Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
File: n0GAXmDdl0CETR3HpMFKq6uEhR4.mft (raw, json)
Hash identifier: VjuHsNJ2wOeHnPHeHUe5OvUusFwQJK7enh+LZsEsn0M=
Subject key identifier: CB:14:13:28:CF:AB:C2:32:5A:4E:7D:F1:13:95:BA:E5:0D:15:46:0C
Authority key identifier: 9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E
Certificate issuer: /CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
Certificate serial: 01A0BEB0DE4F52470480C710503B6AF9091D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:00:57 +0000
Manifest this update: Sun 20 Sep 2026 12:00:57 +0000
Manifest next update: Mon 21 Sep 2026 12:00:57 +0000
Files and hashes: 1: TOC7yt8pwcnAu99gFYCGhlQGgZg.roa (hash: PsN09pvtWWcsEJydhp81MFNJ3GP97ijkJSu2F+CCjjs=)
2: n0GAXmDdl0CETR3HpMFKq6uEhR4.crl (hash: bitKrxb89lpW1tjnglztmzw7mKkAOSsGoQmWJvyj7vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:de:4f:52:47:04:80:c7:10:50:3b:6a:f9:09:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
Validity
Not Before: Sep 20 12:00:57 2026 GMT
Not After : Sep 21 12:00:57 2026 GMT
Subject: CN=cb141328cfabc2325a4e7df11395bae50d15460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:c4:f3:a9:90:c0:a9:11:2a:63:51:76:bf:
0c:5c:9e:bd:fd:d5:b5:e0:f6:cc:ad:4b:87:3c:1d:
c3:ad:3d:e9:bb:bb:ed:f0:df:4a:2e:d1:2c:74:b0:
bf:d1:2f:f9:9c:47:f9:c0:89:13:1a:7f:d2:3d:46:
44:23:f4:dd:a3:1f:2d:98:f6:26:2e:9e:18:cc:5c:
25:b4:fd:1e:44:6c:6d:6e:6f:b5:ee:a2:cb:f3:60:
35:6a:7a:3a:de:e4:03:83:b3:a4:0a:d4:86:c8:2a:
e4:e5:f4:b2:2c:3a:ac:54:63:7f:31:94:cf:c7:86:
36:52:74:bc:42:61:d2:d3:f1:d2:6c:75:72:6f:3e:
6c:77:af:4b:a7:76:70:b1:1c:a4:58:a7:7d:42:cf:
53:5f:4f:e6:fc:9e:3e:b2:0e:73:78:b0:49:d0:6e:
22:81:7a:62:ff:d6:85:89:d8:13:23:e8:34:98:17:
87:68:7c:68:e6:4b:64:bf:6e:08:d9:e9:2c:1c:62:
2c:6e:44:6c:06:90:64:a9:dc:fa:21:4d:84:d9:ec:
a9:28:e4:38:3d:bf:60:05:fb:32:92:31:0d:30:5a:
f9:ce:b0:c9:42:69:18:1f:9f:5f:7b:13:40:68:86:
38:10:62:96:92:3b:4a:b2:ff:6b:35:c6:c0:63:e5:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:13:28:CF:AB:C2:32:5A:4E:7D:F1:13:95:BA:E5:0D:15:46:0C
X509v3 Authority Key Identifier:
keyid:9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:62:e2:18:f1:68:95:34:e0:e7:e3:56:7f:17:79:4d:22:80:
90:ba:ee:4c:46:3f:29:c8:97:a2:9e:0f:bf:68:43:95:4c:34:
