Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: BLvoMh7skPgW9GceAuiP+WXeE+RWi01EDFkhOqidPLA=
Subject key identifier: 9C:C7:2E:EB:8A:7A:7F:5B:90:5D:02:57:15:FA:72:AA:C9:97:A7:62
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 01A1DA5CD4E6C59A70096B7E01E56D33F793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 087E
Signing time: Sat 14 Nov 2026 14:01:19 +0000
Manifest this update: Sat 14 Nov 2026 14:01:19 +0000
Manifest next update: Sun 15 Nov 2026 14:01:19 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: mLZDQYWuu62BwfR6RJZfoBV3YpK1cWXaC7qe/QFQk1A=)
2: 4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa (hash: Jse6W+LikeQvtYUhUSyUuHEBzEMpr4LWc8qS1sps7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:d4:e6:c5:9a:70:09:6b:7e:01:e5:6d:33:f7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: Nov 14 14:01:19 2026 GMT
Not After : Nov 15 14:01:19 2026 GMT
Subject: CN=9cc72eeb8a7a7f5b905d025715fa72aac997a762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:b5:4f:63:64:ef:5c:f1:f5:69:1b:3b:b4:
b6:ec:ec:b3:22:18:32:63:fa:bc:97:56:51:8c:8b:
86:33:83:4d:bb:d1:86:bb:24:f8:b4:05:2d:5f:6b:
d4:62:81:e5:a0:58:97:ff:f2:f5:76:02:18:5f:b5:
23:5a:71:fb:5f:51:bd:85:93:3a:21:ae:c6:0e:61:
75:c1:2d:0f:60:ea:a0:82:cf:14:64:cb:5a:ed:7f:
39:d2:e2:8e:f5:a7:81:7d:e2:3c:95:9c:99:0b:55:
d2:09:7c:e3:45:59:57:af:d6:2e:ca:f7:82:12:de:
a9:e5:73:67:1b:44:0b:c8:31:49:9a:73:e7:74:cc:
cd:1e:7d:ab:8f:fe:de:d8:7c:f5:37:54:7b:84:5a:
22:0b:07:f2:b7:f7:15:5e:3a:41:92:59:65:fb:ab:
51:8d:56:2b:9c:9f:1e:35:e0:32:61:12:52:83:0a:
b5:b0:5a:69:0b:e3:03:cc:e3:d2:ca:52:20:3d:19:
9e:5b:af:f1:da:b9:3f:06:a9:48:d8:3f:f7:b2:d0:
bb:2a:53:0f:d7:3c:c7:26:38:f5:26:bf:8a:40:2a:
5e:1a:d1:67:5d:f9:67:a8:42:41:b2:0a:2b:01:4b:
1e:7b:a9:2d:94:68:61:ea:aa:e5:63:81:94:c6:e2:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:2E:EB:8A:7A:7F:5B:90:5D:02:57:15:FA:72:AA:C9:97:A7:62
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:31:80:7a:98:5a:ad:b6:e0:a9:a0:2d:f3:75:2a:6b:b5:d5:
3a:10:c7:d7:6f:b1:24:5c:6d:a5:d3:a7:1d:55:e2:1a:01:da:
2d:37:0b:46:7e:25:8c:2b:a6:05:55:68:d8:25:a3:14:b9:c9:
33:db:37:7f:6a:03:df:42:83:72:e9:f6:74:80:1e:2a:89:dc:
b4:9c:58:25:1d:99:00:7f:ef:c2:2e:85:f3:33:fc:cc:dc:4c:
b9:3f:f8:4d:1d:c0:26:79:05:e0:8f:f0:8d:06:d1:6e:96:6f:
b0:57:8e:b5:25:2c:87:79:f4:8b:60:80:40:ee:0c:c7:0d:de:
58:b5:90:5e:0b:66:ef:0c:a4:31:19:7e:1c:da:15:48:59:13:
7a:a1:fd:db:f3:e1:4d:a4:7e:e4:23:83:c6:a9:5f:e0:d3:83:
b8:87:50:44:6b:f1:29:a2:5b:5c:ae:60:c2:b4:7b:c0:47:b2:
0c:00:c0:ae:b4:ee:dd:6c:96:f5:4f:9a:e1:ec:ec:75:4f:5c:
f8:a4:43:25:58:d7:65:55:2e:d7:c6:55:c1:a4:b7:32:04:50:
c9:f2:26:34:72:e6:8f:13:9b:ca:d1:5d:3b:9f:a7:4c:70:bd:
f6:a0:92:2d:3d:dc:47:9d:07:8c:dc:ac:90:78:0f:61:3e:1e:
70:7a:34:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHaXNTmxZpwCWt+AeVtM/eTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjIwODY2ZGE0OGUwYzdjZmZiZThjNzNhMzUxYzJhNDdi
MWE0ZGIwHhcNMjYxMTE0MTQwMTE5WhcNMjYxMTE1MTQwMTE5WjAzMTEwLwYDVQQD
Eyg5Y2M3MmVlYjhhN2E3ZjViOTA1ZDAyNTcxNWZhNzJhYWM5OTdhNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPm1T2Nk71zx9WkbO7S27OyzIhgy
Y/q8l1ZRjIuGM4NNu9GGuyT4tAUtX2vUYoHloFiX//L1dgIYX7UjWnH7X1G9hZM6
Ia7GDmF1wS0PYOqggs8UZMta7X850uKO9aeBfeI8lZyZC1XSCXzjRVlXr9YuyveC
Et6p5XNnG0QLyDFJmnPndMzNHn2rj/7e2Hz1N1R7hFoiCwfyt/cVXjpBklll+6tR
jVYrnJ8eNeAyYRJSgwq1sFppC+MDzOPSylIgPRmeW6/x2rk/BqlI2D/3stC7KlMP
1zzHJjj1Jr+KQCpeGtFnXflnqEJBsgorAUsee6ktlGhh6qrlY4GUxuKgBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzHLuuKen9bkF0CVxX6cqrJl6diMB8GA1UdIwQY
MBaAFNEiCGbaSODHz/voxzo1HCpHsaTbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUt
OTVlY2Q2NzE4ODg3LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUtOTVlY2Q2NzE4ODg3
LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTGAepha
rbbgqaAt83Uqa7XVOhDH12+xJFxtpdOnHVXiGgHaLTcLRn4ljCumBVVo2CWjFLnJ
M9s3f2oD30KDcun2dIAeKonctJxYJR2ZAH/vwi6F8zP8zNxMuT/4TR3AJnkF4I/w
jQbRbpZvsFeOtSUsh3n0i2CAQO4Mxw3eWLWQXgtm7wykMRl+HNoVSFkTeqH92/Ph
TaR+5CODxqlf4NODuIdQRGvxKaJbXK5gwrR7wEeyDADArrTu3WyW9U+a4ezsdU9c
+KRDJVjXZVUu18ZVwaS3MgRQyfImNHLmjxObytFdO5+nTHC99qCSLT3cR50HjNys
kHgPYT4ecHo0CQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:08 2026 by rpki-client