Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: NfXevfzpWAjP4c3LAvquw2YTRomJ9yoY80gC7cXz08s=
Subject key identifier: E2:DE:F2:6E:8C:6B:BD:3D:7E:69:6B:7C:91:1C:0F:9E:A6:1A:E3:09
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 01A13E26DE3FDAB179633B305F3BD9CA8E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0E7C
Signing time: Thu 15 Oct 2026 06:01:36 +0000
Manifest this update: Thu 15 Oct 2026 06:01:36 +0000
Manifest next update: Fri 16 Oct 2026 06:01:36 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: vru0vwgAbE61ocPR3JBFpDl84YRyRorsDq84CRwYyOA=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:de:3f:da:b1:79:63:3b:30:5f:3b:d9:ca:8e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Oct 15 06:01:36 2026 GMT
Not After : Oct 16 06:01:36 2026 GMT
Subject: CN=e2def26e8c6bbd3d7e696b7c911c0f9ea61ae309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:64:c8:48:87:8b:07:31:69:f2:04:de:59:
eb:24:90:ba:30:16:bb:eb:d1:e5:0e:d7:a5:60:35:
da:c2:7d:a8:2e:78:74:89:c6:ea:02:84:c6:5d:18:
e7:e9:b0:76:4d:24:8f:80:15:37:03:53:05:01:81:
2f:f3:ba:ac:ef:da:47:31:85:4d:01:64:66:3a:02:
60:10:a9:d8:64:cd:63:0f:77:9e:9e:f9:f6:2d:06:
fb:91:80:11:4b:cf:68:6b:5e:b7:a8:8e:67:b1:91:
b2:62:aa:22:5d:a1:fa:d9:8a:af:2c:8f:ec:b8:65:
57:c2:66:43:47:95:69:2c:82:5e:2a:6c:07:5c:3f:
08:68:06:1a:71:44:0c:4d:cb:13:b5:55:32:fb:e3:
01:33:fe:cd:33:6d:3c:d9:bc:80:1b:3b:17:fa:ca:
e8:b2:5e:ac:da:ab:18:4e:46:93:17:d5:79:a9:90:
32:b7:b1:da:a9:23:f9:af:a9:6e:90:d8:4c:c2:0b:
cd:cd:52:d6:76:79:2a:c6:eb:a5:05:df:a8:b0:91:
19:56:93:cc:d4:a6:54:f5:c7:4e:c2:20:8c:2f:96:
74:d7:cd:52:28:eb:18:d7:9f:e0:ba:d9:06:33:32:
9e:6f:96:65:bd:22:44:41:83:e7:f3:db:67:fc:a6:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:F2:6E:8C:6B:BD:3D:7E:69:6B:7C:91:1C:0F:9E:A6:1A:E3:09
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:05:c9:11:6c:0b:8a:55:b2:df:60:3f:b3:1d:63:98:ec:75:
34:8a:28:de:99:e4:0e:07:a0:6b:86:bb:43:c7:de:2a:81:82:
59:78:2e:99:72:39:e9:6f:11:94:4d:31:89:72:af:91:24:fe:
79:e1:17:c4:46:d9:ca:4e:71:94:46:0f:34:7c:26:4c:69:d5:
61:fc:4d:7b:d1:09:36:7c:d1:45:83:19:e8:66:bc:36:6a:75:
1b:e7:ea:7f:98:5a:46:e8:11:fa:a3:4b:41:32:b0:8c:1e:04:
50:f6:15:91:7b:b3:ea:7e:b8:ea:0c:b0:2c:47:10:85:d9:53:
39:03:94:69:4d:5f:14:5d:20:d5:7d:83:f8:97:10:72:0c:25:
7c:82:36:23:a8:46:05:73:d2:6b:46:bb:c8:e9:cc:fb:44:97:
7f:f0:9e:51:7a:6b:b9:4e:74:16:d6:50:a8:cc:2e:9b:8a:92:
c5:c3:37:6e:0d:b6:98:ad:f1:a3:4f:0c:0d:03:3b:f9:36:84:
83:93:67:48:55:04:e6:3a:f7:cd:03:fb:e7:69:f8:bc:1d:8b:
49:7d:87:01:51:af:ba:93:c3:4a:1c:bd:14:e1:f1:fe:06:34:
ac:2f:7f:42:4d:69:17:59:18:76:96:90:b9:1d:9f:c2:01:1c:
f3:5f:1f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jt4/2rF5YzswXzvZyo4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzgxYzYyZDM5NDIwMzNkMGE3NDA0NGIwYzVhNGYxMTNl
NDNkZjMwHhcNMjYxMDE1MDYwMTM2WhcNMjYxMDE2MDYwMTM2WjAzMTEwLwYDVQQD
EyhlMmRlZjI2ZThjNmJiZDNkN2U2OTZiN2M5MTFjMGY5ZWE2MWFlMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUtkyEiHiwcxafIE3lnrJJC6MBa7
69HlDtelYDXawn2oLnh0icbqAoTGXRjn6bB2TSSPgBU3A1MFAYEv87qs79pHMYVN
AWRmOgJgEKnYZM1jD3eenvn2LQb7kYARS89oa163qI5nsZGyYqoiXaH62YqvLI/s
uGVXwmZDR5VpLIJeKmwHXD8IaAYacUQMTcsTtVUy++MBM/7NM2082byAGzsX+sro
sl6s2qsYTkaTF9V5qZAyt7HaqSP5r6lukNhMwgvNzVLWdnkqxuulBd+osJEZVpPM
1KZU9cdOwiCML5Z0181SKOsY15/gutkGMzKeb5ZlvSJEQYPn89tn/KbxUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLe8m6Ma709fmlrfJEcD56mGuMJMB8GA1UdIwQY
MBaAFNHIHGLTlCAz0KdARLDFpPET5D3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAt
ZGYzMTM4YjQzNGM4LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAtZGYzMTM4YjQzNGM4
LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAXJEWwL
ilWy32A/sx1jmOx1NIoo3pnkDgega4a7Q8feKoGCWXgumXI56W8RlE0xiXKvkST+
eeEXxEbZyk5xlEYPNHwmTGnVYfxNe9EJNnzRRYMZ6Ga8Nmp1G+fqf5haRugR+qNL
QTKwjB4EUPYVkXuz6n646gywLEcQhdlTOQOUaU1fFF0g1X2D+JcQcgwlfII2I6hG
BXPSa0a7yOnM+0SXf/CeUXpruU50FtZQqMwum4qSxcM3bg22mK3xo08MDQM7+TaE
g5NnSFUE5jr3zQP752n4vB2LSX2HAVGvupPDShy9FOHx/gY0rC9/Qk1pF1kYdpaQ
uR2fwgEc818fOQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:06 2026 by rpki-client