Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
File: 0tiRsOMo58hWrUt6B2TYLYVgltY.mft (raw, json)
Hash identifier: M5YnjJkrk05AUQoTvl6uP2EIaxXEZWxCw7HpQTYtZBQ=
Subject key identifier: C0:A1:DB:8E:29:93:2A:C8:CB:F2:D5:9B:CF:89:89:85:D6:0F:A1:54
Authority key identifier: D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
Certificate issuer: /CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Certificate serial: 01A0C369BF114BB20A9A8030A6A80AFC4E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
Manifest number: 06B8
Signing time: Mon 21 Sep 2026 10:01:22 +0000
Manifest this update: Mon 21 Sep 2026 10:01:22 +0000
Manifest next update: Tue 22 Sep 2026 10:01:22 +0000
Files and hashes: 1: 0tiRsOMo58hWrUt6B2TYLYVgltY.crl (hash: T7BlSj7uLetioWGWmvZmcHK823dOnGye97wYhclyInU=)
2: UCdWTcnF4ZVDrSnBvN43rU1Zk3A.roa (hash: Qw45xlTVvhAH55/GToKQCdfRTF8PLXCZ9h0uBYEUVtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:bf:11:4b:b2:0a:9a:80:30:a6:a8:0a:fc:4e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Validity
Not Before: Sep 21 10:01:22 2026 GMT
Not After : Sep 22 10:01:22 2026 GMT
Subject: CN=c0a1db8e29932ac8cbf2d59bcf898985d60fa154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:cd:d1:c1:3b:c5:ed:52:9d:f3:0c:fe:eb:
21:45:50:c9:2e:ca:72:5d:07:b6:ff:c0:5f:03:fa:
25:03:32:be:2f:9a:0b:6c:c2:1d:40:5d:9c:f7:b1:
26:82:3b:e6:de:93:56:67:9d:b4:2f:3a:91:d2:bc:
39:a1:d5:2b:29:51:ff:85:a7:ea:0c:23:bf:d7:29:
d4:98:8d:b1:c5:74:84:82:88:18:90:c6:98:55:8a:
4d:81:c5:a0:bd:44:4b:2e:23:fc:d7:ca:b1:eb:a0:
10:61:df:fa:e7:11:47:69:4e:f1:66:08:72:bf:04:
af:70:2e:e9:b8:3f:b1:63:c9:86:11:db:47:4d:bd:
08:a1:f2:09:97:95:fa:23:ef:42:da:17:d9:c0:5f:
62:57:fa:42:68:77:0e:2b:5e:00:23:4c:ee:b8:c5:
5b:cc:65:aa:91:8b:6e:6d:55:3f:5d:71:04:96:f7:
65:88:a0:9b:44:70:b2:02:01:3c:f7:77:4e:ea:a2:
e2:5e:e0:b1:2e:75:62:b8:79:68:63:03:f3:c4:2f:
77:b7:a2:bd:44:60:a8:79:af:53:7d:c9:1a:a8:12:
18:ee:eb:bb:5d:88:6e:b8:6d:70:2f:64:6b:07:e1:
d6:39:52:0f:47:68:b7:ca:00:33:4c:f1:8b:e7:2f:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:DB:8E:29:93:2A:C8:CB:F2:D5:9B:CF:89:89:85:D6:0F:A1:54
X509v3 Authority Key Identifier:
keyid:D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fd:a1:10:49:b9:3f:d5:84:72:6c:fa:21:6c:bb:c0:f9:28:
0a:7f:69:5f:01:f6:61:e4:66:d9:cf:34:95:b8:9c:97:03:49:
