Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier: BXaq2IHLzyyY5a8i+W4JRiYMTbcP5XgengbKwevqZr4=
Subject key identifier: 46:34:16:8D:94:32:31:30:01:CA:0E:CD:E3:7A:33:EB:8D:7B:4E:3B
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 01A0C2FB83E72A72DC0D13C8E237B0EB15D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 08:00:58 +0000
Manifest this update: Mon 21 Sep 2026 08:00:58 +0000
Manifest next update: Tue 22 Sep 2026 08:00:58 +0000
Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: tjoK/orp54x6ZnEPL6h1mjMhlTMY78NyqQWSVMnsXcA=)
2: gYB58AsOtwXPnPMNlPV8Y_Ufqsg.roa (hash: WyEGcdxX1fE4gxlSc9tIw2aO8N6fipj9ySbKblEWZfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:83:e7:2a:72:dc:0d:13:c8:e2:37:b0:eb:15:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Sep 21 08:00:58 2026 GMT
Not After : Sep 22 08:00:58 2026 GMT
Subject: CN=4634168d9432313001ca0ecde37a33eb8d7b4e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:0d:33:1c:35:19:09:7d:ed:b5:f2:55:bb:
16:d0:2d:8e:94:d1:a3:ca:e4:7a:3d:c0:35:5c:96:
ae:6b:77:29:83:93:de:3e:2d:7e:41:02:e1:fc:68:
58:8a:56:b0:01:5e:46:75:2d:78:38:c0:db:5d:95:
aa:56:a7:2d:b5:9c:cc:7e:76:5e:e8:f2:83:90:e9:
0f:a7:34:d5:d2:67:fd:94:d4:40:f3:b3:d4:e8:d9:
a8:89:55:d0:fa:21:c6:5e:2e:6a:96:c4:75:76:10:
ab:2d:8a:6e:d2:c7:34:94:88:59:ba:e6:aa:8b:91:
16:bc:59:f8:6c:37:30:56:3c:21:f4:75:3d:74:44:
f0:07:27:8b:65:e1:99:9b:e2:0a:40:e6:77:13:93:
80:e3:f2:48:95:24:38:8c:2f:6a:83:76:82:8d:15:
a7:96:da:95:e7:08:90:c5:2e:49:d7:57:a7:f2:f2:
f1:f0:15:e9:be:be:d0:62:77:15:be:d2:82:d4:28:
4c:9e:76:f0:af:b6:73:e7:cc:3a:e6:fd:79:43:f2:
70:0b:f4:0b:aa:e2:56:dc:ea:a8:23:00:f1:f3:e0:
90:69:7c:79:f9:c1:1c:0f:7c:e3:8b:ea:8c:9a:52:
cb:1d:16:1b:b1:c4:51:fd:fa:d8:d3:05:2c:d0:4a:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:34:16:8D:94:32:31:30:01:CA:0E:CD:E3:7A:33:EB:8D:7B:4E:3B
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0f:c4:cf:dd:7d:cf:c7:c1:98:97:18:c2:36:68:36:2e:df:
c8:dc:45:00:97:77:e8:2f:c8:df:c4:5f:52:eb:73:b1:ac:1d:
26:ad:f7:41:24:a1:98:08:d2:81:04:54:26:fa:60:e1:32:20:
fe:66:fd:10:57:d1:aa:df:fb:69:80:0e:c1:81:02:3d:03:da:
b0:73:25:9f:82:26:bb:a2:9d:1a:24:5d:92:7e:5e:e5:ec:80:
f0:76:c2:d6:da:24:9c:28:1e:42:e4:99:6b:ed:76:fb:f7:a1:
ce:6c:76:a8:8b:f5:9a:bc:e3:e7:b7:f6:3a:bd:07:af:ff:87:
3a:85:34:8a:df:e6:41:86:8d:43:95:5d:80:0d:43:2a:2c:93:
5e:0b:75:34:07:45:0e:f6:ae:6f:3b:b6:52:76:a7:4e:5b:5e:
e3:8c:51:4c:c8:05:08:13:01:5e:e8:f1:74:d4:da:bb:41:10:
81:23:da:51:b9:46:13:77:ad:62:f0:1c:e1:ac:d6:f5:d1:b2:
22:88:a6:f4:ef:bd:4e:a7:c3:73:57:39:f3:3c:e3:e2:4a:c3:
3d:72:cc:d1:1d:c7:77:06:72:4a:1a:f8:25:07:34:24:75:9b:
ad:06:31:bc:0b:93:c3:cd:65:71:6a:d6:95:f1:06:52:39:08:
ef:c3:4d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+4PnKnLcDRPI4jew6xXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy
MDE4NTUwHhcNMjYwOTIxMDgwMDU4WhcNMjYwOTIyMDgwMDU4WjAzMTEwLwYDVQQD
Eyg0NjM0MTY4ZDk0MzIzMTMwMDFjYTBlY2RlMzdhMzNlYjhkN2I0ZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFYNMxw1GQl97bXyVbsW0C2OlNGj
yuR6PcA1XJaua3cpg5PePi1+QQLh/GhYilawAV5GdS14OMDbXZWqVqcttZzMfnZe
6PKDkOkPpzTV0mf9lNRA87PU6NmoiVXQ+iHGXi5qlsR1dhCrLYpu0sc0lIhZuuaq
i5EWvFn4bDcwVjwh9HU9dETwByeLZeGZm+IKQOZ3E5OA4/JIlSQ4jC9qg3aCjRWn
ltqV5wiQxS5J11en8vLx8BXpvr7QYncVvtKC1ChMnnbwr7Zz58w65v15Q/JwC/QL
quJW3OqoIwDx8+CQaXx5+cEcD3zji+qMmlLLHRYbscRR/frY0wUs0EqrvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY0Fo2UMjEwAcoOzeN6M+uNe047MB8GA1UdIwQY
MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt
ZTRhODZiMGZmZDJlLzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl
LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQ/Ez919
z8fBmJcYwjZoNi7fyNxFAJd36C/I38RfUutzsawdJq33QSShmAjSgQRUJvpg4TIg
/mb9EFfRqt/7aYAOwYECPQPasHMln4Imu6KdGiRdkn5e5eyA8HbC1toknCgeQuSZ
a+12+/ehzmx2qIv1mrzj57f2Or0Hr/+HOoU0it/mQYaNQ5VdgA1DKiyTXgt1NAdF
Dvaubzu2UnanTlte44xRTMgFCBMBXujxdNTau0EQgSPaUblGE3etYvAc4azW9dGy
Ioim9O+9TqfDc1c58zzj4krDPXLM0R3HdwZyShr4JQc0JHWbrQYxvAuTw81lcWrW
lfEGUjkI78NN+A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:20:12 2026 by rpki-client