Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: qFJxsLONKXE93bKNgCcAE7jM+salCmWZ7Af32TXOm94=
Subject key identifier: 99:A9:EF:DA:26:BB:8E:CA:B6:C5:6F:24:82:47:34:B2:E0:72:1F:8E
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 01A0CE915F89BCADFA2A737D83EA5627CC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 13DC
Signing time: Wed 23 Sep 2026 14:00:28 +0000
Manifest this update: Wed 23 Sep 2026 14:00:28 +0000
Manifest next update: Thu 24 Sep 2026 14:00:28 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: fGFgQm23trbITWNlrZFQtBDBBDE8Pb0t+aT12Rd+r30=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:5f:89:bc:ad:fa:2a:73:7d:83:ea:56:27:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Sep 23 14:00:28 2026 GMT
Not After : Sep 24 14:00:28 2026 GMT
Subject: CN=99a9efda26bb8ecab6c56f24824734b2e0721f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:4e:68:98:73:f1:3c:df:32:d9:71:57:61:
fb:b1:f6:52:be:b5:68:8c:cd:b7:60:af:4b:2c:32:
12:89:34:9c:9d:c0:74:a7:bf:69:ab:99:ba:e0:ae:
5b:b2:1b:53:4b:d5:36:ad:6b:cf:8e:fe:39:b6:3c:
f5:68:a6:88:66:5f:5c:fc:b5:1a:bf:94:e0:6c:ec:
5f:f5:62:a9:60:ad:98:74:53:f4:0a:89:01:c7:c0:
ba:c9:b4:f6:3d:e2:af:10:77:e8:79:9d:46:51:df:
f7:01:c8:34:fe:8e:ee:52:f0:d7:97:6d:b9:01:f8:
87:d4:b6:2c:07:9b:6e:6e:a0:5f:52:f6:8a:71:76:
4c:7b:8b:3a:36:76:c5:fe:70:3e:52:b5:a9:46:c2:
21:6d:68:ba:cb:ee:34:c3:93:ac:93:d6:d9:b5:35:
58:2f:7f:07:06:0f:e6:e6:e0:2b:62:1d:04:8d:63:
25:08:09:c6:ac:a4:bb:fe:2d:02:57:9d:8c:87:27:
7f:9a:ec:bd:b9:12:d6:c4:3d:5b:45:b1:b5:34:00:
0a:14:7b:51:87:60:c5:33:5d:bb:1c:83:3c:d3:e8:
71:e8:b2:3f:5c:d8:88:bd:dc:56:4f:7e:1e:9b:ae:
8b:d4:c8:1b:4c:e0:92:9a:a7:22:ab:4c:29:3a:14:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:EF:DA:26:BB:8E:CA:B6:C5:6F:24:82:47:34:B2:E0:72:1F:8E
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:db:87:5a:a8:d8:ab:b6:bf:ff:ce:66:da:6b:b4:02:d5:0b:
73:e2:04:07:9b:44:5c:6e:b0:a0:0c:00:fe:d0:01:d2:a0:7f:
1b:5a:c1:c8:fc:a0:25:59:7a:e5:fc:78:13:f1:72:cc:4c:31:
82:5c:42:18:db:d1:cc:81:3f:14:72:9f:8d:63:32:d7:63:ad:
ab:a9:d8:9b:37:67:7a:e8:d5:3c:46:b0:65:9c:20:13:b9:f6:
59:ce:2c:df:64:39:95:68:bf:18:3b:6e:de:ed:84:fb:97:b8:
8d:3b:22:a3:6e:dc:ac:36:c3:70:df:e0:91:d5:c4:9a:cb:57:
77:8e:b4:88:b8:69:43:45:1f:0e:0d:0f:71:98:57:93:91:e6:
b0:c7:98:62:14:b0:68:3e:eb:22:2f:cf:cb:45:8b:fd:25:27:
89:22:c7:1e:be:98:85:58:af:18:ee:e5:14:40:48:8b:f4:cb:
74:07:eb:5a:39:bd:c6:07:e2:48:56:c8:32:da:af:ed:a4:8c:
01:b6:02:ae:92:12:32:bd:42:7e:15:be:06:0d:fb:94:99:99:
68:49:e8:14:14:65:50:15:b9:53:3d:3f:62:72:87:9f:33:a6:
a0:62:b9:b6:2d:7d:22:9b:8d:b0:64:b5:c4:4f:7d:75:d9:73:
89:3b:8c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkV+JvK36KnN9g+pWJ8w+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMDNhZjE5NzY0NWE0OTQxYzZjZGIwODY2OWFmMDA4Yjc5
MTAyYmUwHhcNMjYwOTIzMTQwMDI4WhcNMjYwOTI0MTQwMDI4WjAzMTEwLwYDVQQD
Eyg5OWE5ZWZkYTI2YmI4ZWNhYjZjNTZmMjQ4MjQ3MzRiMmUwNzIxZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+BOaJhz8TzfMtlxV2H7sfZSvrVo
jM23YK9LLDISiTScncB0p79pq5m64K5bshtTS9U2rWvPjv45tjz1aKaIZl9c/LUa
v5TgbOxf9WKpYK2YdFP0CokBx8C6ybT2PeKvEHfoeZ1GUd/3Acg0/o7uUvDXl225
AfiH1LYsB5tubqBfUvaKcXZMe4s6NnbF/nA+UrWpRsIhbWi6y+40w5Osk9bZtTVY
L38HBg/m5uArYh0EjWMlCAnGrKS7/i0CV52Mhyd/muy9uRLWxD1bRbG1NAAKFHtR
h2DFM127HIM80+hx6LI/XNiIvdxWT34em66L1MgbTOCSmqciq0wpOhTPAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmp79omu47KtsVvJIJHNLLgch+OMB8GA1UdIwQY
MBaAFNEDrxl2RaSUHGzbCGaa8Ai3kQK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDkt
N2RiM2VjNmZhMzAyLzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDktN2RiM2VjNmZhMzAy
LzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtuHWqjY
q7a//85m2mu0AtULc+IEB5tEXG6woAwA/tAB0qB/G1rByPygJVl65fx4E/FyzEwx
glxCGNvRzIE/FHKfjWMy12Otq6nYmzdneujVPEawZZwgE7n2Wc4s32Q5lWi/GDtu
3u2E+5e4jTsio27crDbDcN/gkdXEmstXd460iLhpQ0UfDg0PcZhXk5HmsMeYYhSw
aD7rIi/Py0WL/SUniSLHHr6YhVivGO7lFEBIi/TLdAfrWjm9xgfiSFbIMtqv7aSM
AbYCrpISMr1CfhW+Bg37lJmZaEnoFBRlUBW5Uz0/YnKHnzOmoGK5ti19IpuNsGS1
xE99ddlziTuMcw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:36:30 2026 by rpki-client