Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: r1VgxdAyVisUB1Iu8JjL/VVkPfQD6EDpfobsNMIOQDA=
Subject key identifier: DA:34:78:18:AF:64:E3:37:1E:71:28:51:49:79:89:CC:95:2B:D0:BB
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 01A0C63355CB9FF4BD73B6641F0180B46AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 0A5D
Signing time: Mon 21 Sep 2026 23:00:48 +0000
Manifest this update: Mon 21 Sep 2026 23:00:48 +0000
Manifest next update: Tue 22 Sep 2026 23:00:48 +0000
Files and hashes: 1: BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa (hash: DcW4cVxJuDUK3IKLW2cbHxN+qa5e/QUPCI24FuVBujI=)
2: NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa (hash: nHBSYWCWMkjsq8eIHvyxI7K4o3nKXMreU+r6LsPFSas=)
3: f-WzYrTcVspbvV27XUH8n69DSig.roa (hash: dPXvzRcp3N5snJFT4/YTmjC8NO5nN1yqw4UaUWODI/0=)
4: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: /TcL+sz1sfhREJkNX9BBjJI01092LsAF6ztYiz7Pqyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:55:cb:9f:f4:bd:73:b6:64:1f:01:80:b4:6a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Sep 21 23:00:48 2026 GMT
Not After : Sep 22 23:00:48 2026 GMT
Subject: CN=da347818af64e3371e712851497989cc952bd0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:ea:01:62:93:aa:dd:df:31:bb:32:ea:8f:
ae:2d:a3:72:0c:9f:ec:7f:10:3b:c4:f1:e8:e3:44:
73:fa:24:6c:86:c9:06:ff:b4:39:59:f1:fd:08:e3:
d7:8a:43:6d:1b:be:ee:d0:ca:14:51:1b:b1:ad:d7:
3e:e3:2b:6d:91:c5:74:6b:a6:9f:f1:63:7f:2c:59:
2f:1d:01:c5:7b:d9:c3:fd:a7:d6:aa:eb:b7:7f:4a:
ca:aa:ab:be:6c:5c:1a:24:6a:27:15:83:32:fa:29:
a2:38:89:76:f5:94:b6:62:04:d3:d3:2b:64:44:9d:
79:30:b1:d7:97:17:9c:e8:cb:cd:5f:21:25:30:d7:
b9:12:8f:6e:3a:8d:ef:89:1f:50:c6:c9:02:d0:94:
d3:ca:be:37:fa:d1:64:14:18:0e:6c:54:df:95:a6:
2c:16:50:a6:ee:b5:ae:b0:84:2d:f4:91:6c:11:f5:
f1:71:3e:38:7d:57:61:87:c3:12:36:e9:14:1d:76:
e9:f8:a7:9f:c9:9b:5f:9e:af:fd:6a:31:11:99:04:
01:2f:ce:df:05:54:82:65:c7:51:d6:3a:cb:13:7d:
1c:ca:1f:5a:ed:8e:d2:44:f5:32:98:2c:c3:0d:7b:
63:d1:5b:a2:7f:ac:08:80:04:ff:ad:e5:d5:3b:17:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:34:78:18:AF:64:E3:37:1E:71:28:51:49:79:89:CC:95:2B:D0:BB
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0f:b9:b0:86:a8:2c:ea:65:84:a2:85:78:45:30:44:49:dd:
ad:07:43:3e:97:4e:df:ba:d0:dd:9d:19:5a:5a:ab:91:37:93:
4f:61:a3:3c:99:ee:23:28:51:0f:24:cc:ba:29:46:60:2c:e1:
9e:2f:b0:54:bb:ce:9d:1d:a7:16:ea:6a:25:71:71:ed:67:89:
c2:f2:0b:05:3b:f2:50:be:84:cf:fc:84:ff:0b:96:88:3d:b0:
54:09:a3:e0:90:32:2a:43:e1:9b:97:1c:9f:09:2d:bb:59:e4:
1f:b7:f7:94:eb:42:ee:b4:43:ee:0b:2f:03:93:ea:7c:af:7e:
9f:c9:9b:80:62:11:67:9b:a2:ea:b3:28:3e:c7:7b:10:23:ce:
8f:46:74:98:a0:d3:07:0a:fd:ec:66:c7:d6:d5:de:44:4e:18:
0a:98:95:63:9d:19:aa:d8:6d:a4:03:5e:a9:13:89:b9:de:20:
ab:63:87:95:be:ce:1a:3a:d2:5d:40:2a:60:8a:32:3a:5d:4f:
16:20:47:80:73:2c:a3:31:9e:79:fa:27:ba:a9:f5:23:bd:f2:
55:b7:3c:62:32:2a:22:27:73:b2:26:86:8f:a6:14:4b:8b:2e:
2d:3c:56:2d:00:33:3c:59:f4:41:bd:35:ed:b3:49:fb:1c:74:
a9:7c:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:31:07 2026 by rpki-client