Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: x/5ND7sK8u85gqcz9ZW7qNhIfwoU/qS9KD3i2TnC0qM=
Subject key identifier: 95:A2:CE:50:C0:27:9A:56:B9:59:58:7E:05:46:44:E9:20:26:8D:A1
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 01A0D048AC7CA3B1AE95195756BEC1FF11DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 0957
Signing time: Wed 23 Sep 2026 22:00:18 +0000
Manifest this update: Wed 23 Sep 2026 22:00:18 +0000
Manifest next update: Thu 24 Sep 2026 22:00:18 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: 6ahlVZjJfzKQoTevEDu22fDm6HiCTvyoOy7rptxxhpc=)
2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:ac:7c:a3:b1:ae:95:19:57:56:be:c1:ff:11:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Sep 23 22:00:18 2026 GMT
Not After : Sep 24 22:00:18 2026 GMT
Subject: CN=95a2ce50c0279a56b959587e054644e920268da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:db:37:17:f4:36:75:6e:3d:54:4b:19:53:43:
d2:ad:b5:86:83:c2:94:69:68:75:ad:3b:15:28:68:
d9:18:1a:06:91:08:9a:96:29:9b:35:91:aa:49:d8:
29:a3:b4:62:3c:5d:75:c4:ed:b5:7f:5a:c7:12:11:
55:4a:a3:3c:1a:ad:db:e2:80:79:ca:b6:14:de:e9:
a5:0e:ab:d2:c2:e0:67:a9:35:be:f6:20:24:09:a4:
e2:42:8c:7f:ad:05:9a:f7:a1:9e:36:e7:31:87:96:
f9:44:76:a6:96:36:c0:a7:ce:ad:23:2a:72:3e:db:
67:48:8c:c3:4a:1e:1c:da:30:33:30:b0:80:e3:5a:
ed:11:4c:9e:62:1d:cd:9d:a2:5e:87:f8:1f:4e:cc:
cc:14:8a:b4:fe:08:ac:87:8a:c0:3a:62:c7:6b:24:
64:93:39:a1:5f:1b:b3:dd:80:4d:8c:78:fa:db:f2:
22:14:6e:c8:77:2d:19:f5:28:8a:d6:9f:93:7f:b3:
d3:6a:5c:14:e2:92:ac:d2:57:f8:b9:e1:7b:49:bd:
b4:28:f2:39:08:ce:37:2b:fc:78:08:b9:ce:27:56:
98:b1:56:d9:5b:0e:1e:53:d0:21:67:55:5a:d3:aa:
f7:85:73:15:05:e4:fe:0d:36:fb:7f:5e:1e:54:26:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A2:CE:50:C0:27:9A:56:B9:59:58:7E:05:46:44:E9:20:26:8D:A1
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:26:ea:0d:a7:df:7b:3b:24:85:aa:31:fe:55:f4:9d:e7:f7:
25:67:62:00:02:fd:c4:ce:42:2f:a1:98:a3:bd:de:ec:0c:79:
fb:71:64:dd:bf:49:e4:d2:0b:a9:04:b9:fd:81:f6:df:d6:0c:
32:ce:9a:3b:da:8e:14:c9:e1:ab:9f:a3:ba:dd:04:3e:de:aa:
83:d1:45:11:a7:b6:21:ae:4d:a6:c2:19:2a:40:14:60:b8:f6:
41:df:b2:01:c5:ea:9e:22:e6:94:ae:9c:2c:b7:95:9b:c0:bc:
f9:1c:18:90:5f:6c:fd:38:b0:69:38:d3:0f:e3:9e:ab:e4:fa:
22:c7:e9:26:a4:af:13:2b:e2:8e:66:62:ba:c7:cf:9d:43:26:
be:37:f7:ad:e5:4a:89:47:2e:21:92:7a:5d:b7:03:3b:35:4f:
b9:c6:54:b5:dc:c4:e9:c2:23:de:c3:d1:f9:4a:44:f7:96:61:
10:92:8c:b3:5f:70:31:00:0b:a0:ce:33:3f:1c:b2:6c:9c:4a:
71:01:ba:27:e6:41:ec:0d:9c:e1:67:13:81:ca:2f:42:2d:23:
76:53:7a:bb:e9:9f:82:e1:21:49:09:96:72:47:db:c1:4c:f9:
85:13:39:12:c9:60:ad:b9:ac:f5:eb:0f:5b:f9:3f:52:a5:21:
a8:5e:32:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSKx8o7GulRlXVr7B/xHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjUxOTY0ZWRlMTJiNGMwMzY3M2QyM2NkNDRjODM3NTMx
NWY0NWEwHhcNMjYwOTIzMjIwMDE4WhcNMjYwOTI0MjIwMDE4WjAzMTEwLwYDVQQD
Eyg5NWEyY2U1MGMwMjc5YTU2Yjk1OTU4N2UwNTQ2NDRlOTIwMjY4ZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Ns3F/Q2dW49VEsZU0PSrbWGg8KU
aWh1rTsVKGjZGBoGkQialimbNZGqSdgpo7RiPF11xO21f1rHEhFVSqM8Gq3b4oB5
yrYU3umlDqvSwuBnqTW+9iAkCaTiQox/rQWa96GeNucxh5b5RHamljbAp86tIypy
PttnSIzDSh4c2jAzMLCA41rtEUyeYh3NnaJeh/gfTszMFIq0/gish4rAOmLHayRk
kzmhXxuz3YBNjHj62/IiFG7Idy0Z9SiK1p+Tf7PTalwU4pKs0lf4ueF7Sb20KPI5
CM43K/x4CLnOJ1aYsVbZWw4eU9AhZ1Va06r3hXMVBeT+DTb7f14eVCZqyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWizlDAJ5pWuVlYfgVGROkgJo2hMB8GA1UdIwQY
MBaAFNH1GWTt4StMA2c9I81EyDdTFfRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUt
NzUyMjBkNTNhNTVjLzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUtNzUyMjBkNTNhNTVj
LzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIybqDaff
ezskhaox/lX0nef3JWdiAAL9xM5CL6GYo73e7Ax5+3Fk3b9J5NILqQS5/YH239YM
Ms6aO9qOFMnhq5+jut0EPt6qg9FFEae2Ia5NpsIZKkAUYLj2Qd+yAcXqniLmlK6c
LLeVm8C8+RwYkF9s/TiwaTjTD+Oeq+T6IsfpJqSvEyvijmZiusfPnUMmvjf3reVK
iUcuIZJ6XbcDOzVPucZUtdzE6cIj3sPR+UpE95ZhEJKMs19wMQALoM4zPxyybJxK
cQG6J+ZB7A2c4WcTgcovQi0jdlN6u+mfguEhSQmWckfbwUz5hRM5Eslgrbms9esP
W/k/UqUhqF4yng==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:20:11 2026 by rpki-client