Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: FYoSeS2/w4T0kC+6PAHwco1cTUH464d/XKkDqZjY7S4=
Subject key identifier: 80:E4:3F:F9:61:EA:CF:52:11:3B:77:BE:BC:26:C3:47:57:27:3E:28
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 019CA97CE49DDAE51F7F07CED7F6BBCF944F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 13:01:00 +0000
Manifest this update: Sun 01 Mar 2026 13:01:00 +0000
Manifest next update: Mon 02 Mar 2026 13:01:00 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: mmIqTqsXXx29P4rqGDXABSrRFMzl7jCCMmI0AxK/RzY=)
2: SoEs2uq-Lqa7VWg8JFQCPgrt2eI.roa (hash: NiDI43uxk76Y1iaXH3S9JcI5gdDit0xy1S3yktJNiKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:e4:9d:da:e5:1f:7f:07:ce:d7:f6:bb:cf:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Mar 1 13:01:00 2026 GMT
Not After : Mar 2 13:01:00 2026 GMT
Subject: CN=80e43ff961eacf52113b77bebc26c34757273e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:5e:fe:d2:7d:1d:f4:6d:bd:e7:bb:40:64:
12:66:5c:5c:bc:4b:4f:ec:80:d5:6f:cd:63:c6:bc:
45:f0:ea:97:bd:a9:cc:1a:c3:57:5d:c0:f3:f1:7b:
a4:28:82:30:85:a3:91:84:83:54:78:42:8a:fd:cc:
cd:4f:0d:93:0d:99:d1:e7:87:8d:19:b8:d8:98:78:
91:14:96:5d:55:a3:84:19:9c:f1:78:f3:3a:d0:7a:
23:f4:51:7b:47:00:eb:db:59:f3:38:e2:a4:b2:04:
85:f5:c5:88:b9:81:4d:68:b4:d3:fc:71:12:21:6c:
f6:4e:61:ee:42:42:e1:3f:fc:17:0b:88:74:64:f4:
a6:20:89:eb:24:6c:de:b6:67:d9:a1:19:f7:97:4e:
4a:fd:5e:82:ef:27:f8:d7:cd:0a:2f:5d:56:1e:aa:
ba:a9:07:0e:f8:6c:7e:63:d4:c7:cf:ff:fd:44:9d:
59:45:49:72:d4:53:76:4b:b0:cb:93:12:cd:74:ff:
39:56:b2:76:83:7e:83:d9:41:83:6f:4b:9f:f0:3b:
30:0b:dd:72:25:41:79:b7:6a:bc:44:b0:34:7c:1c:
ab:9d:03:82:f3:a4:14:a9:b0:7e:47:cd:2b:48:27:
38:86:e5:74:ee:4e:4f:13:23:34:48:60:a7:4e:4b:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E4:3F:F9:61:EA:CF:52:11:3B:77:BE:BC:26:C3:47:57:27:3E:28
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:26:a5:6d:b7:c3:ff:de:77:34:1c:0f:51:fc:f7:6b:c3:f3:
7a:e9:bd:91:1a:8a:e8:b4:f4:b0:1e:76:9b:16:e5:6e:72:cb:
2c:1b:da:ec:35:9e:1d:aa:38:1c:4f:a4:e2:a1:ef:eb:aa:56:
f1:10:cd:91:6f:28:9d:78:c6:29:52:dc:b6:47:d4:db:21:a4:
20:05:c3:5c:19:a7:fb:d1:23:46:63:ea:cd:cc:0d:e7:22:d4:
47:db:5d:07:a4:54:e7:56:bc:5d:e0:30:c5:31:4d:ba:9d:31:
60:7d:58:c7:2b:9c:79:ce:bf:eb:70:97:58:1b:28:d3:4b:b4:
7c:51:5e:0e:28:d8:23:ff:8a:f6:98:bb:c3:d5:3b:6c:e8:bb:
58:0f:c7:94:63:c6:4f:5f:ff:0c:2c:27:48:96:30:6a:d1:05:
32:9e:49:fb:b6:e8:8a:e8:d0:58:7a:61:b8:0b:9e:5f:13:17:
9a:08:39:4d:7f:59:f5:13:dc:e2:5b:bd:36:7c:72:cf:a3:33:
40:de:46:14:61:3a:43:64:92:48:5b:26:02:03:d7:1b:4c:cb:
13:8c:77:0e:8e:d1:74:7d:82:d4:f6:82:7e:d2:69:b4:a3:03:
de:1a:e0:71:72:45:59:0e:a7:36:f0:a6:da:54:cd:24:3e:c8:
cb:3c:1b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfOSd2uUffwfO1/a7z5RPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjE3ZDE1ZGI1OGZlMzA2MmQxYmFkYmUwNGQzMGMxOTQ5
ZGQ1ZmYwHhcNMjYwMzAxMTMwMTAwWhcNMjYwMzAyMTMwMTAwWjAzMTEwLwYDVQQD
Eyg4MGU0M2ZmOTYxZWFjZjUyMTEzYjc3YmViYzI2YzM0NzU3MjczZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3xe/tJ9HfRtvee7QGQSZlxcvEtP
7IDVb81jxrxF8OqXvanMGsNXXcDz8XukKIIwhaORhINUeEKK/czNTw2TDZnR54eN
GbjYmHiRFJZdVaOEGZzxePM60Hoj9FF7RwDr21nzOOKksgSF9cWIuYFNaLTT/HES
IWz2TmHuQkLhP/wXC4h0ZPSmIInrJGzetmfZoRn3l05K/V6C7yf4180KL11WHqq6
qQcO+Gx+Y9THz//9RJ1ZRUly1FN2S7DLkxLNdP85VrJ2g36D2UGDb0uf8DswC91y
JUF5t2q8RLA0fByrnQOC86QUqbB+R80rSCc4huV07k5PEyM0SGCnTkvL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDkP/lh6s9SETt3vrwmw0dXJz4oMB8GA1UdIwQY
MBaAFNJhfRXbWP4wYtG62+BNMMGUndX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3Mjct
NTdlMDhmNjFmMmVjLzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3MjctNTdlMDhmNjFmMmVj
LzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgialbbfD
/953NBwPUfz3a8Pzeum9kRqK6LT0sB52mxblbnLLLBva7DWeHao4HE+k4qHv66pW
8RDNkW8onXjGKVLctkfU2yGkIAXDXBmn+9EjRmPqzcwN5yLUR9tdB6RU51a8XeAw
xTFNup0xYH1Yxyucec6/63CXWBso00u0fFFeDijYI/+K9pi7w9U7bOi7WA/HlGPG
T1//DCwnSJYwatEFMp5J+7boiujQWHphuAueXxMXmgg5TX9Z9RPc4lu9Nnxyz6Mz
QN5GFGE6Q2SSSFsmAgPXG0zLE4x3Do7RdH2C1PaCftJptKMD3hrgcXJFWQ6nNvCm
2lTNJD7Iyzwbzw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:31 2026 by rpki-client