Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: wS3qHSDfsfqE1zHbu9Lj30YPVmbFlY0j0aK8YVsTPAU=
Subject key identifier: 54:1D:A8:DF:17:3B:17:76:0F:A1:DA:90:C8:C2:97:E3:AB:2B:03:39
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 01A13F39AA5598348CE34C21ACA6E866DBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 146F
Signing time: Thu 15 Oct 2026 11:01:45 +0000
Manifest this update: Thu 15 Oct 2026 11:01:45 +0000
Manifest next update: Fri 16 Oct 2026 11:01:45 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: FmDozTgwwgAgY4lKICdI9hxKSk3M6xTUX+0N5+zutC0=)
2: n9FzbJINgcYwHJShublPjUzZTBM.roa (hash: BpAt1xbMGdaHlLf4Q+CKPCiPeYCdr0TW6Zq6Hho4rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:aa:55:98:34:8c:e3:4c:21:ac:a6:e8:66:db:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Oct 15 11:01:45 2026 GMT
Not After : Oct 16 11:01:45 2026 GMT
Subject: CN=541da8df173b17760fa1da90c8c297e3ab2b0339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:e9:c0:99:00:c7:cd:73:bf:dd:ee:d2:55:
2d:f2:35:c3:9a:d7:4a:4a:fe:2b:d2:6d:11:4f:cb:
b5:a4:db:08:36:a1:86:6e:73:28:62:e5:4e:e9:78:
6f:5e:5f:6f:2c:82:e1:9a:88:5a:8f:0f:06:cb:7a:
f2:69:63:94:80:a6:14:01:dc:d2:91:7a:c4:45:3d:
dd:db:65:77:64:98:21:1a:8a:2b:48:a0:9d:81:27:
32:39:c3:f4:97:27:39:81:f0:12:93:29:88:c2:39:
63:18:ff:d0:04:34:41:30:45:74:64:da:b4:7c:05:
89:15:b0:d7:29:c9:c6:df:b8:72:44:ab:49:a9:fe:
2e:45:58:2e:4b:09:ea:97:4c:c4:72:75:1d:25:80:
9a:33:bf:3b:06:35:8c:b2:71:c5:5a:00:1b:cc:b5:
6e:b4:f4:75:a7:ca:0f:39:53:12:89:9c:4c:1d:25:
8f:a4:1e:c2:f2:d0:4b:f7:10:0c:18:ad:d8:25:83:
f6:68:49:46:ba:a7:8a:de:15:df:de:b8:f0:51:98:
70:8d:55:04:7f:85:7c:ac:ba:cc:a9:59:ab:ec:dd:
62:b6:a1:9f:63:49:c8:5f:17:86:42:1e:26:fe:c9:
c7:b8:5c:4a:97:42:de:b7:1e:ed:6b:83:4d:be:1e:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:A8:DF:17:3B:17:76:0F:A1:DA:90:C8:C2:97:E3:AB:2B:03:39
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a9:68:21:d1:b3:c6:75:f3:7f:8b:00:46:ee:f1:ba:6c:c0:
cb:36:8b:51:6e:ad:b1:d3:b2:ff:6c:dd:3e:ec:5a:f4:32:ac:
42:17:b4:d5:a6:4c:90:37:e2:d8:1b:21:8f:81:3e:07:d4:93:
e0:9a:92:5d:4a:e8:81:31:64:5d:2e:e0:02:bb:02:b5:2c:ad:
8f:c8:6d:b9:eb:14:62:10:15:6b:9e:b1:44:cf:0d:4b:c3:bd:
18:5d:16:ce:0f:2e:11:c8:53:c0:e2:96:36:ec:c6:c4:fb:6b:
02:79:d2:8a:04:4d:4f:99:be:d6:89:a0:d7:df:86:b7:82:bd:
51:84:b8:90:77:10:c7:c7:7a:b6:bd:4a:cf:c3:42:31:e8:71:
ff:f2:c7:b1:da:4a:c8:95:b9:c6:3f:bb:c4:bd:f2:6b:b6:c8:
ce:ac:f1:24:37:7e:68:ef:d4:6c:65:b6:c9:11:62:47:b9:ef:
74:85:c6:e1:fe:92:4b:1c:af:86:29:b1:99:e2:a5:80:f7:4e:
96:5a:4e:4c:7c:c4:f1:fc:9b:41:7e:ea:de:f5:b2:3f:a1:3c:
c4:f1:8f:95:6a:81:cf:d2:c6:df:1d:ee:a3:5a:d8:f7:ef:0b:
39:ea:9f:0b:17:55:1c:5c:32:90:66:a5:57:c3:e7:c2:0a:cf:
57:43:ac:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OapVmDSM40whrKboZtvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDAzZTcxZWY4YzNkOTczY2U3NmQ0MjA0MmY3ZGZhMTg5
MTY4OGIwHhcNMjYxMDE1MTEwMTQ1WhcNMjYxMDE2MTEwMTQ1WjAzMTEwLwYDVQQD
Eyg1NDFkYThkZjE3M2IxNzc2MGZhMWRhOTBjOGMyOTdlM2FiMmIwMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MTpwJkAx81zv93u0lUt8jXDmtdK
Sv4r0m0RT8u1pNsINqGGbnMoYuVO6XhvXl9vLILhmohajw8Gy3ryaWOUgKYUAdzS
kXrERT3d22V3ZJghGoorSKCdgScyOcP0lyc5gfASkymIwjljGP/QBDRBMEV0ZNq0
fAWJFbDXKcnG37hyRKtJqf4uRVguSwnql0zEcnUdJYCaM787BjWMsnHFWgAbzLVu
tPR1p8oPOVMSiZxMHSWPpB7C8tBL9xAMGK3YJYP2aElGuqeK3hXf3rjwUZhwjVUE
f4V8rLrMqVmr7N1itqGfY0nIXxeGQh4m/snHuFxKl0Letx7ta4NNvh4fRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQdqN8XOxd2D6HakMjCl+OrKwM5MB8GA1UdIwQY
MBaAFAtAPnHvjD2XPOdtQgQvffoYkWiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQt
MGM2ODc3N2E0MDE5LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQtMGM2ODc3N2E0MDE5
LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKloIdGz
xnXzf4sARu7xumzAyzaLUW6tsdOy/2zdPuxa9DKsQhe01aZMkDfi2Bshj4E+B9ST
4JqSXUrogTFkXS7gArsCtSytj8htuesUYhAVa56xRM8NS8O9GF0Wzg8uEchTwOKW
NuzGxPtrAnnSigRNT5m+1omg19+Gt4K9UYS4kHcQx8d6tr1Kz8NCMehx//LHsdpK
yJW5xj+7xL3ya7bIzqzxJDd+aO/UbGW2yRFiR7nvdIXG4f6SSxyvhimxmeKlgPdO
llpOTHzE8fybQX7q3vWyP6E8xPGPlWqBz9LG3x3uo1rY9+8LOeqfCxdVHFwykGal
V8PnwgrPV0OsOw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:50 2026 by rpki-client