Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: XsiTMNHWxSHA4i5jfKOH1nLxvy1SJ8Be6Qt1WhiaZkg=
Subject key identifier: 2E:96:52:8B:4F:DC:D9:4C:30:E9:B7:66:7F:E3:8F:4F:AD:9D:D3:3E
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 01A0C2FABCFEF8FA4BBE98D0600F51D97963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 13D6
Signing time: Mon 21 Sep 2026 08:00:07 +0000
Manifest this update: Mon 21 Sep 2026 08:00:07 +0000
Manifest next update: Tue 22 Sep 2026 08:00:07 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: 8ieX7buLI8i0NJfnJE86lQcoCIWSAD4Hc+wbhIHi1A8=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:bc:fe:f8:fa:4b:be:98:d0:60:0f:51:d9:79:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Sep 21 08:00:07 2026 GMT
Not After : Sep 22 08:00:07 2026 GMT
Subject: CN=2e96528b4fdcd94c30e9b7667fe38f4fad9dd33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:5f:cc:b5:3b:08:a2:0b:79:75:c6:f8:c6:
ef:01:6b:fc:b2:c5:84:b0:83:f1:23:68:9e:7e:ee:
d1:5f:0d:57:ca:9a:15:16:b2:5a:ec:8d:8e:6a:d1:
ca:07:ae:8d:b2:e0:f4:2e:bc:ec:77:f1:da:8b:81:
eb:4c:43:a6:c2:a3:c3:16:51:bb:2d:9c:1b:ca:57:
fa:2c:6f:2e:f1:4f:50:65:a0:4b:e4:31:ea:0c:aa:
cc:c7:83:d4:6c:a3:6e:e8:95:a4:a4:8f:27:fc:77:
1e:54:5d:11:b7:27:eb:9d:3d:fb:ba:92:97:6a:54:
12:bb:6c:3a:02:e8:40:85:b0:02:df:58:e6:96:43:
63:dd:4e:d8:e9:79:e6:41:c2:5b:9f:10:7e:6c:96:
56:11:51:0a:c6:7f:bd:25:6e:45:6e:e3:e9:98:d4:
6f:cf:9c:4b:98:21:8f:b9:d3:75:4b:00:37:de:74:
26:31:ff:df:da:fb:d4:60:78:24:40:6c:56:07:e1:
82:9a:f6:ad:47:ce:84:67:97:98:fd:98:aa:09:1b:
cf:76:ef:47:e9:d3:0b:f0:45:d3:4c:65:3f:a9:8f:
fd:3a:59:19:d2:fa:57:71:6f:21:e4:1a:23:f0:21:
2f:5c:e5:4e:8c:4f:b8:7d:d8:b4:42:4f:fb:de:c3:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:96:52:8B:4F:DC:D9:4C:30:E9:B7:66:7F:E3:8F:4F:AD:9D:D3:3E
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5a:d5:91:b7:19:6e:37:72:84:9a:25:00:f5:2e:1f:d7:ed:
50:b6:87:57:79:23:2c:83:10:48:b9:0c:b0:26:ef:0d:f8:f4:
00:60:5e:d1:1c:c8:93:02:1e:7f:0e:22:61:2c:38:39:8d:27:
7b:7f:96:bc:29:28:8d:ee:aa:ae:72:d4:5a:74:34:9c:36:5e:
42:29:da:27:c6:79:f9:d6:b7:fb:49:cb:a0:83:10:8d:fb:b0:
af:98:86:0e:ed:92:11:78:f6:c5:5d:6d:12:47:d5:fa:55:b2:
00:28:3b:72:4a:94:a6:78:e7:3b:9f:bd:3c:37:97:30:ca:01:
3d:aa:c6:77:60:39:4b:ea:31:72:f0:63:fe:52:d2:89:0c:fd:
df:47:a3:22:8f:3d:95:5e:83:b0:3c:89:32:0d:cf:17:69:dd:
28:1d:2e:bc:70:6a:63:8a:67:8d:ec:db:09:3d:29:65:b1:98:
d7:e3:c8:00:ee:c8:0b:c7:f6:15:ab:d2:0d:93:f9:7f:a5:b2:
26:70:d0:cb:65:52:fc:77:24:2f:d5:ce:fd:fe:87:ea:d9:a4:
65:6e:d7:54:6e:1a:28:ca:0d:7a:76:92:24:90:7a:c4:43:bc:
42:82:c4:89:48:d8:5b:a2:53:2c:3e:3f:d2:8a:53:f1:b3:42:
e1:73:64:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+rz++PpLvpjQYA9R2XljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMDNhZjE5NzY0NWE0OTQxYzZjZGIwODY2OWFmMDA4Yjc5
MTAyYmUwHhcNMjYwOTIxMDgwMDA3WhcNMjYwOTIyMDgwMDA3WjAzMTEwLwYDVQQD
EygyZTk2NTI4YjRmZGNkOTRjMzBlOWI3NjY3ZmUzOGY0ZmFkOWRkMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuFfzLU7CKILeXXG+MbvAWv8ssWE
sIPxI2iefu7RXw1XypoVFrJa7I2OatHKB66NsuD0Lrzsd/Hai4HrTEOmwqPDFlG7
LZwbylf6LG8u8U9QZaBL5DHqDKrMx4PUbKNu6JWkpI8n/HceVF0RtyfrnT37upKX
alQSu2w6AuhAhbAC31jmlkNj3U7Y6XnmQcJbnxB+bJZWEVEKxn+9JW5FbuPpmNRv
z5xLmCGPudN1SwA33nQmMf/f2vvUYHgkQGxWB+GCmvatR86EZ5eY/ZiqCRvPdu9H
6dML8EXTTGU/qY/9OlkZ0vpXcW8h5Boj8CEvXOVOjE+4fdi0Qk/73sNkLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6WUotP3NlMMOm3Zn/jj0+tndM+MB8GA1UdIwQY
MBaAFNEDrxl2RaSUHGzbCGaa8Ai3kQK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDkt
N2RiM2VjNmZhMzAyLzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDktN2RiM2VjNmZhMzAy
LzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFrVkbcZ
bjdyhJolAPUuH9ftULaHV3kjLIMQSLkMsCbvDfj0AGBe0RzIkwIefw4iYSw4OY0n
e3+WvCkoje6qrnLUWnQ0nDZeQinaJ8Z5+da3+0nLoIMQjfuwr5iGDu2SEXj2xV1t
EkfV+lWyACg7ckqUpnjnO5+9PDeXMMoBParGd2A5S+oxcvBj/lLSiQz930ejIo89
lV6DsDyJMg3PF2ndKB0uvHBqY4pnjezbCT0pZbGY1+PIAO7IC8f2FavSDZP5f6Wy
JnDQy2VS/HckL9XO/f6H6tmkZW7XVG4aKMoNenaSJJB6xEO8QoLEiUjYW6JTLD4/
0opT8bNC4XNkYA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:52:11 2026 by rpki-client