Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
File: 0IaqHaAvZwEYCywDQdYDB_FKLL4.mft (raw, json)
Hash identifier: X2veKk3TdsNZe+PQ+c5rkaLquAyN0neHzuVCDI/dIfU=
Subject key identifier: F7:5D:3B:05:17:AD:C1:F8:AA:A1:ED:BC:65:1B:AF:EB:77:E1:0D:0D
Authority key identifier: D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
Certificate issuer: /CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Certificate serial: 01A0CF35CB57C26D9F2089814B0E35A70EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
Manifest number: 0203
Signing time: Wed 23 Sep 2026 17:00:04 +0000
Manifest this update: Wed 23 Sep 2026 17:00:04 +0000
Manifest next update: Thu 24 Sep 2026 17:00:04 +0000
Files and hashes: 1: 0IaqHaAvZwEYCywDQdYDB_FKLL4.crl (hash: TGtZaXt5wIv3eqDsjjnFNNfCncarD5M4MJlC/12WP5M=)
2: 3A95eT0-F8FWn0aRvaXeJYEs4vU.roa (hash: LYh5oBJnNPibPoXaGK/ua+lzHz0SVEi30h9T4GjLlU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:cb:57:c2:6d:9f:20:89:81:4b:0e:35:a7:0e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Validity
Not Before: Sep 23 17:00:04 2026 GMT
Not After : Sep 24 17:00:04 2026 GMT
Subject: CN=f75d3b0517adc1f8aaa1edbc651bafeb77e10d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:8d:89:89:3e:85:94:e1:1d:24:c0:0f:25:
df:00:f6:23:10:4d:e6:7c:3d:95:da:6b:d1:61:23:
6b:a5:c6:e4:f6:51:f0:66:2b:c8:f9:78:1c:c1:7d:
ee:e4:70:72:5a:eb:a4:67:0d:d3:17:07:b7:94:7f:
30:ac:37:58:15:97:9f:81:3c:79:5a:41:14:bd:51:
28:54:47:aa:3e:7d:d7:99:a9:c9:cf:81:99:f5:5c:
8f:d7:56:9f:35:d7:3e:32:69:cf:29:9e:1f:6f:27:
ee:03:80:d0:86:aa:85:5a:19:b8:32:8a:c4:d5:c6:
7c:e4:74:89:a1:16:a3:aa:a1:43:bc:ce:44:78:3d:
e3:84:d7:e8:37:0e:68:c9:80:3b:3d:ee:d0:8e:21:
56:10:b1:ca:50:11:64:9b:9e:08:a7:30:03:35:9a:
23:cd:af:0c:73:ee:e7:fd:6c:d6:5c:cd:5b:ef:55:
b9:28:57:33:a6:5c:ba:7f:d3:21:ed:e4:d3:96:01:
62:16:07:17:a0:11:6c:a9:95:ac:6d:b7:65:6d:06:
90:2b:e4:79:53:3e:a3:2c:9c:16:0c:6b:d2:a1:a9:
ff:86:9a:7c:50:d7:b8:04:04:53:07:d2:9c:47:06:
48:86:1d:7b:2d:89:ab:92:dd:69:61:eb:c0:f3:32:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5D:3B:05:17:AD:C1:F8:AA:A1:ED:BC:65:1B:AF:EB:77:E1:0D:0D
X509v3 Authority Key Identifier:
keyid:D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4f:79:63:63:d5:6f:5e:1b:43:a3:80:62:9e:a7:16:55:5e:
97:e6:47:e6:0a:37:9f:97:43:d0:d7:0a:d2:27:df:e6:e1:6f:
