
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: 8PgnBMsKGQUir9pHxWsfQJVI8EU6k1zWN+xcWte1W8s=
Subject key identifier: 32:61:06:8E:39:D7:4D:0C:69:C0:F4:6A:F1:99:0E:D0:A1:86:20:D3
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 01A0BEB0B2FA257D1A9FCD274DA4A26CA778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 193D
Signing time: Sun 20 Sep 2026 12:00:46 +0000
Manifest this update: Sun 20 Sep 2026 12:00:46 +0000
Manifest next update: Mon 21 Sep 2026 12:00:46 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: eb7CmU++gi58aNtW4P869npUS8+SuSBmHtoxCQQxx9Q=)
2: E5AdQLULTFPqJUlYObxVI6_1WfA.roa (hash: mxZ1AnAnqb7JN49e/B8I8tpnf+4p9JvJ06z2WEs5jMA=)
3: I1JpGCaCnd74s6YyFhtsQo4ffys.asa (hash: 8s5VDkoq2eGGIU5mP2xC+brcRoLXH1bqb0SZr2FGNMI=)
4: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
5: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:b2:fa:25:7d:1a:9f:cd:27:4d:a4:a2:6c:a7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Sep 20 12:00:46 2026 GMT
Not After : Sep 21 12:00:46 2026 GMT
Subject: CN=3261068e39d74d0c69c0f46af1990ed0a18620d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:48:7c:6b:30:14:49:b2:8b:8c:fd:f5:c3:
57:fd:c6:d0:e6:48:e4:12:3c:0b:63:3f:11:df:dd:
e4:61:fc:3e:82:f2:d0:33:48:fa:1c:ea:e7:62:a5:
c5:d8:b3:90:5f:2d:46:ae:95:83:ec:e6:87:17:97:
af:86:57:51:07:13:50:61:49:06:c1:73:15:4e:16:
d5:1d:ab:32:77:52:5c:eb:e7:f4:6d:6c:22:65:fa:
95:ce:89:5d:41:57:2e:51:9d:aa:56:7e:dd:10:5d:
89:d5:6f:dd:4e:3f:3c:86:0b:98:0d:c5:26:58:e5:
61:5f:a8:84:db:0c:16:7a:fe:e6:61:de:07:b3:e3:
5c:e1:e7:69:c1:4e:68:4a:29:d1:98:60:4f:38:fc:
ad:41:6e:b6:c7:db:1a:98:1b:4c:ec:9e:4b:cd:6d:
0f:40:72:dc:a9:d3:7c:b7:2d:d5:d3:03:f7:29:f8:
6d:4c:76:ed:37:b9:f0:2d:b3:53:45:57:4a:25:91:
b9:55:7e:2e:e4:2f:77:64:c5:a3:ca:b1:c8:e5:60:
50:1f:3a:27:27:f9:ca:57:79:60:b6:fd:d3:ab:84:
73:e2:c6:e5:97:ae:2f:be:d5:5c:23:83:b3:c6:a7:
8a:ed:81:e7:86:d5:67:8a:14:b2:4b:a0:78:05:4a:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:61:06:8E:39:D7:4D:0C:69:C0:F4:6A:F1:99:0E:D0:A1:86:20:D3
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c0:26:eb:65:83:e9:72:40:aa:90:58:17:0b:1e:09:99:07:
f8:d6:76:ae:a3:8f:ab:e3:35:bc:22:74:72:d3:14:4f:59:60:
e7:43:a4:1a:05:54:da:6b:fa:cc:2a:19:18:c2:be:03:8e:49:
3d:d0:1b:93:75:3d:db:a5:be:16:f5:85:3d:73:4c:88:3a:a4:
cf:f4:b4:d4:cf:ca:27:c0:da:ca:5d:6c:69:30:c4:26:64:3e:
ed:e4:b5:36:00:20:be:ed:9e:0a:73:1f:4d:b9:ef:85:a2:fe:
56:06:e5:1c:34:b9:e3:40:2a:31:b9:8e:75:88:f3:08:b0:1b:
6b:b3:d5:7d:d8:ff:b0:5a:9f:b9:ce:c0:4b:f0:a1:26:e8:f0:
b0:40:d0:47:d8:c5:f0:8e:b3:70:69:e0:5a:ac:3d:1e:27:c1:
2f:59:77:3c:28:b8:1d:d6:72:a4:54:d2:6a:d7:2f:fa:0d:28:
63:11:c5:e2:b9:5d:8f:25:c0:69:8d:12:90:a2:2e:ec:f6:2d:
7f:63:c4:68:8d:bc:dc:b8:bb:cc:74:85:b0:93:72:ec:d7:ea:
f8:c1:b6:1b:47:18:a3:d8:d8:62:3f:ec:c4:fd:53:01:be:0e:
c0:05:59:15:6e:93:6d:da:79:83:b9:8a:9b:4e:8c:16:aa:8e:
4a:fe:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:53:27 2026 by rpki-client