Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: mkMkD9n31NsloO2R/U1+gjYEnGl5YJus3/gV5PxH4x8=
Subject key identifier: 3C:70:0C:7B:C5:35:1A:EE:49:CE:6E:24:2A:89:F4:46:5A:48:B8:AA
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 01A0D3EF4E849177AEFB00C27A7120143BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 08C4
Signing time: Thu 24 Sep 2026 15:01:10 +0000
Manifest this update: Thu 24 Sep 2026 15:01:10 +0000
Manifest next update: Fri 25 Sep 2026 15:01:10 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: FRUsTKDwBNx5PtFSQxDdBDG/E0fFQ7uAF9v7AczIiT0=)
2: 3csJZekX_cLNjU2Men_fceOPKEA.asa (hash: irrhjgoJp1T9LHez28rBpjrfAsWLiO1IsgQaRVT71is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:4e:84:91:77:ae:fb:00:c2:7a:71:20:14:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Sep 24 15:01:10 2026 GMT
Not After : Sep 25 15:01:10 2026 GMT
Subject: CN=3c700c7bc5351aee49ce6e242a89f4465a48b8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:a1:eb:02:b4:a9:37:78:1a:2d:67:ad:4a:
eb:04:55:2d:bb:07:fe:6c:a7:8b:8c:7d:d9:4c:a7:
c7:f2:bb:10:ca:e9:e9:1f:9e:3b:1c:99:e7:6c:d6:
df:42:13:e6:79:16:26:06:1b:04:f6:9a:b3:7f:45:
e8:68:4a:73:a6:8a:15:f8:74:82:10:63:c2:54:09:
19:c7:d2:7e:22:88:76:4a:2c:62:ea:3f:3c:89:9e:
68:5f:89:4f:b9:07:16:1b:f8:f7:46:31:3e:21:81:
f5:16:32:54:16:31:d5:56:eb:1a:34:7b:af:7d:6f:
ae:59:14:52:22:70:a7:18:3a:a2:8f:91:62:7e:5a:
0b:c0:92:0c:11:9a:75:96:31:2f:32:11:a5:73:61:
42:3b:69:c0:bc:aa:3c:89:3c:76:b6:3b:83:8d:1f:
f9:e5:2a:07:0b:dd:01:55:25:29:e2:88:e4:f9:fe:
0f:a2:4b:a7:b9:c0:ea:93:d7:c6:5c:4d:70:64:c8:
f1:94:8d:f7:4c:1b:85:de:51:d2:3b:bb:37:55:b2:
ef:11:68:47:91:c5:40:f6:d3:5b:5a:1b:e6:3f:51:
75:14:c9:bf:15:d1:1a:0a:9e:4a:b8:0b:84:45:3e:
7b:7c:67:ad:48:dd:25:e8:8e:87:a8:48:d9:0a:36:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:0C:7B:C5:35:1A:EE:49:CE:6E:24:2A:89:F4:46:5A:48:B8:AA
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c9:27:25:db:57:33:0b:65:85:86:06:50:53:e9:7a:3a:b0:
92:6c:db:5a:65:48:36:20:31:6b:8d:7c:96:07:cd:11:6a:e0:
8e:d3:44:0e:34:8e:9a:6f:20:ee:b5:35:54:44:da:5c:e6:81:
87:d2:54:97:50:f0:92:50:9c:c7:9c:6a:83:03:5e:21:0b:f9:
f2:4e:52:39:54:2c:e4:5e:5d:52:46:0f:21:0e:16:a0:15:a3:
9c:c3:ea:34:5c:cc:5f:56:00:a1:7b:91:ca:bd:15:e9:17:8e:
b4:e0:8a:db:ce:a1:42:65:1b:01:17:13:f4:41:85:33:1c:5d:
34:11:6b:33:b2:8e:de:4d:3d:24:6d:ad:58:34:3e:9b:e6:b5:
ed:23:82:73:e9:cb:8a:ed:0e:ed:53:91:06:88:74:2f:5b:9c:
6d:2a:71:4d:28:8a:be:ab:8f:09:58:de:06:02:d8:cb:f3:e0:
fc:40:40:91:d7:0a:15:0d:a2:63:a0:93:ca:ec:6f:4c:f4:ed:
a1:7e:05:9a:dc:af:45:75:89:bc:f9:93:9c:f2:89:58:6c:f6:
a3:09:6c:36:ca:49:53:d7:7d:21:d8:c2:af:40:e8:e8:9c:58:
ca:cc:47:8a:11:5e:33:3f:96:95:da:73:1b:8f:2e:94:e1:28:
1d:a3:96:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT706EkXeu+wDCenEgFDv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYjBlODY4NmY3ZGFiMWY2NGM4MGQ0MzgyYzNjNTk0OWZm
MTFkYmYwHhcNMjYwOTI0MTUwMTEwWhcNMjYwOTI1MTUwMTEwWjAzMTEwLwYDVQQD
EygzYzcwMGM3YmM1MzUxYWVlNDljZTZlMjQyYTg5ZjQ0NjVhNDhiOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj6h6wK0qTd4Gi1nrUrrBFUtuwf+
bKeLjH3ZTKfH8rsQyunpH547HJnnbNbfQhPmeRYmBhsE9pqzf0XoaEpzpooV+HSC
EGPCVAkZx9J+Ioh2Sixi6j88iZ5oX4lPuQcWG/j3RjE+IYH1FjJUFjHVVusaNHuv
fW+uWRRSInCnGDqij5FifloLwJIMEZp1ljEvMhGlc2FCO2nAvKo8iTx2tjuDjR/5
5SoHC90BVSUp4ojk+f4PokunucDqk9fGXE1wZMjxlI33TBuF3lHSO7s3VbLvEWhH
kcVA9tNbWhvmP1F1FMm/FdEaCp5KuAuERT57fGetSN0l6I6HqEjZCjYlkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxwDHvFNRruSc5uJCqJ9EZaSLiqMB8GA1UdIwQY
MBaAFNGw6GhvfasfZMgNQ4LDxZSf8R2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJEb2FHOTlxeDlreUExRGdzUEZsSl94SGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80NTZhMmItODc1NS00YmZjLThiNmMt
ZGJiYzI1NGQxYzZjLzEvMGJEb2FHOTlxeDlreUExRGdzUEZsSl94SGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80NTZhMmItODc1NS00YmZjLThiNmMtZGJiYzI1NGQxYzZj
LzEvMGJEb2FHOTlxeDlreUExRGdzUEZsSl94SGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMknJdtX
MwtlhYYGUFPpejqwkmzbWmVINiAxa418lgfNEWrgjtNEDjSOmm8g7rU1VETaXOaB
h9JUl1DwklCcx5xqgwNeIQv58k5SOVQs5F5dUkYPIQ4WoBWjnMPqNFzMX1YAoXuR
yr0V6ReOtOCK286hQmUbARcT9EGFMxxdNBFrM7KO3k09JG2tWDQ+m+a17SOCc+nL
iu0O7VORBoh0L1ucbSpxTSiKvquPCVjeBgLYy/Pg/EBAkdcKFQ2iY6CTyuxvTPTt
oX4FmtyvRXWJvPmTnPKJWGz2owlsNspJU9d9IdjCr0Do6JxYysxHihFeMz+Wldpz
G48ulOEoHaOWhA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:51:44 2026 by rpki-client