Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier: 1hj9FxER6VRBptUTh1eqgK571ipKwt5//y9O3wPPwng=
Subject key identifier: F7:FE:E4:D5:58:B4:E2:79:00:B7:4F:EE:38:64:46:50:BD:E0:0E:DF
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 01A0D4263FFD0F384445361A479D12642ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number: 0CB1
Signing time: Thu 24 Sep 2026 16:01:11 +0000
Manifest this update: Thu 24 Sep 2026 16:01:11 +0000
Manifest next update: Fri 25 Sep 2026 16:01:11 +0000
Files and hashes: 1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=)
2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: OOZvpp6VMDUULuxkn6NFPCKFqdvqpwSDDeWA9oCida4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:3f:fd:0f:38:44:45:36:1a:47:9d:12:64:2e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Sep 24 16:01:11 2026 GMT
Not After : Sep 25 16:01:11 2026 GMT
Subject: CN=f7fee4d558b4e27900b74fee38644650bde00edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:0c:42:1e:8d:57:04:b7:b9:dd:70:44:45:
58:85:fc:aa:39:e2:e8:0f:e6:2b:c3:6c:d0:b9:8b:
ef:b7:74:76:a4:c0:87:2b:1d:8e:2f:60:1e:8e:6b:
49:b8:31:c3:83:31:95:aa:99:b2:71:52:3b:ea:96:
2c:84:84:99:22:9a:5f:ef:70:18:02:55:22:10:d0:
ec:75:41:29:65:87:69:0b:41:c6:bb:2b:52:d0:b9:
08:3c:e7:6e:b5:8b:c8:3c:92:21:c9:42:fc:78:df:
15:16:0f:5f:a5:3a:8e:77:2e:2f:21:fe:6b:b3:90:
ad:91:02:71:c4:7e:d7:71:fd:34:ea:77:40:94:bf:
2d:86:d7:2e:3f:9a:38:2e:79:93:29:f1:42:00:c6:
4f:de:cd:7a:41:c0:fa:db:ca:00:99:de:1e:d2:40:
78:a7:35:6a:8d:d0:be:41:db:5d:d6:c8:f7:47:ed:
7f:a0:72:b1:a4:d5:d2:bf:61:2b:96:c5:ed:ca:05:
3d:af:84:6f:ee:41:7b:22:d0:53:06:fe:bf:e1:f4:
3c:bb:ac:c8:9e:f4:68:6f:30:9f:1f:c9:15:83:42:
f3:0b:fc:94:ec:de:75:6e:61:a9:47:14:af:4b:fa:
dd:3a:75:f0:d3:ff:f2:a6:52:54:a8:cd:76:47:80:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FE:E4:D5:58:B4:E2:79:00:B7:4F:EE:38:64:46:50:BD:E0:0E:DF
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:aa:2f:04:7d:0f:6f:2a:e9:57:0b:a5:1b:e1:02:c8:0c:94:
ee:26:88:07:ff:ab:84:38:5f:cf:b2:ab:8f:34:24:81:58:f4:
68:dc:61:de:a3:19:ff:e3:43:2b:64:a8:4c:c1:5a:75:38:84:
c6:46:03:4e:e2:cd:e5:84:2f:27:b8:e9:ba:84:66:08:f5:62:
29:ef:67:11:cf:e8:ff:75:25:ea:2f:73:a4:cd:33:58:33:cf:
db:ff:9d:58:e6:5c:41:25:ec:0c:fd:29:0d:22:41:f1:ae:97:
be:ed:4b:c7:cd:b5:34:76:4f:e6:55:2d:41:e2:60:62:20:9b:
6b:f4:cc:54:29:18:1d:1c:7a:48:68:09:01:09:8e:f4:e8:eb:
23:81:a7:0f:d2:49:ba:8d:ea:ea:91:13:f7:48:ac:98:3e:59:
7a:a4:19:12:77:4d:12:78:c2:d5:79:6f:31:c2:91:66:37:68:
6c:b7:e7:ad:0b:54:e9:72:65:db:fa:b1:55:64:67:de:65:3d:
c4:a1:a0:06:b3:3b:46:c1:51:6e:cf:2f:32:b6:cc:07:1a:5e:
d4:c0:40:c5:b3:b3:01:b7:1c:75:4b:14:a5:55:86:e2:89:a5:
d6:a6:f7:72:7f:3c:8d:5c:3c:ec:f5:4a:bf:2e:4e:68:fb:51:
a6:86:c4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJj/9DzhERTYaR50SZC7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNDE1YTAzMDU5ZmIyOTVhNGI5NmM5Y2U1ZWFkYjU4ZmU5
OGZhODYwHhcNMjYwOTI0MTYwMTExWhcNMjYwOTI1MTYwMTExWjAzMTEwLwYDVQQD
EyhmN2ZlZTRkNTU4YjRlMjc5MDBiNzRmZWUzODY0NDY1MGJkZTAwZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFoMQh6NVwS3ud1wREVYhfyqOeLo
D+Yrw2zQuYvvt3R2pMCHKx2OL2AejmtJuDHDgzGVqpmycVI76pYshISZIppf73AY
AlUiENDsdUEpZYdpC0HGuytS0LkIPOdutYvIPJIhyUL8eN8VFg9fpTqOdy4vIf5r
s5CtkQJxxH7Xcf006ndAlL8thtcuP5o4LnmTKfFCAMZP3s16QcD628oAmd4e0kB4
pzVqjdC+Qdtd1sj3R+1/oHKxpNXSv2ErlsXtygU9r4Rv7kF7ItBTBv6/4fQ8u6zI
nvRobzCfH8kVg0LzC/yU7N51bmGpRxSvS/rdOnXw0//yplJUqM12R4BDmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPf+5NVYtOJ5ALdP7jhkRlC94A7fMB8GA1UdIwQY
MBaAFJtBWgMFn7KVpLlsnOXq21j+mPqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEt
MTgwMWI1NDRiOWZlLzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEtMTgwMWI1NDRiOWZl
LzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKovBH0P
byrpVwulG+ECyAyU7iaIB/+rhDhfz7KrjzQkgVj0aNxh3qMZ/+NDK2SoTMFadTiE
xkYDTuLN5YQvJ7jpuoRmCPViKe9nEc/o/3Ul6i9zpM0zWDPP2/+dWOZcQSXsDP0p
DSJB8a6Xvu1Lx821NHZP5lUtQeJgYiCba/TMVCkYHRx6SGgJAQmO9OjrI4GnD9JJ
uo3q6pET90ismD5ZeqQZEndNEnjC1XlvMcKRZjdobLfnrQtU6XJl2/qxVWRn3mU9
xKGgBrM7RsFRbs8vMrbMBxpe1MBAxbOzAbccdUsUpVWG4oml1qb3cn88jVw87PVK
vy5OaPtRpobEXg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:19:08 2026 by rpki-client