Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: HlnLQsBGihhXny0Nr8M4MyutcRs+ytg7ZHGcAi4vx2o=
Subject key identifier: 31:18:BA:07:04:5C:79:3E:0B:3C:20:E3:B4:CB:34:00:41:20:CF:56
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 01A0D8A83091893B27325D38E6D66C4ABFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0F92
Signing time: Fri 25 Sep 2026 13:01:36 +0000
Manifest this update: Fri 25 Sep 2026 13:01:36 +0000
Manifest next update: Sat 26 Sep 2026 13:01:36 +0000
Files and hashes: 1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=)
2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: BaR7GRzqPVtaN07AEovQ2CnHgydF0T6RmEv+opzjSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:30:91:89:3b:27:32:5d:38:e6:d6:6c:4a:bf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Sep 25 13:01:36 2026 GMT
Not After : Sep 26 13:01:36 2026 GMT
Subject: CN=3118ba07045c793e0b3c20e3b4cb34004120cf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:b4:01:b3:77:3d:13:d2:12:00:3a:77:41:
4c:95:d2:61:5c:3f:22:77:36:c8:43:97:6b:3f:cb:
78:c8:36:e6:d4:1e:01:77:25:d3:cc:ce:8c:4e:19:
b4:a3:c8:3f:2c:5e:3b:d6:28:50:68:ea:df:02:3e:
73:18:74:c4:20:a0:0e:13:e7:bb:f7:ea:a7:d7:44:
50:42:92:f8:e7:6f:30:df:64:54:21:ba:b3:e7:2d:
1f:14:a6:92:af:d2:45:78:c0:81:ac:b4:c5:2c:90:
ec:1f:6f:a0:0a:99:47:8f:c2:39:b4:e8:62:67:8f:
28:9a:95:eb:34:fa:62:cf:66:6b:dd:a9:93:33:54:
2f:7a:bc:7e:02:86:ab:97:90:26:ce:81:ec:07:eb:
7f:4f:1d:15:79:00:44:74:a9:37:cb:98:f0:ce:b3:
8d:45:d7:76:f9:ef:6d:20:bc:3c:cc:9e:d2:88:2b:
ad:ba:eb:88:71:27:ce:30:a5:f5:85:1d:b1:a2:f9:
41:ff:4c:3b:af:c3:3b:f1:90:57:00:4f:18:be:64:
0c:8f:06:6f:7c:5f:5e:67:9d:34:97:82:91:59:d6:
93:fe:7d:57:cc:24:bc:0c:28:5e:ca:c5:59:eb:03:
29:51:22:7f:12:c9:fe:af:d6:a6:d5:7f:01:2a:f3:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:BA:07:04:5C:79:3E:0B:3C:20:E3:B4:CB:34:00:41:20:CF:56
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:69:d9:5a:58:39:f7:13:69:c2:d5:69:69:65:92:8d:99:65:
77:49:de:46:f3:5b:d0:de:1b:33:64:68:fb:e7:92:8f:e5:9e:
92:08:60:4d:c5:e7:e3:50:3f:68:a1:bc:58:3f:56:40:9c:94:
70:2c:09:5f:95:10:f3:d2:d2:b3:11:4c:53:c2:b7:57:9f:cf:
11:b8:ae:9f:80:c3:a5:59:1c:d1:88:1a:8a:f9:1f:8c:0b:7b:
b1:59:f9:9c:4a:ff:fb:32:cb:01:a8:7f:35:4e:35:b7:3f:7c:
07:80:81:46:cf:7d:07:49:39:4a:d2:99:a8:cc:a3:1d:17:fa:
87:67:c5:36:f0:cc:b5:d9:88:5d:31:e9:f6:4a:7a:44:7c:8a:
1f:d4:0a:04:1f:22:5e:b2:ce:ce:40:81:f4:96:ff:c2:76:53:
0b:e0:48:cd:1a:0b:8b:41:45:fb:f6:c6:4d:fd:4b:92:5b:c2:
c7:f2:a5:45:1c:b3:a0:6b:92:69:bd:79:6a:88:fc:3d:59:f0:
89:36:d6:25:e4:a5:52:9f:18:4b:8b:b7:b7:e9:d1:a7:93:ca:
8e:ce:de:75:41:c7:37:67:c5:2c:59:d7:0f:a9:66:ef:c6:3c:
b2:d1:97:3e:2b:94:17:5c:7e:b2:d3:4b:70:87:52:e6:a7:4b:
bf:bf:fb:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqDCRiTsnMl045tZsSr/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNmY2ZDExZjBjZTYzMjMwMTgxYTczZjg1YTY2NjE3MGY3
Mzg5YmQwHhcNMjYwOTI1MTMwMTM2WhcNMjYwOTI2MTMwMTM2WjAzMTEwLwYDVQQD
EygzMTE4YmEwNzA0NWM3OTNlMGIzYzIwZTNiNGNiMzQwMDQxMjBjZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FO0AbN3PRPSEgA6d0FMldJhXD8i
dzbIQ5drP8t4yDbm1B4BdyXTzM6MThm0o8g/LF471ihQaOrfAj5zGHTEIKAOE+e7
9+qn10RQQpL4528w32RUIbqz5y0fFKaSr9JFeMCBrLTFLJDsH2+gCplHj8I5tOhi
Z48ompXrNPpiz2Zr3amTM1Qverx+Aoarl5AmzoHsB+t/Tx0VeQBEdKk3y5jwzrON
Rdd2+e9tILw8zJ7SiCutuuuIcSfOMKX1hR2xovlB/0w7r8M78ZBXAE8YvmQMjwZv
fF9eZ500l4KRWdaT/n1XzCS8DCheysVZ6wMpUSJ/Esn+r9am1X8BKvOJWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEYugcEXHk+Czwg47TLNABBIM9WMB8GA1UdIwQY
MBaAFHFvbRHwzmMjAYGnP4WmZhcPc4m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTIt
ZTNmNDlhYzQ5NTYwLzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTItZTNmNDlhYzQ5NTYw
LzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWnZWlg5
9xNpwtVpaWWSjZlld0neRvNb0N4bM2Ro++eSj+WekghgTcXn41A/aKG8WD9WQJyU
cCwJX5UQ89LSsxFMU8K3V5/PEbiun4DDpVkc0YgaivkfjAt7sVn5nEr/+zLLAah/
NU41tz98B4CBRs99B0k5StKZqMyjHRf6h2fFNvDMtdmIXTHp9kp6RHyKH9QKBB8i
XrLOzkCB9Jb/wnZTC+BIzRoLi0FF+/bGTf1LklvCx/KlRRyzoGuSab15aoj8PVnw
iTbWJeSlUp8YS4u3t+nRp5PKjs7edUHHN2fFLFnXD6lm78Y8stGXPiuUF1x+stNL
cIdS5qdLv7/78Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:46:55 2026 by rpki-client