Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
File: 0CIVj9T34wlqA33Dz6vY807qq9E.mft (raw, json)
Hash identifier: yjw5PYR3XGTv6hNIaTQwkEaN7UwVtpVtztUUV697ACQ=
Subject key identifier: D6:AD:07:43:15:A2:A6:44:68:28:6B:A2:8B:22:A1:44:E1:AB:9D:0C
Authority key identifier: D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
Certificate issuer: /CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Certificate serial: 01A06F8355337404B9F1CBEC08BFD8269CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:01:13 +0000
Manifest this update: Sat 05 Sep 2026 03:01:13 +0000
Manifest next update: Sun 06 Sep 2026 03:01:13 +0000
Files and hashes: 1: 0CIVj9T34wlqA33Dz6vY807qq9E.crl (hash: g0+tIbp67t6izIoVjvBjCWOmJPPymeaNqk233DA8s+Y=)
2: Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa (hash: xvKgGhY+ZlcBTXkjAQHJhU0l6IZYcdXuey6wO6lkMfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:55:33:74:04:b9:f1:cb:ec:08:bf:d8:26:9c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Validity
Not Before: Sep 5 03:01:13 2026 GMT
Not After : Sep 6 03:01:13 2026 GMT
Subject: CN=d6ad074315a2a64468286ba28b22a144e1ab9d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:ef:1d:63:f9:ef:db:49:fc:f5:77:1e:e6:
a7:11:c2:96:f0:26:2b:90:e0:bb:5f:f4:6b:12:ad:
c0:3b:b5:9c:dd:d8:ee:ce:db:62:e4:4a:c6:74:ae:
d6:68:87:6f:52:1e:8e:7c:34:8b:23:a5:27:9c:6b:
48:32:da:cd:cf:c3:fd:b0:5a:0c:26:18:37:a2:16:
74:6e:9c:80:d5:55:11:b9:2a:8c:ae:e6:2c:f0:d2:
60:68:b2:87:16:b6:d7:03:9d:38:5a:a8:b0:22:e2:
27:00:c5:08:12:a0:2d:36:43:f2:e6:b5:5b:cf:12:
18:21:6e:70:df:97:0d:4a:6c:ae:11:1a:7e:2c:b3:
28:37:6b:3e:ae:e3:51:0f:e5:85:28:20:2b:cb:cb:
50:06:98:5e:cb:47:5e:80:38:e8:95:b2:a8:ed:8c:
8e:47:58:51:31:04:1e:83:c4:89:b2:a4:bb:0f:71:
99:f2:8e:ec:ab:aa:64:1f:32:b7:5f:55:41:81:35:
86:da:57:d3:30:4e:de:70:ff:d0:06:49:82:44:d3:
29:d1:3b:33:48:7c:65:7d:b9:3c:f8:12:3c:41:f8:
60:c5:0f:76:ed:cf:c3:b5:4a:9f:b8:de:d1:cd:c1:
dc:4d:e9:16:88:c5:f3:67:30:43:5d:5f:e9:f9:64:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AD:07:43:15:A2:A6:44:68:28:6B:A2:8B:22:A1:44:E1:AB:9D:0C
X509v3 Authority Key Identifier:
keyid:D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:56:08:f0:44:ca:df:fa:19:d3:a6:ef:2a:30:51:b2:77:89:
43:fc:ec:7f:14:7e:49:49:bf:32:76:6c:b1:6a:31:59:6c:30:
1b:b5:dd:bf:5b:78:b5:ef:d4:ef:69:e5:76:a5:19:88:4e:bd:
49:b0:3a:c5:30:95:57:9c:59:00:47:aa:e7:26:17:fb:1a:d4:
c0:56:ef:5c:fb:d3:e1:75:71:26:e6:91:0e:2c:4d:b8:db:24:
6a:89:7a:e7:91:f5:92:cf:46:6f:18:21:c6:74:2b:37:86:a3:
6c:6a:02:58:82:92:0b:8b:9f:6c:d3:c4:01:34:95:da:ac:a4:
d7:59:f3:23:a5:ec:29:83:5e:a2:49:1f:7f:03:77:9e:cf:8f:
d5:e5:80:68:01:2c:1b:8b:02:2a:09:b7:b3:e3:02:37:01:ea:
ae:74:6c:33:ff:7e:33:5b:ee:af:bc:4c:82:a9:f9:79:ca:e1:
1e:21:e0:88:11:7d:12:35:e0:32:ba:6e:da:db:da:a8:ef:1c:
a2:7d:e9:50:80:31:71:3e:bb:7c:16:b3:e2:59:36:bb:28:a8:
8a:41:5d:83:3e:e9:40:37:a6:33:d5:a6:54:91:ff:cc:f5:3f:
96:b8:04:25:01:6c:6d:55:17:76:6b:dd:d1:6f:cf:dd:cb:db:
78:15:6e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvg1UzdAS58cvsCL/YJpzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjIxNThmZDRmN2UzMDk2YTAzN2RjM2NmYWJkOGYzNGVl
YWFiZDEwHhcNMjYwOTA1MDMwMTEzWhcNMjYwOTA2MDMwMTEzWjAzMTEwLwYDVQQD
EyhkNmFkMDc0MzE1YTJhNjQ0NjgyODZiYTI4YjIyYTE0NGUxYWI5ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzTvHWP579tJ/PV3HuanEcKW8CYr
kOC7X/RrEq3AO7Wc3djuztti5ErGdK7WaIdvUh6OfDSLI6UnnGtIMtrNz8P9sFoM
Jhg3ohZ0bpyA1VURuSqMruYs8NJgaLKHFrbXA504WqiwIuInAMUIEqAtNkPy5rVb
zxIYIW5w35cNSmyuERp+LLMoN2s+ruNRD+WFKCAry8tQBphey0degDjolbKo7YyO
R1hRMQQeg8SJsqS7D3GZ8o7sq6pkHzK3X1VBgTWG2lfTME7ecP/QBkmCRNMp0Tsz
SHxlfbk8+BI8QfhgxQ927c/DtUqfuN7RzcHcTekWiMXzZzBDXV/p+WTi3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNatB0MVoqZEaChroosioUThq50MMB8GA1UdIwQY
MBaAFNAiFY/U9+MJagN9w8+r2PNO6qvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt
OTU1YWQ3OGJjYjA3LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3
LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglYI8ETK
3/oZ06bvKjBRsneJQ/zsfxR+SUm/MnZssWoxWWwwG7Xdv1t4te/U72nldqUZiE69
SbA6xTCVV5xZAEeq5yYX+xrUwFbvXPvT4XVxJuaRDixNuNskaol655H1ks9Gbxgh
xnQrN4ajbGoCWIKSC4ufbNPEATSV2qyk11nzI6XsKYNeokkffwN3ns+P1eWAaAEs
G4sCKgm3s+MCNwHqrnRsM/9+M1vur7xMgqn5ecrhHiHgiBF9EjXgMrpu2tvaqO8c
on3pUIAxcT67fBaz4lk2uyioikFdgz7pQDemM9WmVJH/zPU/lrgEJQFsbVUXdmvd
0W/P3cvbeBVuAQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:23 2026 by rpki-client