Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: 93ydXAHhpr2ptd1enpfRS5arWxYU8B9g3j3Mx3rR0ug=
Subject key identifier: A8:DB:51:3A:37:79:93:7E:A1:AD:9A:31:29:32:5A:62:6F:C1:07:A1
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 019CAB34923C059FA76958BEA2CF9DABA2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0C4B
Signing time: Sun 01 Mar 2026 21:01:15 +0000
Manifest this update: Sun 01 Mar 2026 21:01:15 +0000
Manifest next update: Mon 02 Mar 2026 21:01:15 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: 6ge8Fka/JvgzRhgAwtrCqC5i8/bq6XcgvIGK9KV/lJE=)
2: iGY_Mv10YgE-XbLN8s6W95SGc3w.roa (hash: 2VVKNx6PRdYWZ0nNRbCgG4Dar1wwW4X2eQNLFYqQiUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:92:3c:05:9f:a7:69:58:be:a2:cf:9d:ab:a2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Mar 1 21:01:15 2026 GMT
Not After : Mar 2 21:01:15 2026 GMT
Subject: CN=a8db513a3779937ea1ad9a3129325a626fc107a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:d6:76:b0:d0:16:18:c4:99:b9:08:47:d7:
59:5d:f6:83:79:d8:0b:0d:30:a5:ba:c1:12:e5:c7:
b2:2b:ea:99:2a:f6:e1:7f:f1:2c:a6:98:17:96:73:
44:3c:38:96:96:80:b5:e1:8d:bd:78:45:ca:af:d5:
5a:cd:59:d8:5c:be:71:d0:2a:53:ae:18:a2:a3:f9:
5a:c2:06:2c:75:25:c3:93:df:4e:1b:75:8a:e3:17:
c8:4e:fc:71:6e:dd:bf:c4:a9:9a:da:94:ea:0b:1b:
70:34:40:34:1f:88:0b:c8:72:24:65:66:41:d1:02:
2b:68:13:d0:9b:18:fc:e8:3d:29:6a:39:c2:88:50:
05:98:90:b6:58:28:03:83:2e:6e:0d:d6:86:92:eb:
5f:d5:22:9d:4f:80:9d:98:19:13:95:72:56:1e:5d:
88:56:47:9f:30:bc:6d:64:e0:f2:3b:ee:1e:66:58:
15:2b:01:86:4b:c3:c4:63:38:81:f4:b4:ab:9e:8f:
ac:2f:e5:e5:da:e9:03:5e:8e:1e:0e:ba:99:9b:57:
7d:df:39:f2:97:99:2c:3a:73:cf:3a:53:e5:3c:d5:
8b:c0:6e:64:14:67:46:7b:c4:07:cd:64:72:2b:d2:
63:f8:3c:40:e4:33:5d:86:59:6b:a3:93:ae:d1:9a:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DB:51:3A:37:79:93:7E:A1:AD:9A:31:29:32:5A:62:6F:C1:07:A1
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b2:1c:4b:14:4c:6e:26:f0:97:dc:9c:95:77:49:75:3f:16:
1a:89:2b:1f:ee:2c:8b:9a:d1:9b:80:75:3b:39:b5:ef:5d:91:
59:a3:d0:0a:d0:19:af:b3:23:96:9d:e2:cc:c3:28:7b:3b:aa:
d9:02:1d:78:28:1d:3d:08:ec:76:aa:b1:25:bf:e7:23:da:27:
4c:45:35:5d:73:f5:1a:cc:7a:6f:bf:d4:57:8e:90:25:4c:e0:
21:b1:90:e5:c5:12:ed:22:dd:7e:a9:b8:df:81:29:6c:0a:1e:
dd:a1:71:41:77:3c:3a:f3:29:d1:16:43:be:cd:44:5f:5e:61:
72:94:d3:87:d7:ae:84:39:80:f0:50:c7:95:0a:74:37:14:04:
16:4f:2b:6d:34:5c:e8:d7:b9:53:a0:2e:73:83:36:8a:84:c2:
5f:85:fc:54:f9:2f:42:ba:d5:30:5a:5b:31:01:93:96:42:e3:
b5:5f:68:62:37:fc:fd:5a:aa:d8:d2:cf:c3:fe:22:c1:d4:15:
b4:f1:e6:7c:15:f2:c3:7f:fe:85:53:30:5c:1b:92:fe:34:5d:
74:da:c6:12:42:d9:f1:86:59:4b:d1:5d:b5:16:91:23:ef:22:
4b:96:30:64:d0:39:7c:62:fd:24:b8:1b:1a:ed:13:f5:ab:21:
6b:85:f2:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNJI8BZ+naVi+os+dq6KrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh
YTU5YzcwHhcNMjYwMzAxMjEwMTE1WhcNMjYwMzAyMjEwMTE1WjAzMTEwLwYDVQQD
EyhhOGRiNTEzYTM3Nzk5MzdlYTFhZDlhMzEyOTMyNWE2MjZmYzEwN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5TWdrDQFhjEmbkIR9dZXfaDedgL
DTClusES5ceyK+qZKvbhf/EsppgXlnNEPDiWloC14Y29eEXKr9VazVnYXL5x0CpT
rhiio/lawgYsdSXDk99OG3WK4xfITvxxbt2/xKma2pTqCxtwNEA0H4gLyHIkZWZB
0QIraBPQmxj86D0pajnCiFAFmJC2WCgDgy5uDdaGkutf1SKdT4CdmBkTlXJWHl2I
VkefMLxtZODyO+4eZlgVKwGGS8PEYziB9LSrno+sL+Xl2ukDXo4eDrqZm1d93zny
l5ksOnPPOlPlPNWLwG5kFGdGe8QHzWRyK9Jj+DxA5DNdhllro5Ou0ZrASwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjbUTo3eZN+oa2aMSkyWmJvwQehMB8GA1UdIwQY
MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt
MGRlZDA2ZTQwYTc1LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1
LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbIcSxRM
bibwl9yclXdJdT8WGokrH+4si5rRm4B1Ozm1712RWaPQCtAZr7Mjlp3izMMoezuq
2QIdeCgdPQjsdqqxJb/nI9onTEU1XXP1Gsx6b7/UV46QJUzgIbGQ5cUS7SLdfqm4
34EpbAoe3aFxQXc8OvMp0RZDvs1EX15hcpTTh9euhDmA8FDHlQp0NxQEFk8rbTRc
6Ne5U6Auc4M2ioTCX4X8VPkvQrrVMFpbMQGTlkLjtV9oYjf8/Vqq2NLPw/4iwdQV
tPHmfBXyw3/+hVMwXBuS/jRddNrGEkLZ8YZZS9FdtRaRI+8iS5YwZNA5fGL9JLgb
Gu0T9asha4XyNw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:25 2026 by rpki-client