Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: YxtZM5rMM5s32kKBO8CXLoyPoOmAQdkY5xWNCjkB7xw=
Subject key identifier: 7C:FD:12:3A:A4:E8:4D:86:33:65:4E:0C:01:A9:4D:15:4B:25:C7:9A
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 01A1002344939A575D22B1356E868122975B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 1A9B
Signing time: Sat 03 Oct 2026 05:01:13 +0000
Manifest this update: Sat 03 Oct 2026 05:01:13 +0000
Manifest next update: Sun 04 Oct 2026 05:01:13 +0000
Files and hashes: 1: 0buhRJjHXTiILzpXwukDNlvcl6A.roa (hash: dS469I3s9ALuc1j5wYrMGtFrrCgHDmpnkp67+jT2dqk=)
2: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: njSUPYxMPBJTp25dW5Gr7ud10/ae5VGBHQ9P8l/yHDQ=)
3: p-lIpXsmPoQertGg9bQtPqbri4I.roa (hash: +pBtjOXElfoNNS7bSuz70mkJA+YE5+231SNuLb17X3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:44:93:9a:57:5d:22:b1:35:6e:86:81:22:97:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Oct 3 05:01:13 2026 GMT
Not After : Oct 4 05:01:13 2026 GMT
Subject: CN=7cfd123aa4e84d8633654e0c01a94d154b25c79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:ea:7d:64:c3:5f:1e:64:1c:97:47:c0:0a:
74:d8:52:72:ae:40:c0:7b:b7:cd:04:98:59:fb:bb:
a1:de:16:7b:71:02:02:35:cf:e4:d7:9b:bb:e7:fa:
86:ec:cd:bc:29:42:1d:62:5c:33:3d:48:4a:b0:45:
3c:4f:73:e0:3f:b6:55:83:a6:c1:dd:19:5f:f6:12:
e7:db:f0:6f:80:81:ab:6c:0b:8f:3b:7e:48:1f:d9:
e5:67:db:a0:81:ac:52:44:70:83:9f:53:ab:8b:4f:
24:01:83:af:df:21:9e:5c:67:ee:dd:65:b0:6e:27:
b5:20:ea:5d:7d:0f:2c:40:5a:23:48:85:68:34:ba:
9b:31:61:3a:1f:9e:bc:39:a3:30:5d:76:2e:4a:79:
6e:b1:e3:08:ca:ee:56:6c:da:be:5d:e6:4f:5d:35:
0a:de:1f:b2:9d:0a:4a:8f:3e:2d:27:10:b1:1a:31:
d7:8e:03:c2:8a:6a:10:85:89:79:43:d7:bd:f3:4d:
de:50:f0:c1:a7:d3:dc:ac:c5:7c:a4:04:0f:90:62:
00:af:cd:11:9c:be:72:9b:db:03:ff:2f:47:b0:3c:
af:56:2d:f7:c4:68:28:43:46:4c:58:af:dc:5d:35:
be:e0:af:8e:52:de:c2:e6:5f:8a:f7:ab:2d:41:32:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:12:3A:A4:E8:4D:86:33:65:4E:0C:01:A9:4D:15:4B:25:C7:9A
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4d:9c:39:62:3d:c5:f0:89:56:bd:d3:74:87:22:e4:26:d6:
1b:a8:ce:a7:9b:fe:35:3f:36:37:98:81:0c:1b:9f:00:51:6d:
a3:d7:e5:4f:52:b2:11:03:97:43:b6:1e:6a:f8:e6:f6:c9:fd:
9d:61:30:78:28:8a:77:0d:d7:53:24:b3:2b:4d:6c:60:49:c8:
ac:60:e6:08:11:13:53:b0:b5:33:62:a7:36:eb:6d:7c:8b:dd:
68:18:51:e5:9f:b4:e2:6c:59:8e:66:7c:12:10:01:53:49:5e:
45:f3:d7:3a:ad:10:68:de:f5:a1:89:af:fe:4b:db:88:d1:f0:
0e:92:ac:90:7f:9f:bd:a7:65:56:17:dd:e1:b4:14:55:66:a5:
dc:73:ca:b2:c6:a6:7a:5e:55:31:ea:23:da:b5:f8:b4:df:0c:
8d:6f:09:28:5b:c9:d3:ea:fd:23:d4:78:d5:06:8d:f7:23:7d:
ed:39:7b:42:99:81:a4:46:1a:fa:76:38:53:29:2b:26:92:26:
5a:b8:2c:64:e4:a7:10:bd:2b:93:12:f4:fb:8a:b5:04:5a:fa:
ba:06:af:a3:d3:10:f7:ba:6b:e6:1a:25:80:07:d0:47:86:e3:
d0:34:1d:48:94:08:d4:f6:93:c8:29:bf:0d:38:b0:fa:72:49:
02:3c:eb:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAI0STmlddIrE1boaBIpdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNzVkN2E4YmFjMDQ3N2Y1NTA5ZGZmMTFiOTE5NWNhNjBk
Zjg3ZGEwHhcNMjYxMDAzMDUwMTEzWhcNMjYxMDA0MDUwMTEzWjAzMTEwLwYDVQQD
Eyg3Y2ZkMTIzYWE0ZTg0ZDg2MzM2NTRlMGMwMWE5NGQxNTRiMjVjNzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgfqfWTDXx5kHJdHwAp02FJyrkDA
e7fNBJhZ+7uh3hZ7cQICNc/k15u75/qG7M28KUIdYlwzPUhKsEU8T3PgP7ZVg6bB
3Rlf9hLn2/BvgIGrbAuPO35IH9nlZ9uggaxSRHCDn1Ori08kAYOv3yGeXGfu3WWw
bie1IOpdfQ8sQFojSIVoNLqbMWE6H568OaMwXXYuSnluseMIyu5WbNq+XeZPXTUK
3h+ynQpKjz4tJxCxGjHXjgPCimoQhYl5Q9e9803eUPDBp9PcrMV8pAQPkGIAr80R
nL5ym9sD/y9HsDyvVi33xGgoQ0ZMWK/cXTW+4K+OUt7C5l+K96stQTKmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz9Ejqk6E2GM2VODAGpTRVLJceaMB8GA1UdIwQY
MBaAFNJ116i6wEd/VQnf8RuRlcpg34faMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQt
NTY1YjE0NDcwMzdiLzEvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQtNTY1YjE0NDcwMzdi
LzEvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy02cOWI9
xfCJVr3TdIci5CbWG6jOp5v+NT82N5iBDBufAFFto9flT1KyEQOXQ7Yeavjm9sn9
nWEweCiKdw3XUySzK01sYEnIrGDmCBETU7C1M2KnNuttfIvdaBhR5Z+04mxZjmZ8
EhABU0leRfPXOq0QaN71oYmv/kvbiNHwDpKskH+fvadlVhfd4bQUVWal3HPKssam
el5VMeoj2rX4tN8MjW8JKFvJ0+r9I9R41QaN9yN97Tl7QpmBpEYa+nY4UykrJpIm
WrgsZOSnEL0rkxL0+4q1BFr6ugavo9MQ97pr5holgAfQR4bj0DQdSJQI1PaTyCm/
DTiw+nJJAjzrBw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 16:03:00 2026 by rpki-client