Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: zWD3JSUpSXYBiqHezk4coQZxl/rAudefHYEBCukhQR0=
Subject key identifier: 82:DE:8F:B9:15:1C:4D:6D:E7:5C:5E:A3:CA:CA:D0:C0:8C:59:1E:EB
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01A106C9FC1693836769BA0C3DB3876F2504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1A93
Signing time: Sun 04 Oct 2026 12:01:02 +0000
Manifest this update: Sun 04 Oct 2026 12:01:02 +0000
Manifest next update: Mon 05 Oct 2026 12:01:02 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: dyvbEMUuTSIB/p0dQGSF0zCiqkwn1CVQw4xNrT1bMQg=)
2: I5ohKLBmaxUTevQzWj4-q9pt2AE.roa (hash: vsHj8OGuxxJT7n23kvdJawzwXXsXNMGYAz3VXPfMYE8=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:c9:fc:16:93:83:67:69:ba:0c:3d:b3:87:6f:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Oct 4 12:01:02 2026 GMT
Not After : Oct 5 12:01:02 2026 GMT
Subject: CN=82de8fb9151c4d6de75c5ea3cacad0c08c591eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:7a:40:f1:e8:3b:39:e0:0c:d8:85:3d:8a:
a8:f4:cd:d1:6f:2f:39:41:49:71:bd:21:90:76:86:
48:c6:74:bb:ef:e0:73:87:5b:54:0c:26:55:ea:3e:
0e:e0:40:ac:36:3a:ec:1e:60:93:5d:b3:08:ad:83:
53:8f:84:42:9e:3b:8b:51:e7:09:08:16:f3:6d:05:
b8:c0:16:fc:63:1d:75:1b:c3:80:9d:f2:32:29:19:
55:a7:48:2d:9b:48:52:93:03:20:ec:ae:80:74:1e:
fd:e4:14:28:e9:6c:b6:ef:c5:ba:ce:d8:81:5f:c6:
ea:3d:0b:67:57:47:42:89:f6:b0:d3:da:38:7a:d6:
70:a7:c4:ee:3a:0a:7b:09:c8:ff:04:98:0b:9f:a1:
9a:37:aa:35:30:0c:c1:f7:3d:30:36:31:f3:11:43:
d1:1f:37:c0:1a:82:cd:79:f7:0b:10:ff:67:95:0c:
9a:16:d8:22:2f:cb:d2:54:29:a7:19:45:d3:f0:ea:
68:72:7f:66:3f:36:ef:71:20:65:a2:ed:51:86:63:
38:a5:9c:48:b3:4e:8e:b2:bb:21:59:ef:af:35:4d:
4c:23:08:66:75:32:83:ad:5a:40:af:21:99:57:f1:
e6:b4:0f:03:80:9c:51:dd:1d:e2:51:2f:83:c1:da:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DE:8F:B9:15:1C:4D:6D:E7:5C:5E:A3:CA:CA:D0:C0:8C:59:1E:EB
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c3:04:ff:56:0d:10:9a:65:4e:fb:b9:67:ba:4f:a3:85:6d:
ee:f7:5b:52:4a:36:f1:34:89:2f:58:b6:fe:a8:f3:5e:f2:8b:
9b:bc:dd:e0:b3:04:65:91:d7:bb:c0:c5:84:c6:d4:d1:e3:14:
ff:d0:65:ef:39:20:0d:a4:4e:de:9b:00:54:7e:0f:9e:bc:ab:
61:f1:31:66:1b:11:79:41:08:76:45:c4:0b:3e:10:4b:76:ea:
d8:36:f0:35:cc:82:63:75:b8:86:e5:5e:4f:6f:d5:85:b7:3f:
11:95:02:5f:ed:eb:4e:3d:b5:8d:d8:b8:b9:0e:7c:cc:36:b2:
bf:b4:45:a7:1d:f6:ec:76:fb:24:b1:0f:47:24:18:f8:05:05:
cc:c7:0b:56:20:7c:85:9a:47:10:cd:fe:98:c2:d3:60:f0:a4:
c2:83:f6:1b:03:55:61:b3:2d:a9:fc:25:46:34:ec:78:49:75:
2e:e9:f4:2f:38:fd:26:04:7c:12:78:83:a8:77:09:f1:ce:84:
56:4c:ca:e6:30:b4:53:14:c4:8a:0a:a0:bd:1b:ab:78:ea:6a:
c9:e9:17:40:68:8f:55:17:d3:56:64:71:8d:7b:6a:1d:07:37:
7d:03:f7:40:d2:26:ae:2f:ac:b7:a3:bb:06:9e:57:d1:52:45:
43:ff:f4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:14:43 2026 by rpki-client