Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
File: 0CIVj9T34wlqA33Dz6vY807qq9E.mft (raw, json)
Hash identifier: NWcCB5Q0AoghhnmhIx8Apd7Sxwq/MhDYS91RR47ZkMA=
Subject key identifier: 38:4C:0F:83:EE:55:92:10:25:FB:70:63:F6:F0:BF:E0:0A:54:1C:20
Authority key identifier: D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
Certificate issuer: /CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Certificate serial: 01A17A043DF2D7F49A2C82CF08FA08759539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:01:00 +0000
Manifest this update: Mon 26 Oct 2026 21:01:00 +0000
Manifest next update: Tue 27 Oct 2026 21:01:00 +0000
Files and hashes: 1: 0CIVj9T34wlqA33Dz6vY807qq9E.crl (hash: CO/h+eMvWRq/j0CWZe/D/HX7g14KgkKXEMgCo/SEZIY=)
2: Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa (hash: xvKgGhY+ZlcBTXkjAQHJhU0l6IZYcdXuey6wO6lkMfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:3d:f2:d7:f4:9a:2c:82:cf:08:fa:08:75:95:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Validity
Not Before: Oct 26 21:01:00 2026 GMT
Not After : Oct 27 21:01:00 2026 GMT
Subject: CN=384c0f83ee55921025fb7063f6f0bfe00a541c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:4c:47:0a:0d:a3:9b:f9:20:5d:09:1f:df:
0a:bd:b5:fc:4c:64:d3:1b:0e:ca:29:0a:27:6f:01:
88:a6:8f:6e:2a:2a:16:7e:3c:c4:a5:f5:b2:57:c8:
a3:0a:e5:51:71:ec:4b:c4:be:0a:b9:7d:2c:76:45:
17:90:83:fc:5b:b4:29:bc:51:b8:52:e1:0e:07:8f:
c8:8f:64:e3:d4:e4:90:d0:b5:30:41:15:e0:4b:17:
20:4d:c8:61:fd:33:30:f6:ae:a8:aa:2a:f3:f4:6c:
ce:8f:9b:71:45:ca:68:b6:1c:08:31:2f:e7:4c:10:
14:76:69:51:57:55:3f:2b:84:64:c4:28:e9:2e:a3:
b6:13:66:41:96:cf:8d:88:e2:fb:f7:d5:ef:ee:14:
90:7b:e7:59:26:50:5b:9f:da:a5:9f:7f:b0:35:89:
35:a6:06:a8:79:14:79:0c:3f:03:c5:5b:38:af:69:
55:91:25:ad:e1:73:82:ec:ea:48:e2:de:df:e5:f1:
90:7e:99:c7:8f:0f:6e:90:b3:5e:58:2b:62:03:a9:
c2:c4:6d:3f:19:33:a2:0b:52:00:50:b8:94:e3:85:
a7:ce:ef:77:1a:ca:c5:dd:42:49:e0:51:b4:60:7f:
41:8f:c6:8a:5f:33:b2:c4:e3:43:a1:9f:f7:98:63:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:0F:83:EE:55:92:10:25:FB:70:63:F6:F0:BF:E0:0A:54:1C:20
X509v3 Authority Key Identifier:
keyid:D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:96:cf:ad:c9:d5:22:86:24:7c:8a:33:73:f2:0f:6d:53:02:
0f:41:98:37:22:8e:8e:b0:6f:23:4b:45:9a:3b:ca:bc:e5:1b:
7c:a9:0b:46:eb:97:8d:0d:9b:76:bd:c4:22:ca:b0:de:d0:cb:
75:a7:37:7f:af:a8:a3:21:c0:07:22:4c:a0:ff:80:c0:19:e7:
3f:87:1a:01:2e:f9:45:34:37:1b:f3:0a:cf:67:83:9b:85:5b:
4f:d0:0f:73:53:f7:b7:c5:20:dd:f0:74:b0:d4:6a:97:bf:66:
8c:2c:db:d7:40:07:ae:ad:f2:b1:d9:6e:4d:f3:db:93:f3:01:
4d:ac:5c:6b:39:cc:40:f2:90:b2:b0:e4:71:33:73:6b:b3:f8:
da:d1:c8:9f:10:64:a6:75:da:11:09:49:9d:42:3b:d0:f3:4e:
4e:c0:7f:5a:31:c5:b7:7e:c6:bc:a0:cf:b6:4d:f4:1a:3f:47:
dd:57:df:20:e3:95:8c:19:f0:46:3e:e1:59:7a:3b:dd:1d:da:
d2:19:37:ef:68:9e:fb:71:54:d9:0c:24:a2:fa:5c:08:3f:ad:
5a:72:5e:a4:f0:11:e0:97:97:79:d6:0d:f4:87:b6:2c:10:b9:
33:d9:70:e1:eb:d1:8c:fe:42:88:9a:f6:ba:d6:d0:8f:73:4e:
e3:f1:01:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6BD3y1/SaLILPCPoIdZU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjIxNThmZDRmN2UzMDk2YTAzN2RjM2NmYWJkOGYzNGVl
YWFiZDEwHhcNMjYxMDI2MjEwMTAwWhcNMjYxMDI3MjEwMTAwWjAzMTEwLwYDVQQD
EygzODRjMGY4M2VlNTU5MjEwMjVmYjcwNjNmNmYwYmZlMDBhNTQxYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lpMRwoNo5v5IF0JH98KvbX8TGTT
Gw7KKQonbwGIpo9uKioWfjzEpfWyV8ijCuVRcexLxL4KuX0sdkUXkIP8W7QpvFG4
UuEOB4/Ij2Tj1OSQ0LUwQRXgSxcgTchh/TMw9q6oqirz9GzOj5txRcpothwIMS/n
TBAUdmlRV1U/K4RkxCjpLqO2E2ZBls+NiOL799Xv7hSQe+dZJlBbn9qln3+wNYk1
pgaoeRR5DD8DxVs4r2lVkSWt4XOC7OpI4t7f5fGQfpnHjw9ukLNeWCtiA6nCxG0/
GTOiC1IAULiU44Wnzu93GsrF3UJJ4FG0YH9Bj8aKXzOyxONDoZ/3mGPr0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhMD4PuVZIQJftwY/bwv+AKVBwgMB8GA1UdIwQY
MBaAFNAiFY/U9+MJagN9w8+r2PNO6qvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt
OTU1YWQ3OGJjYjA3LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3
LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJbPrcnV
IoYkfIozc/IPbVMCD0GYNyKOjrBvI0tFmjvKvOUbfKkLRuuXjQ2bdr3EIsqw3tDL
dac3f6+ooyHAByJMoP+AwBnnP4caAS75RTQ3G/MKz2eDm4VbT9APc1P3t8Ug3fB0
sNRql79mjCzb10AHrq3ysdluTfPbk/MBTaxcaznMQPKQsrDkcTNza7P42tHInxBk
pnXaEQlJnUI70PNOTsB/WjHFt37GvKDPtk30Gj9H3VffIOOVjBnwRj7hWXo73R3a
0hk372ie+3FU2QwkovpcCD+tWnJepPAR4JeXedYN9Ie2LBC5M9lw4evRjP5CiJr2
utbQj3NO4/EBdA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:01 2026 by rpki-client