e6:43:d8:7d:16:f0:ed:2a:1f:c9:92:e9:ae:aa:6c:e2:ca:e1:
af:8d:8b:ba:56:e2:22:42:e6:fe:5d:16:33:86:71:e5:3b:66:
9d:e3:38:e6:a8:c4:c0:0a:df:64:48:f0:cc:4b:e9:51:0d:9a:
4c:eb:e8:c0:1e:1b:d4:c1:4b:13:a8:d6:7a:79:dd:81:0f:80:
95:d9:d9:2e:80:31:ff:5f:96:5c:0d:cf:5b:47:39:be:0f:a1:
7d:79:fb:9d:a9:ef:1c:b3:87:c5:68:66:91:f4:ac:54:4a:fb:
53:5f:bb:eb:2e:9c:88:d5:11:16:72:0c:4d:b0:f4:46:09:a7:
2a:22:ee:35:85:4d:54:44:26:a6:69:c9:b9:4e:34:ab:6d:7c:
31:6e:17:69:17:8b:03:d0:b9:be:7f:90:43:d9:c7:37:e5:17:
64:c1:2a:1a:5e:5d:33:1d:21:1b:d0:ad:f6:44:04:70:da:0c:
13:6c:07:09:9e:0b:9a:8d:35:f7:2b:0f:70:1b:3c:ef:d8:8e:
c5:5f:29:d1:d0:e1:ab:ea:b3:b6:8e:01:26:e5:be:c8:6d:e3:
b5:8c:61:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDab8RS7IKmoAwpqgK/E54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZDg5MWIwZTMyOGU3Yzg1NmFkNGI3YTA3NjRkODJkODU2
MDk2ZDYwHhcNMjYwOTIxMTAwMTIyWhcNMjYwOTIyMTAwMTIyWjAzMTEwLwYDVQQD
EyhjMGExZGI4ZTI5OTMyYWM4Y2JmMmQ1OWJjZjg5ODk4NWQ2MGZhMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwnN0cE7xe1SnfMM/ushRVDJLspy
XQe2/8BfA/olAzK+L5oLbMIdQF2c97Emgjvm3pNWZ520LzqR0rw5odUrKVH/hafq
DCO/1ynUmI2xxXSEgogYkMaYVYpNgcWgvURLLiP818qx66AQYd/65xFHaU7xZghy
vwSvcC7puD+xY8mGEdtHTb0IofIJl5X6I+9C2hfZwF9iV/pCaHcOK14AI0zuuMVb
zGWqkYtubVU/XXEElvdliKCbRHCyAgE893dO6qLiXuCxLnViuHloYwPzxC93t6K9
RGCoea9TfckaqBIY7uu7XYhuuG1wL2RrB+HWOVIPR2i3ygAzTPGL5y8pMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCh244pkyrIy/LVm8+JiYXWD6FUMB8GA1UdIwQY
MBaAFNLYkbDjKOfIVq1Legdk2C2FYJbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHRpUnNPTW81OGhXclV0NkIyVFlMWVZnbHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZmQ4NWQtMDE1Mi00ZWYyLTllYmYt
MWUyNDBiOTdkMmM0LzEvMHRpUnNPTW81OGhXclV0NkIyVFlMWVZnbHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZmQ4NWQtMDE1Mi00ZWYyLTllYmYtMWUyNDBiOTdkMmM0
LzEvMHRpUnNPTW81OGhXclV0NkIyVFlMWVZnbHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv2hEEm5
P9WEcmz6IWy7wPkoCn9pXwH2YeRm2c80lbiclwNJ5kPYfRbw7SofyZLprqps4srh
r42LulbiIkLm/l0WM4Zx5TtmneM45qjEwArfZEjwzEvpUQ2aTOvowB4b1MFLE6jW
enndgQ+AldnZLoAx/1+WXA3PW0c5vg+hfXn7nanvHLOHxWhmkfSsVEr7U1+76y6c
iNURFnIMTbD0RgmnKiLuNYVNVEQmpmnJuU40q218MW4XaReLA9C5vn+QQ9nHN+UX
ZMEqGl5dMx0hG9Ct9kQEcNoME2wHCZ4Lmo019ysPcBs879iOxV8p0dDhq+qzto4B
JuW+yG3jtYxhkA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:36:20 2026 by rpki-client