Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: xIj25lRum/oQNtFyoh74mb9HK1NxvXSUU3biz6/Zh4g=
Subject key identifier: B4:16:BA:4A:22:97:57:3A:E1:DD:51:D2:05:E2:4A:27:79:BA:07:81
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 019D382E0594399C845916BCEAB869411E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0C94
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: WqeJjBrfA/NoNEYRhf8R79o3NMcFm4NMWXYkjlFihsI=)
2: iGY_Mv10YgE-XbLN8s6W95SGc3w.roa (hash: 2VVKNx6PRdYWZ0nNRbCgG4Dar1wwW4X2eQNLFYqQiUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:05:94:39:9c:84:59:16:bc:ea:b8:69:41:1e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=b416ba4a2297573ae1dd51d205e24a2779ba0781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d8:87:3d:3b:0e:ba:ce:96:55:26:6d:17:60:
4e:c2:9f:0a:eb:aa:32:7d:64:10:18:bc:a6:3e:26:
a0:d1:92:33:cb:43:19:cc:44:06:5f:c5:94:ab:80:
86:06:90:a3:1b:9f:ac:78:07:62:b4:96:c6:46:1b:
55:e0:f6:ac:0c:41:90:76:13:ca:63:78:87:a5:d5:
71:d3:1e:fd:72:30:ac:f7:e0:6f:b8:fe:6b:34:81:
47:5d:f8:62:2d:fd:63:7b:96:1c:11:37:a4:ec:7a:
bc:c3:ae:5b:9e:5b:de:96:cc:89:33:61:f8:34:b6:
65:ba:55:ab:14:41:66:20:2d:56:d0:0a:e0:8b:b5:
ab:82:e3:8f:f3:52:67:c5:b5:29:3c:e1:67:54:0f:
e2:0f:6b:5c:0e:c2:c2:c8:25:13:af:6d:96:bb:6a:
d7:23:05:52:1e:ac:7c:b5:09:cc:1b:4d:3d:a5:6f:
90:f8:cb:ae:44:ed:a5:f8:c3:d5:f1:03:a5:09:7c:
19:3a:ec:08:f0:1c:cc:a7:00:cd:42:da:81:aa:44:
f4:b4:e1:18:9f:b3:dc:f5:7b:13:a4:f7:21:00:d8:
66:bc:fd:da:bc:fa:5d:a4:33:50:8b:98:c1:d6:53:
75:4d:72:8b:7d:16:23:cd:0f:8c:47:eb:cf:d7:ed:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:16:BA:4A:22:97:57:3A:E1:DD:51:D2:05:E2:4A:27:79:BA:07:81
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2d:f8:de:75:af:ad:ff:38:6c:be:3c:07:a2:cd:e2:a9:64:
41:36:c9:45:32:d1:c4:42:5e:91:46:d1:8a:fe:28:d8:85:c3:
35:8d:55:bd:ec:18:69:d9:4f:b6:5b:1b:49:19:a4:b7:e9:5e:
d4:ee:f2:16:1a:c8:50:68:f0:66:ee:d5:9b:00:8b:53:50:f0:
cb:eb:d1:d0:f9:89:18:31:d4:90:de:d4:e3:ab:67:03:2f:02:
3c:a7:8d:5f:ef:f4:36:ac:fc:89:fd:81:55:e7:da:d1:ee:ff:
dc:37:57:fc:ec:08:5d:bf:95:37:61:72:4a:44:7d:fe:0b:a1:
5f:6c:17:f2:e6:cd:1b:b2:1a:68:d9:24:ab:13:f8:68:c7:36:
e0:a6:2b:38:26:db:ea:01:3e:82:53:8a:25:1e:d6:98:a3:e4:
ed:f5:f4:92:37:d2:35:f8:54:c2:f8:04:0b:68:96:c2:c1:d1:
38:fc:80:b6:63:33:c5:8b:23:9d:40:ad:21:56:f8:a8:e7:c9:
ae:39:ef:f9:1a:11:fe:74:e0:16:de:94:58:35:8b:6d:f4:6c:
f9:e2:4c:24:71:3f:de:5d:48:c6:9a:51:d1:06:9f:7f:50:d6:
63:15:88:d6:81:37:72:02:75:56:3a:c9:0a:a6:2e:41:31:ad:
9d:f1:c9:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LgWUOZyEWRa86rhpQR4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh
YTU5YzcwHhcNMjYwMzI5MDYwMDMzWhcNMjYwMzMwMDYwMDMzWjAzMTEwLwYDVQQD
EyhiNDE2YmE0YTIyOTc1NzNhZTFkZDUxZDIwNWUyNGEyNzc5YmEwNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tiHPTsOus6WVSZtF2BOwp8K66oy
fWQQGLymPiag0ZIzy0MZzEQGX8WUq4CGBpCjG5+seAditJbGRhtV4PasDEGQdhPK
Y3iHpdVx0x79cjCs9+BvuP5rNIFHXfhiLf1je5YcETek7Hq8w65bnlvelsyJM2H4
NLZlulWrFEFmIC1W0Argi7WrguOP81JnxbUpPOFnVA/iD2tcDsLCyCUTr22Wu2rX
IwVSHqx8tQnMG009pW+Q+MuuRO2l+MPV8QOlCXwZOuwI8BzMpwDNQtqBqkT0tOEY
n7Pc9XsTpPchANhmvP3avPpdpDNQi5jB1lN1TXKLfRYjzQ+MR+vP1+1r0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQWukoil1c64d1R0gXiSid5ugeBMB8GA1UdIwQY
MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt
MGRlZDA2ZTQwYTc1LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1
LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbS343nWv
rf84bL48B6LN4qlkQTbJRTLRxEJekUbRiv4o2IXDNY1VvewYadlPtlsbSRmkt+le
1O7yFhrIUGjwZu7VmwCLU1Dwy+vR0PmJGDHUkN7U46tnAy8CPKeNX+/0Nqz8if2B
Vefa0e7/3DdX/OwIXb+VN2FySkR9/guhX2wX8ubNG7IaaNkkqxP4aMc24KYrOCbb
6gE+glOKJR7WmKPk7fX0kjfSNfhUwvgEC2iWwsHROPyAtmMzxYsjnUCtIVb4qOfJ
rjnv+RoR/nTgFt6UWDWLbfRs+eJMJHE/3l1IxppR0Qaff1DWYxWI1oE3cgJ1VjrJ
CqYuQTGtnfHJUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:07 2026 by rpki-client