
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier: 7wJ5RSuYyO9/v6wrStyfUDCHIhN3QkY5AqG5c8tSOsQ=
Subject key identifier: 0D:02:0F:31:E9:21:A5:34:34:5E:E1:6C:AB:24:0F:B5:76:38:8D:CB
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 01A17D3CCA6FE0B658BB955ED79B900738A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 12:01:38 +0000
Manifest this update: Tue 27 Oct 2026 12:01:38 +0000
Manifest next update: Wed 28 Oct 2026 12:01:38 +0000
Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: ZK9wSl0/atvyfim13M3UXWVwZM11TiHpkkVlJ0GJ8Ko=)
2: 18LvMJbaobz9RVoG3KwWtt6oPsk.roa (hash: U928xEWQEvSL1IP/0rVvcpbAEWqlTfBez50gOZPkoHY=)
3: 5jCnir6W6gAd6_EDtQEmsCT7w14.roa (hash: 0wvxGHojLuaQ4hENlIsY48YCfJ44p5EM0SkFd7dB+g4=)
4: bQqTZ3ArgViLCoqi3gs3VHHEcM8.roa (hash: aWk0i4GB/D7KkQJxNXNTSQ961hAd3k/+4U2XwwZMILk=)
5: vW2RW7QY1hflVRyn1_CDLNIOZtQ.roa (hash: M4ZBHT4dK/BF7Hs2UlU9Rb4uebu3FER628aOLG71DV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:ca:6f:e0:b6:58:bb:95:5e:d7:9b:90:07:38:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Oct 27 12:01:38 2026 GMT
Not After : Oct 28 12:01:38 2026 GMT
Subject: CN=0d020f31e921a534345ee16cab240fb576388dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:ec:99:19:24:f8:f5:17:4b:b0:e9:87:15:
13:a5:dd:4b:1c:59:37:3c:99:62:63:82:4b:84:b5:
20:6a:05:c8:e9:ff:65:79:51:a6:dc:ad:59:27:dc:
4c:74:41:db:69:c8:24:42:85:23:bb:94:a7:1b:7e:
49:26:c9:d0:18:43:8f:9c:34:17:b3:21:44:30:99:
3d:2a:a0:cf:16:d3:36:70:eb:2f:b5:2c:ca:97:46:
e6:f0:b2:05:23:13:ec:90:80:c6:5c:62:cd:db:88:
76:01:2a:ca:09:33:ca:6f:d8:2d:04:27:58:ad:ec:
35:14:a9:c9:6d:b8:85:3c:3b:4e:6c:77:18:01:61:
17:11:69:f7:80:84:3b:d4:70:e3:92:19:ac:a2:7e:
26:91:08:5d:e4:9f:f1:4e:08:2d:b0:a6:ea:43:47:
07:dd:80:ea:ea:aa:77:81:5a:3d:c7:ec:c9:64:26:
19:3d:92:e4:65:b8:5a:2e:ca:7d:4c:36:81:2f:4d:
78:fe:9d:80:73:0a:92:3e:a4:07:ae:6d:88:f8:c3:
7d:51:f7:ef:04:12:36:83:51:bd:9c:32:10:46:ee:
4c:de:51:97:d4:9c:5f:15:b5:1d:b5:2c:40:2d:a1:
94:b1:5f:05:12:9c:b4:37:dd:7d:14:14:ad:b5:c3:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:02:0F:31:E9:21:A5:34:34:5E:E1:6C:AB:24:0F:B5:76:38:8D:CB
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ab:c5:0e:20:92:97:68:7b:60:57:ea:d4:aa:74:b4:98:f0:
93:ec:2d:1e:21:57:ce:f5:8d:e6:54:3c:7d:c3:9c:50:bb:4f:
ce:10:be:b2:76:ed:08:e3:f6:06:fa:06:8b:62:86:c8:e6:0e:
80:84:01:13:b9:53:b2:4c:73:6b:ef:b0:80:a4:0b:87:e1:3a:
3a:a1:58:70:07:36:6c:3b:b6:07:96:25:16:ec:60:01:6b:f2:
c8:6b:1d:68:61:74:14:08:dd:bb:33:66:a5:41:45:83:1f:bb:
f7:5d:60:84:9d:b8:9a:ec:26:4a:df:22:c1:61:60:97:66:2f:
10:08:a4:09:59:30:33:22:51:b2:da:24:44:53:16:00:ee:13:
90:f7:64:23:95:7f:86:fb:a4:40:85:09:d6:39:2b:8a:45:39:
35:8f:c0:19:15:75:9e:53:bf:62:52:2b:64:5c:a8:71:fd:b6:
61:2b:c2:e3:6a:6c:7d:44:9f:9b:89:28:96:9a:f0:5a:93:fb:
bd:c0:ae:f2:a7:32:19:ee:78:02:80:b4:76:e9:51:4d:a5:2d:
b2:72:c2:f1:c0:bb:43:a2:b2:54:0a:ba:a4:43:bc:7e:7f:7b:
d6:e5:42:0b:33:3c:d0:66:74:39:11:fc:e7:8e:b6:a9:cb:e0:
01:94:bf:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PMpv4LZYu5Ve15uQBzikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGU2MTg4MjJiOGFmNmY5ZWNhZmZjZDdkNTQ1OWI3Y2Mx
MTQ0OWEwHhcNMjYxMDI3MTIwMTM4WhcNMjYxMDI4MTIwMTM4WjAzMTEwLwYDVQQD
EygwZDAyMGYzMWU5MjFhNTM0MzQ1ZWUxNmNhYjI0MGZiNTc2Mzg4ZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU3smRkk+PUXS7DphxUTpd1LHFk3
PJliY4JLhLUgagXI6f9leVGm3K1ZJ9xMdEHbacgkQoUju5SnG35JJsnQGEOPnDQX
syFEMJk9KqDPFtM2cOsvtSzKl0bm8LIFIxPskIDGXGLN24h2ASrKCTPKb9gtBCdY
rew1FKnJbbiFPDtObHcYAWEXEWn3gIQ71HDjkhmson4mkQhd5J/xTggtsKbqQ0cH
3YDq6qp3gVo9x+zJZCYZPZLkZbhaLsp9TDaBL014/p2AcwqSPqQHrm2I+MN9Uffv
BBI2g1G9nDIQRu5M3lGX1JxfFbUdtSxALaGUsV8FEpy0N919FBSttcOHSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0CDzHpIaU0NF7hbKskD7V2OI3LMB8GA1UdIwQY
MBaAFNDeYYgiuK9vnsr/zX1UWbfMEUSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQt
MDQwZTA2NDRmYmU4LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQtMDQwZTA2NDRmYmU4
LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdavFDiCS
l2h7YFfq1Kp0tJjwk+wtHiFXzvWN5lQ8fcOcULtPzhC+snbtCOP2BvoGi2KGyOYO
gIQBE7lTskxza++wgKQLh+E6OqFYcAc2bDu2B5YlFuxgAWvyyGsdaGF0FAjduzNm
pUFFgx+7911ghJ24muwmSt8iwWFgl2YvEAikCVkwMyJRstokRFMWAO4TkPdkI5V/
hvukQIUJ1jkrikU5NY/AGRV1nlO/YlIrZFyocf22YSvC42psfUSfm4kolprwWpP7
vcCu8qcyGe54AoC0dulRTaUtsnLC8cC7Q6KyVAq6pEO8fn971uVCCzM80GZ0ORH8
5462qcvgAZS/9A==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:15:55 2026 by rpki-client