Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: J8CS1YGZlSPKeHB7lvVl0rUSVXnfpVcQRqbCfvSul5s=
Subject key identifier: 37:17:DD:9A:AD:27:74:EC:65:D0:4B:02:11:43:E9:2A:CC:24:20:8B
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 01A1DB38DB6D9D4A5EE67F60C4E9A5CCB486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 13CE
Signing time: Sat 14 Nov 2026 18:01:38 +0000
Manifest this update: Sat 14 Nov 2026 18:01:38 +0000
Manifest next update: Sun 15 Nov 2026 18:01:38 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: ql5zNMZw2JbTGjPE9IGxyv4A5KY6KRvrzGEtSv95+ao=)
2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:db:6d:9d:4a:5e:e6:7f:60:c4:e9:a5:cc:b4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Nov 14 18:01:38 2026 GMT
Not After : Nov 15 18:01:38 2026 GMT
Subject: CN=3717dd9aad2774ec65d04b021143e92acc24208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:aa:7a:64:37:5d:32:5c:88:c5:5c:07:79:
c6:56:48:31:72:31:35:89:c4:65:a5:d2:45:e7:c7:
f9:5c:6c:08:5c:f7:75:53:a0:0b:89:1f:6b:14:0e:
c6:ab:7d:73:4c:00:44:58:a1:50:54:bb:80:11:a8:
a6:68:7e:8d:86:a7:72:8a:0f:09:35:60:58:81:c5:
23:6e:4a:76:64:ff:f4:69:40:be:28:54:eb:49:33:
c1:89:1f:ff:d6:2f:ba:3f:c8:69:7f:ad:b9:ae:70:
3f:46:1d:13:17:f4:10:de:33:01:3b:74:03:cc:21:
d1:12:44:2e:95:66:3b:c5:c4:a0:71:71:ed:97:4a:
a8:9c:41:db:8d:7e:6d:f5:6d:bd:35:80:93:9c:36:
de:da:81:32:ed:d1:35:36:d5:19:c0:f2:51:c0:45:
37:81:92:bd:62:6f:40:14:a4:99:41:f4:79:2a:04:
19:c4:29:39:13:ad:dc:df:b0:f8:d0:da:11:c6:db:
87:5f:4c:9a:6d:d3:09:1c:ff:b9:84:63:18:87:89:
d3:fb:97:41:0c:f7:20:67:44:22:13:65:2b:f9:7d:
3c:fd:77:4f:ca:ec:e0:b8:29:22:25:32:69:d2:34:
4d:f9:e3:e1:bc:73:77:25:23:81:0d:d0:a1:dd:51:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:DD:9A:AD:27:74:EC:65:D0:4B:02:11:43:E9:2A:CC:24:20:8B
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0c:55:44:7e:ab:98:86:69:7b:6d:52:51:86:3e:e5:91:72:
ad:56:61:cf:12:b0:fb:43:1c:2c:32:4b:7d:e1:e2:d5:41:b4:
de:49:4b:f1:2f:cf:34:a5:02:7b:71:2a:80:7b:53:55:44:a8:
fa:91:24:22:16:75:51:83:7e:44:44:23:88:df:2e:62:89:c0:
fc:94:cd:db:76:71:60:2a:89:ce:3f:f1:0e:9f:a6:2a:81:80:
52:9d:f5:00:b7:90:9d:a3:0f:51:d3:f5:64:b2:37:37:13:25:
97:20:03:bc:79:20:66:fb:97:80:09:f2:42:52:12:02:3c:ff:
74:3f:e2:0c:d4:da:97:21:6a:dd:77:96:77:3a:04:a6:25:d7:
e0:f8:ff:9d:7d:b7:e9:93:d0:09:fc:67:61:07:7f:5b:9e:34:
30:bf:bf:19:86:cd:70:66:23:9c:0b:60:f3:32:7c:8a:5f:51:
0e:fd:a6:ac:e1:99:e6:78:b4:80:35:db:98:9c:8c:d0:6f:5e:
23:1e:be:2d:ce:8f:f4:f6:07:f1:f8:04:3e:65:51:e3:fd:a9:
5e:dd:b7:1f:0f:51:28:3b:f2:94:4f:31:32:01:70:f1:3c:55:
f2:6e:61:36:2a:c4:fa:38:57:d9:91:85:8c:7f:e9:bc:18:ab:
65:b3:df:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbONttnUpe5n9gxOmlzLSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDU0MmE2MTM1NTI0MTQyMTk0Y2FhNzA4ZTdkYjJjY2E2
YjRlNjMwHhcNMjYxMTE0MTgwMTM4WhcNMjYxMTE1MTgwMTM4WjAzMTEwLwYDVQQD
EygzNzE3ZGQ5YWFkMjc3NGVjNjVkMDRiMDIxMTQzZTkyYWNjMjQyMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmneqemQ3XTJciMVcB3nGVkgxcjE1
icRlpdJF58f5XGwIXPd1U6ALiR9rFA7Gq31zTABEWKFQVLuAEaimaH6Nhqdyig8J
NWBYgcUjbkp2ZP/0aUC+KFTrSTPBiR//1i+6P8hpf625rnA/Rh0TF/QQ3jMBO3QD
zCHREkQulWY7xcSgcXHtl0qonEHbjX5t9W29NYCTnDbe2oEy7dE1NtUZwPJRwEU3
gZK9Ym9AFKSZQfR5KgQZxCk5E63c37D40NoRxtuHX0yabdMJHP+5hGMYh4nT+5dB
DPcgZ0QiE2Ur+X08/XdPyuzguCkiJTJp0jRN+ePhvHN3JSOBDdCh3VFIkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcX3ZqtJ3TsZdBLAhFD6SrMJCCLMB8GA1UdIwQY
MBaAFNIFQqYTVSQUIZTKpwjn2yzKa05jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUt
YWI0MmI0YzkzZWQ5LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUtYWI0MmI0YzkzZWQ5
LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwxVRH6r
mIZpe21SUYY+5ZFyrVZhzxKw+0McLDJLfeHi1UG03klL8S/PNKUCe3EqgHtTVUSo
+pEkIhZ1UYN+REQjiN8uYonA/JTN23ZxYCqJzj/xDp+mKoGAUp31ALeQnaMPUdP1
ZLI3NxMllyADvHkgZvuXgAnyQlISAjz/dD/iDNTalyFq3XeWdzoEpiXX4Pj/nX23
6ZPQCfxnYQd/W540ML+/GYbNcGYjnAtg8zJ8il9RDv2mrOGZ5ni0gDXbmJyM0G9e
Ix6+Lc6P9PYH8fgEPmVR4/2pXt23Hw9RKDvylE8xMgFw8TxV8m5hNirE+jhX2ZGF
jH/pvBirZbPfHw==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:26:59 2026 by rpki-client