Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: O+FRAVPBHzN8dBy+d5l3SAAG3tR80ql3ZrJ+pvOEGMU=
Subject key identifier: 09:75:34:F1:DE:41:89:0B:75:A1:60:E1:FD:34:36:CF:3F:B2:C5:51
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 019D389BFB95A485F41AF05AD415DAD238A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: cflc+Xa0myFkf4xN1vxkibVkHC3+1AYnfOOS4jgEogE=)
2: MZedXybYHwozV6I5FVF9kaQXqGw.roa (hash: 9GqJqyPbldCXpYPmuX8YAVKvtX3ZVzz/4Tffa0wjAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fb:95:a4:85:f4:1a:f0:5a:d4:15:da:d2:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=097534f1de41890b75a160e1fd3436cf3fb2c551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:2d:b7:c8:61:c9:14:f0:06:09:20:4e:52:
1c:30:5e:ff:7e:7f:cb:67:07:54:13:b2:ef:f7:01:
39:8c:38:c1:2d:2b:99:af:f8:07:74:da:96:b8:7b:
67:c9:7c:9e:c5:92:e9:16:e6:6d:0c:2c:d8:94:c0:
7f:9f:0c:25:2c:36:ba:98:4f:da:d0:0c:1d:64:6d:
25:41:d9:2c:c0:b0:93:a2:9c:c2:22:1d:55:36:d8:
99:24:3c:e2:d1:23:bb:89:45:0b:b9:7d:2e:58:4e:
d4:7a:93:49:5f:84:ff:d7:6c:7c:3e:41:77:5a:8b:
f5:5c:79:03:1c:c4:23:1b:f8:32:57:60:e7:71:88:
8c:0c:e5:11:48:5e:d1:83:c4:e4:0e:d7:a4:54:53:
11:3a:9f:23:ff:17:6e:5f:af:19:13:03:b9:1f:c3:
cc:ed:6b:30:0c:af:54:85:b5:1b:20:d7:5a:1e:76:
93:70:fb:aa:02:fb:f1:55:12:a3:8a:9c:86:93:5f:
35:51:7e:d8:27:91:33:ce:01:5b:d8:79:2a:80:41:
0c:94:7c:ff:64:b0:d9:72:fa:96:b7:5a:bf:06:ab:
8f:1a:c6:f9:e8:74:ab:0d:17:0f:78:5f:27:5f:d6:
dc:85:71:8d:07:11:e2:a7:f2:1e:77:0d:e2:5c:8c:
f2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:75:34:F1:DE:41:89:0B:75:A1:60:E1:FD:34:36:CF:3F:B2:C5:51
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9d:3a:15:b7:9d:e0:11:f0:7e:a9:f4:de:58:f6:a4:5d:a3:
28:11:7c:3a:01:68:8b:8d:44:ba:08:21:14:bb:38:45:49:f8:
6b:18:e5:7f:05:52:0e:4b:e4:21:80:59:58:8c:c9:7d:10:48:
e4:e2:66:d9:fa:fa:54:f8:03:31:6e:75:b1:96:f9:1f:1a:02:
54:76:6c:69:7f:ff:ee:79:fd:b3:8a:51:09:00:1d:d9:1c:8b:
6d:7a:3c:e3:e0:c6:42:92:8f:52:43:e0:63:cb:a0:1d:d0:61:
79:84:9a:1f:71:a4:cc:e4:a5:72:aa:e6:5e:b1:41:30:f9:c8:
3e:1c:5f:11:21:bb:fd:3c:42:7e:c0:42:4d:84:7c:de:66:10:
a7:a9:22:58:b5:74:c7:9e:54:58:5e:05:6c:42:cd:97:58:e9:
aa:63:d9:b3:a5:40:16:cf:cc:51:d2:fc:db:23:80:1d:cf:1b:
fc:c3:fc:77:21:3b:61:d0:d0:8d:1b:e7:48:cd:d1:14:19:0a:
94:0c:6d:d0:f8:26:8b:a3:83:c1:5f:2d:b3:fe:06:8d:c1:74:
7f:e6:aa:60:dd:22:87:c6:f6:78:2c:c7:a2:cf:b9:92:3c:18:
f6:47:33:84:2a:cb:7b:14:a0:8a:8e:72:a2:34:21:e0:ee:32:
26:e6:ce:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/uVpIX0GvBa1BXa0jihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2EzYzBiMTk2ZmRlMGJhNzRjMTQ4N2JkY2I5YzVmYTA1
MzY2NGIwHhcNMjYwMzI5MDgwMDM5WhcNMjYwMzMwMDgwMDM5WjAzMTEwLwYDVQQD
EygwOTc1MzRmMWRlNDE4OTBiNzVhMTYwZTFmZDM0MzZjZjNmYjJjNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ8tt8hhyRTwBgkgTlIcMF7/fn/L
ZwdUE7Lv9wE5jDjBLSuZr/gHdNqWuHtnyXyexZLpFuZtDCzYlMB/nwwlLDa6mE/a
0AwdZG0lQdkswLCTopzCIh1VNtiZJDzi0SO7iUULuX0uWE7UepNJX4T/12x8PkF3
Wov1XHkDHMQjG/gyV2DncYiMDOURSF7Rg8TkDtekVFMROp8j/xduX68ZEwO5H8PM
7WswDK9UhbUbINdaHnaTcPuqAvvxVRKjipyGk181UX7YJ5EzzgFb2HkqgEEMlHz/
ZLDZcvqWt1q/BquPGsb56HSrDRcPeF8nX9bchXGNBxHip/Iedw3iXIzyEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl1NPHeQYkLdaFg4f00Ns8/ssVRMB8GA1UdIwQY
MBaAFNDKPAsZb94Lp0wUh73LnF+gU2ZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2Et
NmI2MzMzMWVmZjAyLzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2EtNmI2MzMzMWVmZjAy
LzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ06Fbed
4BHwfqn03lj2pF2jKBF8OgFoi41EugghFLs4RUn4axjlfwVSDkvkIYBZWIzJfRBI
5OJm2fr6VPgDMW51sZb5HxoCVHZsaX//7nn9s4pRCQAd2RyLbXo84+DGQpKPUkPg
Y8ugHdBheYSaH3GkzOSlcqrmXrFBMPnIPhxfESG7/TxCfsBCTYR83mYQp6kiWLV0
x55UWF4FbELNl1jpqmPZs6VAFs/MUdL82yOAHc8b/MP8dyE7YdDQjRvnSM3RFBkK
lAxt0Pgmi6ODwV8ts/4GjcF0f+aqYN0ih8b2eCzHos+5kjwY9kczhCrLexSgio5y
ojQh4O4yJubO7A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:10 2026 by rpki-client