:92:69:71:
ed:70:41:62:41:64:2f:da:e4:20:9f:bc:94:5f:4e:c9:d7:be:
24:67:50:9e:3c:59:d9:58:87:82:b6:e6:be:54:c0:6f:1e:5a:
61:bb:6b:d1:7b:f8:75:be:92:3d:bb:35:29:a8:d0:b6:f6:0f:
08:1e:50:24:4f:ee:44:4a:fc:99:6e:ae:c2:29:72:f7:e3:43:
c7:0b:c1:fc:2b:15:9a:2f:00:b7:52:2d:23:54:1e:48:f2:6f:
06:4e:74:f1:ee:2d:5f:fb:9a:03:da:e3:94:95:aa:58:b1:a4:
47:b4:1f:c0:84:11:17:fa:28:cc:8e:bf:89:b0:d8:e5:c8:b3:
de:8c:aa:b0:2c:bc:5e:90:ad:3a:96:12:a0:7d:09:ce:8a:f5:
4e:df:32:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0bba0paw4ii6i23zy2nkvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzE3ZGIwOTliZDQxOWViYTU1MmEzNzcwNGRlZWVkM2Iy
ZTMwM2IwHhcNMjYwMzIzMTYwMTA1WhcNMjYwMzI0MTYwMTA1WjAzMTEwLwYDVQQD
EyhhZTgwNGU0OWU5OWY4NGM2YjFkMjlmNzY1MzFhY2IyZmUwOWNkZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hQFCvrtGtJiddpT/MXPsrl+65lx
zHDGUpYAtwaqXJ7cY37Ivs0NiwNqazMTgPvls6Z7ASVqYqpvLwRqzKUEdM2DeHjk
ZbTU0ovZQ/h285B+/PNh14oyYT8eoXpdTCoRA2ex8XsAjymRy7/7Os2Qrto4k71F
GFlh5txJiAHVnDTzBtb0zR3OkZq2nW2VtvmgdgMmP/79kU0Tp8QYT8cZphqbvkhy
wzE9pFanvvH7jPMjn3ThLRE/CFzmEk7TudKPRNVhPLhHBCDEJACDGAUlsVJvpkqK
AM9WKIEnRHDz+dT8o4ki+/y84MOLwB1wh3EXxnplzq+XDZsDGyhw3Ytj2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6ATknpn4TGsdKfdlMayy/gnN2VMB8GA1UdIwQY
MBaAFNLBfbCZvUGeulUqN3BN7u07LjA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUt
YTEwNzZkMTI3ZWM2LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUtYTEwNzZkMTI3ZWM2
LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBQwq+j9
qLBILSFagYxIe3EELH9rJSbJEMDoM3iuvq52OsvIjch/Nz0KU8hNYMLtD/rDMyyZ
wpy+BySzvJEFmbgm8TXHZwfMVkIdFO32dTkbyWByuaea2RPTfInFaSj+kzEe61Ri
If0Xkmlx7XBBYkFkL9rkIJ+8lF9Oyde+JGdQnjxZ2ViHgrbmvlTAbx5aYbtr0Xv4
db6SPbs1KajQtvYPCB5QJE/uREr8mW6uwily9+NDxwvB/CsVmi8At1ItI1QeSPJv
Bk508e4tX/uaA9rjlJWqWLGkR7QfwIQRF/oozI6/ibDY5ciz3oyqsCy8XpCtOpYS
oH0Jzor1Tt8yGg==
-----END CERTIFICATE-----
Generated at Mon Mar 23 21:56:29 2026 by rpki-client