Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: hF2JSwfDj9rRQ6Uh6+oo/MuC2qzmmlbKiBKFnbYRsMw=
Subject key identifier: F4:2E:3E:20:4F:97:44:AE:97:37:24:D8:EC:F0:C7:4C:2E:4B:32:30
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 01A0C2569F8798F3733B6700BF0B64DAEA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 05:00:51 +0000
Manifest this update: Mon 21 Sep 2026 05:00:51 +0000
Manifest next update: Tue 22 Sep 2026 05:00:51 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: w9buzyv6RLlXGIMWeRgymljTKGOd8qCstuRLMng3CvM=)
2: MZedXybYHwozV6I5FVF9kaQXqGw.roa (hash: 9GqJqyPbldCXpYPmuX8YAVKvtX3ZVzz/4Tffa0wjAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:9f:87:98:f3:73:3b:67:00:bf:0b:64:da:ea:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Sep 21 05:00:51 2026 GMT
Not After : Sep 22 05:00:51 2026 GMT
Subject: CN=f42e3e204f9744ae973724d8ecf0c74c2e4b3230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:20:84:70:d7:e7:e7:92:9c:50:fb:9c:11:
cd:dc:d4:40:1c:30:23:e1:92:97:17:c8:ba:f7:bd:
47:1b:75:ab:bf:4a:82:1b:1b:9e:41:20:bf:e5:7e:
50:1e:e1:39:26:93:ba:61:9e:4d:42:7b:20:a2:08:
95:4c:44:76:9c:17:c5:d6:42:3f:08:db:5b:78:23:
b4:89:7d:30:20:8a:d1:eb:7b:e6:aa:6a:14:4b:b0:
9e:26:fa:c9:ce:7e:6e:8d:ae:8f:35:cf:b9:a0:d4:
6e:83:bd:62:45:1b:f4:ec:52:c0:1e:9a:ef:e0:6a:
55:99:2c:dc:e9:5d:3a:41:e6:17:a7:8e:5a:9e:0f:
79:ce:0a:f1:c6:59:b5:32:3e:78:51:f0:60:71:ee:
62:ba:1d:12:d4:00:9b:83:31:a7:8c:48:90:30:d1:
cf:23:e7:64:0f:57:05:7a:db:94:96:08:56:8a:e3:
1d:94:29:64:ea:0b:7c:55:35:87:e3:42:2a:48:05:
93:2f:96:8d:e9:aa:07:d7:be:1a:a7:1f:b2:30:18:
ec:ad:b9:dd:11:56:d4:fa:dc:75:bf:1f:ee:68:09:
1b:5b:b3:83:74:40:2b:4e:38:45:e7:eb:88:75:bc:
21:d0:2e:a6:43:a9:be:c6:3b:18:0b:f5:97:e6:2d:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:3E:20:4F:97:44:AE:97:37:24:D8:EC:F0:C7:4C:2E:4B:32:30
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:34:6c:43:c2:f9:5d:fc:0b:3d:b5:a5:28:e3:19:eb:50:79:
b9:fc:70:12:2c:23:99:c3:34:0f:1f:be:35:ca:15:c8:13:a2:
e4:bd:22:14:50:3a:52:d9:8d:be:9c:58:2a:f3:1b:14:61:7f:
14:09:f2:25:1e:09:eb:6f:f5:75:63:d1:ee:96:53:fb:26:e7:
56:8e:e2:de:02:56:17:57:4f:02:8a:f8:67:41:73:28:85:a5:
4d:4a:1d:df:5c:cf:91:fa:f9:97:fb:78:92:e6:67:5b:ad:ac:
84:8c:a0:a7:46:20:a9:38:24:b5:b6:68:f6:86:7b:c2:42:0f:
99:3a:aa:55:a4:8b:0e:c2:ef:d6:05:6d:d5:1a:63:69:c3:70:
a7:7e:b1:cb:2e:1f:a1:95:47:f9:22:a2:1c:3a:3c:1d:56:bc:
f4:85:07:4e:72:ce:15:99:64:2a:26:41:ec:85:9c:02:a0:11:
8d:b1:d6:e9:59:39:dc:4f:18:c8:34:83:00:b0:eb:6f:e9:e5:
8e:fd:87:85:00:30:22:1f:8a:bc:7d:75:ba:c5:62:43:71:fc:
4c:72:c7:72:7e:90:5b:08:74:bd:02:af:09:55:76:59:f0:30:
39:04:48:04:ea:c1:9f:72:8b:3d:90:0e:ca:bb:00:27:e4:3d:
69:02:4b:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCVp+HmPNzO2cAvwtk2upuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2EzYzBiMTk2ZmRlMGJhNzRjMTQ4N2JkY2I5YzVmYTA1
MzY2NGIwHhcNMjYwOTIxMDUwMDUxWhcNMjYwOTIyMDUwMDUxWjAzMTEwLwYDVQQD
EyhmNDJlM2UyMDRmOTc0NGFlOTczNzI0ZDhlY2YwYzc0YzJlNGIzMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkYghHDX5+eSnFD7nBHN3NRAHDAj
4ZKXF8i6971HG3Wrv0qCGxueQSC/5X5QHuE5JpO6YZ5NQnsgogiVTER2nBfF1kI/
CNtbeCO0iX0wIIrR63vmqmoUS7CeJvrJzn5uja6PNc+5oNRug71iRRv07FLAHprv
4GpVmSzc6V06QeYXp45ang95zgrxxlm1Mj54UfBgce5iuh0S1ACbgzGnjEiQMNHP
I+dkD1cFetuUlghWiuMdlClk6gt8VTWH40IqSAWTL5aN6aoH174apx+yMBjsrbnd
EVbU+tx1vx/uaAkbW7ODdEArTjhF5+uIdbwh0C6mQ6m+xjsYC/WX5i3c1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQuPiBPl0Sulzck2Ozwx0wuSzIwMB8GA1UdIwQY
MBaAFNDKPAsZb94Lp0wUh73LnF+gU2ZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2Et
NmI2MzMzMWVmZjAyLzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2EtNmI2MzMzMWVmZjAy
LzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDRsQ8L5
XfwLPbWlKOMZ61B5ufxwEiwjmcM0Dx++NcoVyBOi5L0iFFA6UtmNvpxYKvMbFGF/
FAnyJR4J62/1dWPR7pZT+ybnVo7i3gJWF1dPAor4Z0FzKIWlTUod31zPkfr5l/t4
kuZnW62shIygp0YgqTgktbZo9oZ7wkIPmTqqVaSLDsLv1gVt1RpjacNwp36xyy4f
oZVH+SKiHDo8HVa89IUHTnLOFZlkKiZB7IWcAqARjbHW6Vk53E8YyDSDALDrb+nl
jv2HhQAwIh+KvH11usViQ3H8THLHcn6QWwh0vQKvCVV2WfAwOQRIBOrBn3KLPZAO
yrsAJ+Q9aQJLng==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:45:37 2026 by rpki-client