Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: lb68WAF0MaO5nw1OlGs9n+fc9CucDhlQ7nAJ32fe7iU=
Subject key identifier: FB:CF:52:24:98:0D:C1:1B:45:70:5D:27:88:E7:BA:6F:C5:E6:89:51
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 01A1DE70A6F50AFC10CC18A628F1E2601C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 19D2
Signing time: Sun 15 Nov 2026 09:01:27 +0000
Manifest this update: Sun 15 Nov 2026 09:01:27 +0000
Manifest next update: Mon 16 Nov 2026 09:01:27 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: PP9vDre8NAe/EaGHPgb2j3Cil+6EkGx1tECe7QyJDqw=)
2: E5AdQLULTFPqJUlYObxVI6_1WfA.roa (hash: mxZ1AnAnqb7JN49e/B8I8tpnf+4p9JvJ06z2WEs5jMA=)
3: I1JpGCaCnd74s6YyFhtsQo4ffys.asa (hash: 8s5VDkoq2eGGIU5mP2xC+brcRoLXH1bqb0SZr2FGNMI=)
4: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
5: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:a6:f5:0a:fc:10:cc:18:a6:28:f1:e2:60:1c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Nov 15 09:01:27 2026 GMT
Not After : Nov 16 09:01:27 2026 GMT
Subject: CN=fbcf5224980dc11b45705d2788e7ba6fc5e68951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:30:12:47:91:8a:0c:f1:86:cd:d1:30:1e:
e1:85:81:24:ac:3d:55:08:21:90:7a:20:aa:f6:df:
d6:25:33:84:d6:15:f9:60:d9:0a:2e:57:df:f5:44:
fd:ba:0e:10:93:c8:3a:cc:bf:0d:e1:b1:52:b8:33:
7e:fc:c5:ef:c8:0f:48:cf:e0:f4:54:a7:99:39:61:
cc:2d:5d:70:f8:0b:1b:35:2c:2b:e9:83:86:d7:00:
41:ff:05:4e:32:fb:72:5e:0c:fd:1e:35:61:c8:f0:
f3:82:8e:83:7e:29:fe:25:a5:e8:2a:ec:7d:a6:0f:
ad:28:de:99:14:a0:3b:11:63:10:ff:d0:5b:19:7a:
b7:07:03:90:fc:61:ca:16:8a:be:16:9e:e6:97:46:
63:e3:10:97:88:39:e8:75:0f:85:7f:f7:16:4d:80:
dd:f7:e9:98:dc:69:86:e2:6f:0b:a9:2a:5a:dc:3d:
ce:0d:03:00:58:68:e0:7e:44:c5:86:b8:69:50:de:
89:ef:07:32:7a:f6:9d:77:a4:92:75:3b:d8:58:40:
83:b9:02:09:04:5c:51:22:9a:b6:ff:c0:bf:4d:35:
ad:05:ab:5b:aa:86:6e:f0:45:64:5e:2f:f0:a1:24:
b0:c9:e5:a4:1e:5a:7b:23:fd:fd:a3:7c:67:0c:18:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:52:24:98:0D:C1:1B:45:70:5D:27:88:E7:BA:6F:C5:E6:89:51
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9a:fe:75:58:19:f9:80:44:52:cb:40:dc:bd:7a:08:1a:03:
e7:3b:0c:f2:d8:ac:8f:f2:22:29:aa:7b:af:c7:04:43:3c:8c:
f2:5c:1c:29:5e:54:40:5c:17:25:d8:6f:df:24:aa:f2:ea:28:
4b:44:d0:3c:95:0a:a4:2a:f3:67:38:76:46:d5:92:f2:46:51:
60:72:6f:bd:f3:0c:4c:64:77:3c:6b:62:7a:17:86:17:7c:df:
64:2b:43:2d:58:f2:e8:33:c0:dc:70:ee:2c:11:97:4f:2a:ab:
cf:a6:57:0c:57:12:0d:a1:77:7d:1d:d6:c8:21:14:57:ad:8a:
9a:05:59:98:45:dc:a1:b5:ec:09:19:cb:ba:d9:b9:c9:47:82:
f7:63:bd:5c:eb:47:cd:1e:29:83:81:01:d6:18:3c:46:15:64:
47:b5:79:bf:46:b7:22:7a:9a:90:ad:5c:c9:c6:43:c8:79:73:
2d:f4:67:48:b5:48:95:d9:39:69:5f:79:33:ed:c5:ca:4d:d8:
43:ab:c0:d2:bb:a4:92:ce:ca:b4:ef:f6:74:a1:ca:08:6a:9b:
40:1b:90:c6:6b:29:98:1f:0b:79:20:ba:9e:75:13:11:0d:54:
f8:40:05:6c:51:f3:2b:66:53:a9:9d:44:5e:34:0c:cb:ca:e6:
9d:1f:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:34:22 2026 by rpki-client