Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
File: moidBLkf1wkovxGCfAlEQhytSjQ.mft (raw, json)
Hash identifier: 09fdof6BXV39TDhObbl2B2G1M5wmKjIiEgfGMH2PHgg=
Subject key identifier: 0E:9B:E4:AD:AB:7F:F0:36:FA:02:C6:87:C8:E6:9E:E7:F7:C2:7C:45
Authority key identifier: 9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
Certificate issuer: /CN=9a889d04b91fd70928bf11827c0944421cad4a34
Certificate serial: 01A1DB388D811E0347387A9D8548E2DD7820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
Manifest number: 0140
Signing time: Sat 14 Nov 2026 18:01:18 +0000
Manifest this update: Sat 14 Nov 2026 18:01:18 +0000
Manifest next update: Sun 15 Nov 2026 18:01:18 +0000
Files and hashes: 1: moidBLkf1wkovxGCfAlEQhytSjQ.crl (hash: VJSLjjBOBz3VKnqAbLtPNpd2jYn9og8fc8Olojat1w0=)
2: syeK9CuRFEI8WMGC-N6sOcltkCY.roa (hash: KOrLoavn62KKYkUh98qE+rNDjdVH+vCnvaVDIjJnLg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:8d:81:1e:03:47:38:7a:9d:85:48:e2:dd:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a889d04b91fd70928bf11827c0944421cad4a34
Validity
Not Before: Nov 14 18:01:18 2026 GMT
Not After : Nov 15 18:01:18 2026 GMT
Subject: CN=0e9be4adab7ff036fa02c687c8e69ee7f7c27c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:72:a4:eb:34:13:06:58:5c:af:f8:72:3c:
d7:30:5c:eb:4a:62:5e:22:ee:89:0b:8f:08:3f:d2:
07:04:e6:d3:17:7b:ac:70:46:bd:f2:a4:cd:f1:f7:
ae:ae:6f:30:47:ef:9d:2d:d1:4f:13:29:c1:25:26:
89:50:8d:95:d0:d5:c4:2e:d2:6d:f3:68:da:ee:8a:
51:bc:20:6e:b3:89:c0:23:3d:e6:2c:53:4b:29:25:
c4:9f:51:38:42:e1:83:66:b4:6f:10:55:f9:42:e8:
b0:f3:72:8a:9c:b1:44:63:0a:de:34:fc:ff:e2:fa:
94:c6:9a:49:ce:71:26:5f:0f:14:27:7c:9f:e7:b7:
3a:1f:f6:3e:fa:a4:04:47:ec:40:7e:2a:33:2c:a6:
ed:e6:ce:fe:86:2a:42:af:55:a5:80:81:4d:c7:cc:
82:88:ca:93:9f:4c:ae:a5:e5:59:db:d8:ae:77:38:
8b:da:e5:59:52:a2:b3:bd:60:2d:10:80:7d:61:7b:
4b:6f:f1:67:fa:91:02:30:35:fe:33:04:f7:5a:fb:
82:36:26:5d:1f:ac:8e:fd:47:aa:94:7e:34:15:f9:
1e:fc:d9:04:54:74:38:d1:af:78:21:a2:99:04:86:
d0:a9:c2:03:30:a4:df:a5:9e:08:ac:44:7a:09:44:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9B:E4:AD:AB:7F:F0:36:FA:02:C6:87:C8:E6:9E:E7:F7:C2:7C:45
X509v3 Authority Key Identifier:
keyid:9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c2:11:dc:17:69:90:49:2f:e7:eb:1e:83:24:e4:6b:9d:de:
30:21:1c:92:ed:c4:c1:e9:6f:8e:f7:67:f8:4e:a6:11:0d:28:
dd:c1:76:98:62:6d:7c:50:d7:b2:62:30:aa:f6:c9:38:3c:2b:
7d:36:0f:72:58:80:d0:e6:d9:0b:db:66:75:33:0b:71:3f:cc:
ec:d5:98:5e:a4:e1:99:dd:20:01:d8:08:27:1d:74:b5:19:2a:
a5:29:19:d4:2b:66:03:1a:7e:e9:58:99:af:d3:67:14:ac:b9:
39:6b:34:c3:d2:22:16:f4:04:51:d7:57:a4:fd:b3:34:74:17:
1d:2a:2e:c2:e5:b0:09:7b:24:4a:9e:88:f4:21:2d:65:b5:51:
12:fc:54:38:29:0a:9f:e9:3d:73:bc:06:d4:d1:72:40:f3:72:
44:fe:1c:2c:3d:21:ab:55:89:51:f8:6c:fd:49:14:de:20:0e:
16:50:fc:de:f7:18:b9:d4:8a:a2:84:e3:6e:e0:81:86:3f:99:
5a:0b:64:c4:6c:be:cf:4d:a0:42:a6:d6:a1:75:1b:9a:35:48:
9e:7c:80:82:c7:68:70:42:68:07:c6:53:d6:48:34:28:1e:58:
db:52:3a:47:01:50:41:66:ab:b5:5d:42:81:51:5b:4c:7e:43:
42:47:d3:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbOI2BHgNHOHqdhUji3XggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhODg5ZDA0YjkxZmQ3MDkyOGJmMTE4MjdjMDk0NDQyMWNh
ZDRhMzQwHhcNMjYxMTE0MTgwMTE4WhcNMjYxMTE1MTgwMTE4WjAzMTEwLwYDVQQD
EygwZTliZTRhZGFiN2ZmMDM2ZmEwMmM2ODdjOGU2OWVlN2Y3YzI3YzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilVypOs0EwZYXK/4cjzXMFzrSmJe
Iu6JC48IP9IHBObTF3uscEa98qTN8feurm8wR++dLdFPEynBJSaJUI2V0NXELtJt
82ja7opRvCBus4nAIz3mLFNLKSXEn1E4QuGDZrRvEFX5Quiw83KKnLFEYwreNPz/
4vqUxppJznEmXw8UJ3yf57c6H/Y++qQER+xAfiozLKbt5s7+hipCr1WlgIFNx8yC
iMqTn0yupeVZ29iudziL2uVZUqKzvWAtEIB9YXtLb/Fn+pECMDX+MwT3WvuCNiZd
H6yO/UeqlH40Ffke/NkEVHQ40a94IaKZBIbQqcIDMKTfpZ4IrER6CUSv9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6b5K2rf/A2+gLGh8jmnuf3wnxFMB8GA1UdIwQY
MBaAFJqInQS5H9cJKL8RgnwJREIcrUo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9pZEJMa2Yxd2tvdnhHQ2ZBbEVRaHl0U2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZWUwMTUtMjYyZS00OTQ3LThmNjct
YTI5YTRiYmQ1MmViLzEvbW9pZEJMa2Yxd2tvdnhHQ2ZBbEVRaHl0U2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83ZWUwMTUtMjYyZS00OTQ3LThmNjctYTI5YTRiYmQ1MmVi
LzEvbW9pZEJMa2Yxd2tvdnhHQ2ZBbEVRaHl0U2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMIR3Bdp
kEkv5+segyTka53eMCEcku3Ewelvjvdn+E6mEQ0o3cF2mGJtfFDXsmIwqvbJODwr
fTYPcliA0ObZC9tmdTMLcT/M7NWYXqThmd0gAdgIJx10tRkqpSkZ1CtmAxp+6ViZ
r9NnFKy5OWs0w9IiFvQEUddXpP2zNHQXHSouwuWwCXskSp6I9CEtZbVREvxUOCkK
n+k9c7wG1NFyQPNyRP4cLD0hq1WJUfhs/UkU3iAOFlD83vcYudSKooTjbuCBhj+Z
WgtkxGy+z02gQqbWoXUbmjVInnyAgsdocEJoB8ZT1kg0KB5Y21I6RwFQQWartV1C
gVFbTH5DQkfTFg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:57:44 2026 by rpki-client