aa:b4:d9:e5:2c:58:18:5b:4c:3b:35:96:fe:4e:ec:55:01:eb:
e1:4f:b9:2b:40:9a:6d:00:34:bb:06:d7:a4:14:3f:a3:a5:f9:
ba:aa:1d:b7:73:8a:9d:35:27:5e:5b:aa:7c:7d:63:04:3d:0b:
da:b2:99:6b:5a:d0:47:70:78:a8:67:05:c5:1d:b4:ee:cf:50:
b3:d7:bc:4d:fa:32:ec:ad:70:e2:80:d8:7f:68:7c:c4:ff:a4:
10:14:a0:e8:35:cd:e5:ff:76:1d:8e:bc:ec:92:ed:98:90:e8:
18:f7:f2:ef:04:28:a2:17:fc:45:32:2d:58:6a:93:14:92:f4:
61:4d:fb:0d:9e:29:8b:a7:d8:8c:12:0a:33:d7:86:2e:cd:5e:
83:bb:1d:48:4c:94:ab:ce:f0:04:4b:92:7f:f2:fd:58:e1:df:
f8:de:a0:c6:75:68:f2:57:15:0f:1f:c0:b0:a7:7e:28:19:7d:
ea:d7:9d:d3:72:7d:58:ee:5c:87:b3:bc:49:37:a3:e0:f7:0a:
2d:62:64:ee:f2:15:e0:e1:c6:01:81:a9:9d:e8:93:a7:e1:fd:
4b:da:4a:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sN5PUkcEgMcQUDtq+QkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNDE4MDVlNjBkZDk3NDA4NDRkMWRjN2E0YzE0YWFiYWI4
NDg1MWUwHhcNMjYwOTIwMTIwMDU3WhcNMjYwOTIxMTIwMDU3WjAzMTEwLwYDVQQD
EyhjYjE0MTMyOGNmYWJjMjMyNWE0ZTdkZjExMzk1YmFlNTBkMTU0NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqfE86mQwKkRKmNRdr8MXJ69/dW1
4PbMrUuHPB3DrT3pu7vt8N9KLtEsdLC/0S/5nEf5wIkTGn/SPUZEI/Tdox8tmPYm
Lp4YzFwltP0eRGxtbm+17qLL82A1ano63uQDg7OkCtSGyCrk5fSyLDqsVGN/MZTP
x4Y2UnS8QmHS0/HSbHVybz5sd69Lp3ZwsRykWKd9Qs9TX0/m/J4+sg5zeLBJ0G4i
gXpi/9aFidgTI+g0mBeHaHxo5ktkv24I2eksHGIsbkRsBpBkqdz6IU2E2eypKOQ4
Pb9gBfsykjENMFr5zrDJQmkYH59fexNAaIY4EGKWkjtKsv9rNcbAY+WlAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsUEyjPq8IyWk598ROVuuUNFUYMMB8GA1UdIwQY
MBaAFJ9BgF5g3ZdAhE0dx6TBSqurhIUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjBHQVhtRGRsMENFVFIzSHBNRktxNnVFaFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODct
MmFlOTBjM2ZhZTMxLzEvbjBHQVhtRGRsMENFVFIzSHBNRktxNnVFaFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODctMmFlOTBjM2ZhZTMx
LzEvbjBHQVhtRGRsMENFVFIzSHBNRktxNnVFaFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGLiGPFo
lTTg5+NWfxd5TSKAkLruTEY/KciXop4Pv2hDlUw0qrTZ5SxYGFtMOzWW/k7sVQHr
4U+5K0CabQA0uwbXpBQ/o6X5uqodt3OKnTUnXluqfH1jBD0L2rKZa1rQR3B4qGcF
xR207s9Qs9e8Tfoy7K1w4oDYf2h8xP+kEBSg6DXN5f92HY687JLtmJDoGPfy7wQo
ohf8RTItWGqTFJL0YU37DZ4pi6fYjBIKM9eGLs1eg7sdSEyUq87wBEuSf/L9WOHf
+N6gxnVo8lcVDx/AsKd+KBl96ted03J9WO5ch7O8STej4PcKLWJk7vIV4OHGAYGp
neiTp+H9S9pK6Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:35:11 2026 by rpki-client