0b:10:43:64:6b:ff:85:71:a8:ae:ab:c7:c5:34:82:07:ea:64:
c1:3c:8d:5d:a0:7a:47:75:39:02:80:06:ec:cd:f4:93:ad:f4:
28:dd:7c:3f:97:96:58:b1:0f:2f:0e:26:0b:48:1c:c8:6b:40:
78:70:01:a2:d1:d7:08:e8:da:f4:14:cb:c8:d9:e7:47:13:fe:
f4:23:b5:ef:d1:e2:dc:48:4c:94:9c:1f:d9:3f:e5:7c:55:58:
a9:5e:1a:36:62:a8:89:b7:cb:fb:32:bb:dd:2f:05:7a:53:30:
2a:f2:84:ca:a4:5c:60:94:99:bf:37:42:7f:a6:7c:7d:bf:d1:
4b:21:73:09:af:a0:4d:7e:28:df:95:9f:57:b3:9f:02:fb:20:
54:88:eb:e3:93:81:19:16:04:8b:3e:00:e3:28:d9:03:c6:e7:
bc:24:f5:4f:66:75:89:e5:d6:ec:7a:a1:57:bd:97:f4:31:aa:
72:d5:a0:b2:73:7c:79:35:81:01:50:24:50:4b:e3:01:f1:80:
15:e6:ac:58:a5:ea:85:f3:79:96:2f:c7:aa:8f:c8:40:7a:25:
d9:c8:db:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNctXwm2fIImBSw41pw64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwODZhYTFkYTAyZjY3MDExODBiMmMwMzQxZDYwMzA3ZjE0
YTJjYmUwHhcNMjYwOTIzMTcwMDA0WhcNMjYwOTI0MTcwMDA0WjAzMTEwLwYDVQQD
EyhmNzVkM2IwNTE3YWRjMWY4YWFhMWVkYmM2NTFiYWZlYjc3ZTEwZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHGNiYk+hZThHSTADyXfAPYjEE3m
fD2V2mvRYSNrpcbk9lHwZivI+XgcwX3u5HByWuukZw3TFwe3lH8wrDdYFZefgTx5
WkEUvVEoVEeqPn3XmanJz4GZ9VyP11afNdc+MmnPKZ4fbyfuA4DQhqqFWhm4MorE
1cZ85HSJoRajqqFDvM5EeD3jhNfoNw5oyYA7Pe7QjiFWELHKUBFkm54IpzADNZoj
za8Mc+7n/WzWXM1b71W5KFczply6f9Mh7eTTlgFiFgcXoBFsqZWsbbdlbQaQK+R5
Uz6jLJwWDGvSoan/hpp8UNe4BARTB9KcRwZIhh17LYmrkt1pYevA8zIh/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPddOwUXrcH4qqHtvGUbr+t34Q0NMB8GA1UdIwQY
MBaAFNCGqh2gL2cBGAssA0HWAwfxSiy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMElhcUhhQXZad0VZQ3l3RFFkWURCX0ZLTEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NzNhNzAtNzUwNC00MzA4LTkzMTQt
YmYxMzNhZjFlZGNjLzEvMElhcUhhQXZad0VZQ3l3RFFkWURCX0ZLTEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NzNhNzAtNzUwNC00MzA4LTkzMTQtYmYxMzNhZjFlZGNj
LzEvMElhcUhhQXZad0VZQ3l3RFFkWURCX0ZLTEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdU95Y2PV
b14bQ6OAYp6nFlVel+ZH5go3n5dD0NcK0iff5uFvCxBDZGv/hXGorqvHxTSCB+pk
wTyNXaB6R3U5AoAG7M30k630KN18P5eWWLEPLw4mC0gcyGtAeHABotHXCOja9BTL
yNnnRxP+9CO179Hi3EhMlJwf2T/lfFVYqV4aNmKoibfL+zK73S8FelMwKvKEyqRc
YJSZvzdCf6Z8fb/RSyFzCa+gTX4o35WfV7OfAvsgVIjr45OBGRYEiz4A4yjZA8bn
vCT1T2Z1ieXW7HqhV72X9DGqctWgsnN8eTWBAVAkUEvjAfGAFeasWKXqhfN5li/H
qo/IQHol2cjb3g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:18:32 2026 by rpki-client