Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: y8BG+vW8cx4pljC4Wp+csNBExa2S12rY+cNKa5ng+CM=
Subject key identifier: 6E:19:E2:C8:AA:3D:68:C6:35:6C:F2:B3:67:6C:2C:8A:A3:21:EB:E4
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 01A0D34A8E46E5918CA9BDDB3A0837D4BD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 17AA
Signing time: Thu 24 Sep 2026 12:01:13 +0000
Manifest this update: Thu 24 Sep 2026 12:01:13 +0000
Manifest next update: Fri 25 Sep 2026 12:01:13 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: XVi2gRvwtBd50phybLVzQ9Ua6SLqf9gw0BQg4VB5EHM=)
2: pCWS_26lWVBmz3evvhhCPtQ3724.roa (hash: 169W7Abudr//3hW1olxvzVQxe6wwpkcYjx7dbhDz4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:8e:46:e5:91:8c:a9:bd:db:3a:08:37:d4:bd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Sep 24 12:01:13 2026 GMT
Not After : Sep 25 12:01:13 2026 GMT
Subject: CN=6e19e2c8aa3d68c6356cf2b3676c2c8aa321ebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:23:d6:b7:b9:4e:a7:84:7c:36:69:03:05:
48:ff:9b:15:57:5c:53:99:e1:09:21:96:a2:97:4f:
94:2f:6e:3d:3f:ae:b3:95:67:58:20:6c:48:71:7c:
00:bb:2b:5f:b3:44:dc:b1:70:02:ba:42:99:98:a5:
bd:0e:c9:9b:ae:9c:71:74:6f:78:47:46:25:d4:27:
c2:8c:05:30:9d:2e:8f:eb:f6:13:35:1e:99:5b:ff:
9d:fd:26:fd:cc:ab:55:4b:71:66:b3:25:c6:41:f6:
a9:37:19:a4:5b:9a:24:4d:05:4e:f3:6a:5b:94:0e:
b9:48:4f:8d:5a:07:46:1d:cb:5b:05:b0:82:7e:13:
68:8d:f8:0d:c6:fb:e9:d5:d9:62:6f:3a:c1:bd:ae:
ba:87:1e:81:d2:f8:98:d7:54:da:7a:46:bb:63:66:
47:77:d0:34:55:69:ad:0f:59:5b:15:37:7b:fa:3f:
00:b3:7f:54:79:9a:d3:fd:2a:84:d1:b4:73:a1:bd:
b6:e3:18:de:20:76:d7:1e:83:34:aa:29:76:38:ea:
fb:96:90:9b:f1:d6:06:07:58:82:b6:7f:29:aa:b2:
fd:d4:98:d6:87:14:d1:fc:5f:58:5d:d1:97:57:b3:
5c:2f:dc:94:7e:a6:8d:9e:da:2e:e4:32:2a:6e:16:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:19:E2:C8:AA:3D:68:C6:35:6C:F2:B3:67:6C:2C:8A:A3:21:EB:E4
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dd:e5:de:a4:8b:18:30:5c:6e:ad:68:5b:25:05:b0:28:9f:
7c:94:23:e5:2d:b7:c2:54:1d:ba:a1:cc:08:c1:cd:e2:3d:e2:
c9:32:55:0a:70:66:a1:24:07:42:d1:6b:f4:9b:3c:cc:ea:4c:
04:d4:be:0b:70:29:f9:24:75:03:fe:13:c4:af:33:42:4b:41:
52:84:cf:ad:83:bd:ea:42:bd:10:fb:65:6a:b4:c0:47:90:1b:
26:60:59:c6:6b:f9:1f:53:d6:c5:e9:45:a2:d0:f2:b6:87:70:
f8:71:34:8e:d1:c6:76:8c:bd:a7:80:27:a8:58:3e:7f:12:0a:
91:4a:42:60:28:5d:4b:ad:9c:5a:56:e8:2c:da:3c:e9:23:81:
a4:c8:36:c7:d0:82:09:10:65:ce:6a:c5:04:95:76:0e:01:77:
06:6d:31:22:c7:60:93:22:8a:1c:db:a9:ba:6c:c7:64:de:39:
41:09:5d:72:8e:ab:14:12:18:89:b1:0c:21:e3:67:67:9b:c6:
ee:82:91:86:98:f2:26:4a:22:12:81:26:af:ef:77:3e:c8:bd:
3e:b1:4f:06:69:d0:d5:05:ba:18:ee:ed:a5:1b:96:7d:a2:58:
6d:c5:59:cc:e6:9a:b0:44:e4:5b:fd:cc:10:31:ed:ca:63:30:
a7:af:b6:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSo5G5ZGMqb3bOgg31L2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNWIyNjIzYTM5ZDU1NmM1MGI3MDQ2ZDM2NDQ3ZmI2MjFh
Zjk3NGEwHhcNMjYwOTI0MTIwMTEzWhcNMjYwOTI1MTIwMTEzWjAzMTEwLwYDVQQD
Eyg2ZTE5ZTJjOGFhM2Q2OGM2MzU2Y2YyYjM2NzZjMmM4YWEzMjFlYmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12Ej1re5TqeEfDZpAwVI/5sVV1xT
meEJIZail0+UL249P66zlWdYIGxIcXwAuytfs0TcsXACukKZmKW9DsmbrpxxdG94
R0Yl1CfCjAUwnS6P6/YTNR6ZW/+d/Sb9zKtVS3FmsyXGQfapNxmkW5okTQVO82pb
lA65SE+NWgdGHctbBbCCfhNojfgNxvvp1dlibzrBva66hx6B0viY11Taeka7Y2ZH
d9A0VWmtD1lbFTd7+j8As39UeZrT/SqE0bRzob224xjeIHbXHoM0qil2OOr7lpCb
8dYGB1iCtn8pqrL91JjWhxTR/F9YXdGXV7NcL9yUfqaNntou5DIqbhZC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4Z4siqPWjGNWzys2dsLIqjIevkMB8GA1UdIwQY
MBaAFNBbJiOjnVVsULcEbTZEf7Yhr5dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMGNhNzYtZTI2NC00MGYxLTlkOGEt
MDY1Y2ExZjM2MzEwLzEvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hMGNhNzYtZTI2NC00MGYxLTlkOGEtMDY1Y2ExZjM2MzEw
LzEvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU93l3qSL
GDBcbq1oWyUFsCiffJQj5S23wlQduqHMCMHN4j3iyTJVCnBmoSQHQtFr9Js8zOpM
BNS+C3Ap+SR1A/4TxK8zQktBUoTPrYO96kK9EPtlarTAR5AbJmBZxmv5H1PWxelF
otDytodw+HE0jtHGdoy9p4AnqFg+fxIKkUpCYChdS62cWlboLNo86SOBpMg2x9CC
CRBlzmrFBJV2DgF3Bm0xIsdgkyKKHNupumzHZN45QQldco6rFBIYibEMIeNnZ5vG
7oKRhpjyJkoiEoEmr+93Psi9PrFPBmnQ1QW6GO7tpRuWfaJYbcVZzOaasETkW/3M
EDHtymMwp6+2jg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:35:06 2026 by rpki-client