Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: X4eV7drWTFHAmextdrA7F60pr/G7FoX3R8cpl2EndDk=
Subject key identifier: E0:CA:AE:82:99:44:7E:A7:F9:B4:5F:76:B8:04:61:6C:A0:14:BA:EB
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 01A1C10A9C2A18625D30D65B38F9107ECF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 15D4
Signing time: Mon 09 Nov 2026 16:01:00 +0000
Manifest this update: Mon 09 Nov 2026 16:01:00 +0000
Manifest next update: Tue 10 Nov 2026 16:01:00 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: MdOa40Q5cPhpIL0AL8wt7sXp1b23hczY789RCzzg/W0=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:9c:2a:18:62:5d:30:d6:5b:38:f9:10:7e:cf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Nov 9 16:01:00 2026 GMT
Not After : Nov 10 16:01:00 2026 GMT
Subject: CN=e0caae8299447ea7f9b45f76b804616ca014baeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:31:1f:25:88:d5:56:7d:2e:04:50:f9:dc:
9f:55:b0:e5:81:32:7e:aa:a8:0f:90:ae:d0:49:e7:
ae:4d:33:49:87:50:5d:25:7e:65:9c:22:e2:f6:37:
7c:52:70:d7:f4:68:80:e0:e6:a3:9b:1d:93:4c:58:
47:14:a5:0f:89:fe:1f:90:e6:07:47:93:7b:ac:ad:
54:44:55:7b:0d:c7:08:d5:cb:f1:be:eb:ee:b5:0c:
e6:74:55:2a:6b:ec:c8:ab:6f:ac:27:99:67:ef:b9:
05:80:a0:07:ce:ae:cd:c9:b5:c2:60:5c:45:b0:3c:
96:17:10:a3:5e:f1:02:a8:74:0e:1e:b0:e1:9b:eb:
53:2e:79:42:41:9b:4f:c2:01:0a:0f:77:70:e3:fb:
4c:3c:a1:db:6b:ac:83:fe:58:93:bb:31:2b:9c:ce:
ea:a2:c4:b2:6c:01:df:78:3a:45:e6:47:f6:c5:5a:
4b:18:6d:b1:68:71:5a:db:46:d1:10:e6:06:b3:38:
92:7a:2c:f9:91:6e:55:6b:ab:93:55:7b:34:21:d5:
7a:8d:5b:a5:1a:b3:d3:88:ab:28:79:0b:b4:2d:e4:
46:4b:c0:9d:75:e8:f0:a2:bd:15:6b:f7:a3:26:65:
4f:e5:47:be:32:a1:75:48:8b:26:b9:10:64:a5:96:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:AE:82:99:44:7E:A7:F9:B4:5F:76:B8:04:61:6C:A0:14:BA:EB
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e1:14:54:72:c6:ce:4b:b5:05:1e:d5:18:eb:e8:fa:2a:70:
ee:8e:38:99:ec:c3:d6:39:13:a8:fa:cd:0e:58:85:3b:ea:1e:
39:39:8b:ba:60:15:66:cd:79:0d:1d:af:1d:f4:5e:e3:de:fe:
20:ce:e6:5e:78:7f:3e:bc:61:c4:35:cf:ac:9e:63:da:47:fc:
7a:3e:14:68:02:7d:ab:d5:47:52:19:80:b7:95:4a:03:6c:9c:
59:52:97:bd:ab:d2:1a:a2:42:a1:98:65:ca:32:08:58:a3:7b:
d6:ed:db:f4:36:48:ec:df:78:77:61:b6:86:7c:4a:3a:3f:d3:
cb:08:b7:92:e0:c7:56:40:a8:6d:93:fd:8e:56:c3:cb:b3:ce:
7a:d5:f5:f9:96:51:88:fc:b1:20:fe:55:0d:77:7f:59:c6:a1:
93:c7:5b:56:d5:0f:14:b9:4a:4c:10:46:34:f6:8a:77:a7:66:
72:11:81:f5:85:c2:e8:e8:2a:09:33:19:7a:e2:5b:13:32:27:
a1:80:fe:27:5b:76:16:2b:64:0e:a3:08:c8:c5:8b:61:59:ee:
c6:ff:9a:e7:4e:6e:ea:08:a4:69:65:7e:b1:1d:ae:7b:24:ba:
5b:49:2c:3f:95:de:a8:31:93:2a:b6:f4:eb:4c:22:3c:8a:77:
7a:ea:f9:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHBCpwqGGJdMNZbOPkQfs9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjRmYTgwNzU4NzUzYjI0M2EyMTY1ZWRkZWE3NWRiZWVl
ODI2YzQwHhcNMjYxMTA5MTYwMTAwWhcNMjYxMTEwMTYwMTAwWjAzMTEwLwYDVQQD
EyhlMGNhYWU4Mjk5NDQ3ZWE3ZjliNDVmNzZiODA0NjE2Y2EwMTRiYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqQxHyWI1VZ9LgRQ+dyfVbDlgTJ+
qqgPkK7QSeeuTTNJh1BdJX5lnCLi9jd8UnDX9GiA4Oajmx2TTFhHFKUPif4fkOYH
R5N7rK1URFV7DccI1cvxvuvutQzmdFUqa+zIq2+sJ5ln77kFgKAHzq7NybXCYFxF
sDyWFxCjXvECqHQOHrDhm+tTLnlCQZtPwgEKD3dw4/tMPKHba6yD/liTuzErnM7q
osSybAHfeDpF5kf2xVpLGG2xaHFa20bREOYGsziSeiz5kW5Va6uTVXs0IdV6jVul
GrPTiKsoeQu0LeRGS8Cddejwor0Va/ejJmVP5Ue+MqF1SIsmuRBkpZaDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODKroKZRH6n+bRfdrgEYWygFLrrMB8GA1UdIwQY
MBaAFND0+oB1h1OyQ6IWXt3qddvu6CbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMt
NzJhMWYzNzcxOWJiLzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMtNzJhMWYzNzcxOWJi
LzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+EUVHLG
zku1BR7VGOvo+ipw7o44mezD1jkTqPrNDliFO+oeOTmLumAVZs15DR2vHfRe497+
IM7mXnh/PrxhxDXPrJ5j2kf8ej4UaAJ9q9VHUhmAt5VKA2ycWVKXvavSGqJCoZhl
yjIIWKN71u3b9DZI7N94d2G2hnxKOj/Tywi3kuDHVkCobZP9jlbDy7POetX1+ZZR
iPyxIP5VDXd/Wcahk8dbVtUPFLlKTBBGNPaKd6dmchGB9YXC6OgqCTMZeuJbEzIn
oYD+J1t2FitkDqMIyMWLYVnuxv+a505u6gikaWV+sR2ueyS6W0ksP5XeqDGTKrb0
60wiPIp3eur5IQ==
-----END CERTIFICATE-----
Generated at Mon Nov 9 22:26:17 2026 by rpki-client