Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: ntDshxPmKn8PhOnUxxPyuAqHG1GKA60PNDqACuS6R9w=
Subject key identifier: 67:60:FF:B7:B2:E4:B7:75:80:36:F1:BD:8A:33:7A:9C:A8:58:29:9B
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 01A0D3B86CCBC7031072C7823886392ED2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 07F6
Signing time: Thu 24 Sep 2026 14:01:14 +0000
Manifest this update: Thu 24 Sep 2026 14:01:14 +0000
Manifest next update: Fri 25 Sep 2026 14:01:14 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: o2bjB7FcV9gF0S+TwI3JnT+bpNZKt2+NqAfQsrYYf80=)
2: 4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa (hash: Jse6W+LikeQvtYUhUSyUuHEBzEMpr4LWc8qS1sps7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:6c:cb:c7:03:10:72:c7:82:38:86:39:2e:d2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: Sep 24 14:01:14 2026 GMT
Not After : Sep 25 14:01:14 2026 GMT
Subject: CN=6760ffb7b2e4b7758036f1bd8a337a9ca858299b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:8c:89:43:a5:9f:e6:94:2f:73:ed:f9:d7:
f7:72:58:45:27:c7:0b:17:89:0b:8f:c6:80:f2:e3:
c4:dd:29:23:df:38:49:cf:0f:3d:33:10:fa:f0:71:
36:25:51:72:30:44:cf:1b:e8:91:73:03:08:f3:e0:
49:8f:0e:f3:2f:d2:4d:61:cc:26:4b:a3:d7:91:9b:
02:34:c6:3f:ff:0f:af:80:a0:4d:c9:15:9c:53:33:
ba:00:e5:72:30:4d:8d:a8:e4:0c:a9:c1:9f:c2:1d:
a2:4a:3d:ba:e9:4d:86:db:d4:2a:00:e6:f6:cc:4b:
ea:19:51:18:f5:85:b8:8e:6d:7f:1b:27:d5:87:c5:
b4:39:71:30:15:f9:f7:17:82:9e:6b:90:3d:44:97:
ab:af:9e:58:f4:7c:fb:c3:0c:ee:49:42:98:a6:4e:
cb:69:0d:70:f9:67:03:0a:4c:fb:61:1f:e9:bb:eb:
82:07:c2:60:a7:4f:ed:ab:cb:3c:34:82:87:85:e8:
09:ce:17:9a:17:dc:40:d4:61:63:a7:57:05:ba:8b:
d4:1b:48:dd:e2:10:14:a5:eb:ad:24:36:97:31:da:
2b:c1:60:74:0e:c2:32:7d:35:e3:ad:b0:d5:f3:f9:
ec:72:34:39:e4:36:a4:a3:6d:50:a0:99:7e:e3:c7:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:60:FF:B7:B2:E4:B7:75:80:36:F1:BD:8A:33:7A:9C:A8:58:29:9B
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ef:7a:a0:a5:60:7a:05:3a:45:08:6e:ac:68:c0:ba:48:34:
74:12:db:26:e5:cd:12:c7:05:49:9b:ca:e1:89:52:ca:ce:0d:
ba:51:2b:22:68:dc:ed:0d:c1:7e:c5:95:b3:54:c0:39:56:7e:
68:b0:ec:f9:e2:7c:fe:3e:a5:4c:fc:68:c4:4c:44:70:b3:5d:
ad:a3:16:92:c9:73:66:63:76:e0:dd:09:c3:0a:68:c1:8f:83:
ae:c1:5b:be:d5:d4:f1:ef:8b:83:ba:c4:b6:fb:cd:1a:e7:2c:
42:ff:3f:d0:d2:ba:18:dc:f4:33:69:3f:49:2a:5f:bf:be:b2:
2d:05:65:1b:69:a5:24:40:e7:d5:73:90:14:a6:be:bf:68:6c:
29:15:c0:49:38:e6:b1:05:02:3a:cf:e4:91:a5:a0:b0:65:5a:
27:14:73:79:e0:17:f1:82:b5:f0:7a:e5:09:62:54:1d:bf:c2:
61:69:61:cc:b4:cf:40:2c:38:39:41:38:de:8c:03:f6:93:69:
fa:30:34:7c:64:7b:6a:a6:a5:7e:4d:1e:bb:28:36:7e:7c:cc:
9d:41:c4:df:3e:c3:05:7e:1a:84:53:1f:91:72:1c:92:d3:69:
45:1a:f3:d8:3e:63:21:f2:16:f8:c5:94:22:27:1b:d5:a6:24:
0a:fe:d1:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuGzLxwMQcseCOIY5LtLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjIwODY2ZGE0OGUwYzdjZmZiZThjNzNhMzUxYzJhNDdi
MWE0ZGIwHhcNMjYwOTI0MTQwMTE0WhcNMjYwOTI1MTQwMTE0WjAzMTEwLwYDVQQD
Eyg2NzYwZmZiN2IyZTRiNzc1ODAzNmYxYmQ4YTMzN2E5Y2E4NTgyOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRGMiUOln+aUL3Pt+df3clhFJ8cL
F4kLj8aA8uPE3Skj3zhJzw89MxD68HE2JVFyMETPG+iRcwMI8+BJjw7zL9JNYcwm
S6PXkZsCNMY//w+vgKBNyRWcUzO6AOVyME2NqOQMqcGfwh2iSj266U2G29QqAOb2
zEvqGVEY9YW4jm1/GyfVh8W0OXEwFfn3F4Kea5A9RJerr55Y9Hz7wwzuSUKYpk7L
aQ1w+WcDCkz7YR/pu+uCB8Jgp0/tq8s8NIKHhegJzheaF9xA1GFjp1cFuovUG0jd
4hAUpeutJDaXMdorwWB0DsIyfTXjrbDV8/nscjQ55Dako21QoJl+48cDyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdg/7ey5Ld1gDbxvYozepyoWCmbMB8GA1UdIwQY
MBaAFNEiCGbaSODHz/voxzo1HCpHsaTbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUt
OTVlY2Q2NzE4ODg3LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUtOTVlY2Q2NzE4ODg3
LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+96oKVg
egU6RQhurGjAukg0dBLbJuXNEscFSZvK4YlSys4NulErImjc7Q3BfsWVs1TAOVZ+
aLDs+eJ8/j6lTPxoxExEcLNdraMWkslzZmN24N0JwwpowY+DrsFbvtXU8e+Lg7rE
tvvNGucsQv8/0NK6GNz0M2k/SSpfv76yLQVlG2mlJEDn1XOQFKa+v2hsKRXASTjm
sQUCOs/kkaWgsGVaJxRzeeAX8YK18HrlCWJUHb/CYWlhzLTPQCw4OUE43owD9pNp
+jA0fGR7aqalfk0euyg2fnzMnUHE3z7DBX4ahFMfkXIcktNpRRrz2D5jIfIW+MWU
Iicb1aYkCv7R6w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:16:19 2026 by rpki-client