Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: abNQZdKVj6bA6NFFdAP3IHZg5eX6f2e/f25mMOeq1B8=
Subject key identifier: 43:64:A7:E9:FB:BA:CD:82:8A:CD:E1:C5:4A:7E:6F:F1:F4:F2:A6:4A
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 01A0C39FC1AA1D9F87FA7AC956174046BDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 06A7
Signing time: Mon 21 Sep 2026 11:00:21 +0000
Manifest this update: Mon 21 Sep 2026 11:00:21 +0000
Manifest next update: Tue 22 Sep 2026 11:00:21 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: 2lORKw1NdsHF4yz/yrrW47OYBYBUcNh55NclQLohez8=)
2: WrFq8U6oGpZOyYQTgpsxtULaHpY.roa (hash: DaTkNKa/8bSzoEGirYCzYE6s6ctR7ykUWbX1j0yLFaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:c1:aa:1d:9f:87:fa:7a:c9:56:17:40:46:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Sep 21 11:00:21 2026 GMT
Not After : Sep 22 11:00:21 2026 GMT
Subject: CN=4364a7e9fbbacd828acde1c54a7e6ff1f4f2a64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:9d:c8:9f:43:af:f8:9f:7a:20:b1:90:dd:
b2:d5:46:4e:3d:ef:13:ec:49:71:18:d4:79:72:20:
f1:56:7e:6a:dd:35:06:2a:d4:35:37:5f:4f:a4:e0:
8b:1b:23:04:16:d4:1e:36:d7:20:c9:1d:64:06:68:
02:86:84:03:a3:48:fe:47:32:b5:58:1b:a2:30:8c:
a6:f4:5c:9c:c0:f4:0d:3d:bb:52:3c:be:a2:6c:51:
bb:74:63:7f:61:6c:5b:3d:c8:ef:d1:21:80:2c:6b:
f4:96:36:56:dd:31:bb:d0:6d:96:bb:41:59:ab:da:
06:11:7a:e5:ee:85:9a:f6:36:d4:5d:00:b8:80:d9:
8a:cf:96:b7:bb:6d:f1:3b:a9:68:cd:44:48:e0:f1:
25:0f:48:51:43:42:a3:4e:9b:e7:88:b2:9a:48:c2:
df:87:96:eb:34:84:b0:b2:dc:21:7a:8b:50:2a:3e:
34:69:cd:e4:e8:a4:60:35:a8:03:c4:c4:6a:7f:a2:
34:2d:0f:50:e9:88:dc:e9:de:c7:f1:2d:3f:d4:b6:
d1:08:19:fd:0f:d4:8c:94:18:4c:4a:5c:32:96:d2:
8f:e0:7a:5a:39:6b:33:3d:57:07:87:39:4d:85:2b:
18:c2:81:b5:3d:33:9c:9f:c8:58:83:de:b3:e7:92:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:64:A7:E9:FB:BA:CD:82:8A:CD:E1:C5:4A:7E:6F:F1:F4:F2:A6:4A
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d9:e9:17:9c:4e:07:b8:66:42:20:69:30:5c:61:bc:3d:b2:
f7:ab:a8:ad:d4:8f:c8:3c:70:69:d8:7e:c7:d2:76:2a:c4:05:
97:b7:72:7a:a8:dd:06:25:4f:7f:a6:60:41:61:f6:3f:16:a6:
ba:f7:d0:43:62:68:54:59:8a:bf:3b:e4:f6:40:bb:96:bf:77:
09:2b:c1:76:1f:1a:a2:36:0e:9d:19:3e:20:0e:2e:c5:18:0d:
dd:8f:93:78:cb:32:75:ca:c1:54:81:00:fc:2e:76:9a:c4:7b:
33:72:c9:11:9f:c5:6b:02:03:98:fd:9e:fc:30:20:66:0f:8a:
40:b7:c6:91:e3:79:59:a7:3b:64:9d:4a:00:8a:f1:7d:8f:0c:
66:6e:28:7c:24:06:23:13:41:85:91:2f:45:ac:9f:94:63:15:
5d:37:94:85:30:08:c9:cf:43:b2:dd:e5:71:9b:eb:a1:ca:ff:
0b:e3:21:1e:5a:75:37:20:45:e4:3f:9e:d9:71:63:d0:f7:54:
4d:80:c4:21:c0:23:f0:35:b4:86:cb:f7:74:8e:ff:60:b5:a0:
e6:2f:f9:b8:18:c8:92:5f:8d:69:b6:57:d6:d9:64:a9:d0:3f:
16:f9:55:e2:c4:b4:d0:89:a1:e5:f5:b2:78:ed:ff:a1:9b:76:
c9:b1:9f:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn8GqHZ+H+nrJVhdARr3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjFjZmJjMDdlYzMwNjM3N2RjYjE2YTk3YTExNjBjN2E2
ZDgyY2MwHhcNMjYwOTIxMTEwMDIxWhcNMjYwOTIyMTEwMDIxWjAzMTEwLwYDVQQD
Eyg0MzY0YTdlOWZiYmFjZDgyOGFjZGUxYzU0YTdlNmZmMWY0ZjJhNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskydyJ9Dr/ifeiCxkN2y1UZOPe8T
7ElxGNR5ciDxVn5q3TUGKtQ1N19PpOCLGyMEFtQeNtcgyR1kBmgChoQDo0j+RzK1
WBuiMIym9FycwPQNPbtSPL6ibFG7dGN/YWxbPcjv0SGALGv0ljZW3TG70G2Wu0FZ
q9oGEXrl7oWa9jbUXQC4gNmKz5a3u23xO6lozURI4PElD0hRQ0KjTpvniLKaSMLf
h5brNISwstwheotQKj40ac3k6KRgNagDxMRqf6I0LQ9Q6Yjc6d7H8S0/1LbRCBn9
D9SMlBhMSlwyltKP4HpaOWszPVcHhzlNhSsYwoG1PTOcn8hYg96z55ItkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENkp+n7us2Cis3hxUp+b/H08qZKMB8GA1UdIwQY
MBaAFNJhz7wH7DBjd9yxapehFgx6bYLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDkt
OTIyYTE2ZDExN2RkLzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDktOTIyYTE2ZDExN2Rk
LzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9npF5xO
B7hmQiBpMFxhvD2y96uordSPyDxwadh+x9J2KsQFl7dyeqjdBiVPf6ZgQWH2Pxam
uvfQQ2JoVFmKvzvk9kC7lr93CSvBdh8aojYOnRk+IA4uxRgN3Y+TeMsydcrBVIEA
/C52msR7M3LJEZ/FawIDmP2e/DAgZg+KQLfGkeN5Wac7ZJ1KAIrxfY8MZm4ofCQG
IxNBhZEvRayflGMVXTeUhTAIyc9Dst3lcZvrocr/C+MhHlp1NyBF5D+e2XFj0PdU
TYDEIcAj8DW0hsv3dI7/YLWg5i/5uBjIkl+NabZX1tlkqdA/FvlV4sS00Imh5fWy
eO3/oZt2ybGfVg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:45:37 2026 by rpki-client