Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier: OvaTUPPntiwzRtejmQCiBpLoFR50dyZ52cc8SYFfWtA=
Subject key identifier: 26:B0:CE:36:82:2C:B4:50:DC:DB:17:A9:A6:4E:3C:9E:7F:31:28:30
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 01A1C5FA8D38B77B5476F28855A08F471F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number: 12CD
Signing time: Tue 10 Nov 2026 15:01:34 +0000
Manifest this update: Tue 10 Nov 2026 15:01:34 +0000
Manifest next update: Wed 11 Nov 2026 15:01:34 +0000
Files and hashes: 1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: SWQl62L21m7SXvIGY5UTrIOd7gPOZr1R3p4452oZo0c=)
2: wm1lXzHcJX95NHj9ois5gkctOoQ.roa (hash: fWjCquBSQ6//3hLKFz3ks7PPTJDwsXZsgsh+NNqW3Mc=)
3: wzoQWaU78B1JYcVEw1aU_m666Qg.roa (hash: YXxlzjY6ITzVnS2guD8G2HgvMXrNu1UDUO++sIfSdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:fa:8d:38:b7:7b:54:76:f2:88:55:a0:8f:47:1f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Nov 10 15:01:34 2026 GMT
Not After : Nov 11 15:01:34 2026 GMT
Subject: CN=26b0ce36822cb450dcdb17a9a64e3c9e7f312830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:3b:37:9b:a8:80:22:c1:22:c0:84:8d:cb:
7f:7e:c1:f9:69:69:19:f5:3c:a8:94:bc:0d:c9:b9:
cd:f6:be:29:64:d7:ca:64:6c:d8:5c:51:87:87:45:
b0:92:22:ec:66:a0:fa:21:b4:f5:84:9a:10:db:0a:
8b:43:19:03:23:6c:58:76:4c:53:53:7b:1b:7a:55:
23:94:eb:ba:4c:ca:9b:95:79:7a:c3:f9:22:84:b5:
d0:90:da:46:01:ac:1b:23:8d:b5:22:d4:09:c6:b2:
29:02:f7:0e:ca:0c:41:0c:7c:77:78:7d:18:43:ad:
bf:1f:e5:d4:43:92:a5:bd:63:8a:14:fc:43:d1:5d:
a5:d5:ca:a4:ca:2f:70:31:03:fb:f4:fc:d8:66:9a:
a2:9b:ad:b6:4f:6f:52:40:73:39:dc:fd:ad:83:52:
6d:f4:c7:a2:e9:49:dc:9f:62:72:7d:0e:c2:b0:4d:
6d:b2:5f:ff:eb:47:e5:6c:7c:28:e5:ed:ec:2e:1d:
8c:55:2d:00:38:c0:e9:5e:85:3a:f4:9d:ab:c1:65:
21:db:61:5c:af:80:36:f8:dc:38:77:92:40:c2:77:
7c:47:04:cf:46:91:b9:dc:18:24:b6:98:82:15:e0:
68:17:fa:45:19:65:50:bc:e3:d8:ea:d3:7d:76:1b:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:CE:36:82:2C:B4:50:DC:DB:17:A9:A6:4E:3C:9E:7F:31:28:30
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:47:59:7b:70:2a:15:2c:8c:97:86:43:fb:f1:ea:fe:23:85:
01:25:21:11:b8:46:db:c6:54:00:60:03:6a:df:d0:7b:0b:ab:
9c:ae:a8:92:10:32:af:01:b3:50:d0:19:18:c5:f4:d1:df:da:
1e:d6:8d:4b:90:92:5d:b8:ae:55:a0:49:04:0c:0f:0c:5b:bd:
db:21:2b:68:95:30:59:14:1b:82:d2:ee:b9:23:2a:cb:55:21:
4d:f4:87:8f:e6:c2:69:cd:68:60:05:bc:5f:9b:06:b0:cf:e2:
8f:34:db:3b:1c:70:f6:ae:d3:bb:9b:2c:9b:9d:11:42:eb:38:
69:23:ee:f2:62:51:e9:91:5a:ca:cb:54:eb:41:5e:82:e1:b0:
f8:5a:19:36:e3:e8:56:13:ee:f9:db:19:45:69:8e:06:a8:0e:
16:99:53:ca:fb:47:e8:38:d4:ef:c3:0e:64:f7:8e:5c:88:17:
3e:d6:de:22:22:74:0d:63:78:64:0e:ab:18:77:9b:c5:ed:2e:
fd:38:d8:a9:8b:95:1e:a6:da:ab:1c:ce:d9:f2:74:9f:19:2b:
b1:72:0c:d7:0c:32:d4:d2:af:b3:cf:0b:03:36:14:ee:fd:fc:
9d:e5:cb:99:93:27:6c:29:c9:65:09:88:6e:31:b4:7b:b3:8f:
cc:9a:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:14:49 2026 by rpki-client