Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: jAqEy2ht1/LZ2LpIVKnDO+gpN30KgaaSbXIy8TUcw+A=
Subject key identifier: 87:FE:60:F1:5B:8C:F9:5D:D6:2B:A1:98:D6:37:B7:1F:13:5A:B0:76
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 019D270470114260126BD9BE0A600194CB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: lpW0546y7+c5BM3OIWGCsaGyX3fmVM5zbA9pH4mQtu4=)
2: SoEs2uq-Lqa7VWg8JFQCPgrt2eI.roa (hash: NiDI43uxk76Y1iaXH3S9JcI5gdDit0xy1S3yktJNiKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:70:11:42:60:12:6b:d9:be:0a:60:01:94:cb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=87fe60f15b8cf95dd62ba198d637b71f135ab076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:aa:eb:a2:6e:53:67:ef:78:75:ef:fe:fa:
8c:a0:5c:b7:a7:37:55:f9:7a:83:30:04:36:3e:6d:
2e:69:8e:d8:38:a6:e5:cc:da:15:19:fa:11:5a:1e:
93:8b:06:0c:df:46:7c:6f:68:e1:02:58:ea:17:37:
10:13:75:a1:3f:13:f2:10:03:ec:49:2f:f1:cb:de:
49:67:44:cb:97:99:b8:b3:88:ff:c0:68:33:ed:58:
4f:fa:a6:e0:9d:40:b8:fc:e4:b8:11:06:27:88:bb:
81:0e:91:f2:0c:45:11:3d:1e:f6:65:92:39:2c:d2:
25:c1:50:80:82:c6:1d:ab:8f:a8:55:7c:17:3e:24:
c7:df:10:6a:f9:c7:12:88:74:da:89:a7:17:84:d2:
4d:3a:f1:ab:38:51:e5:63:60:4f:7a:ba:78:ff:0d:
6a:32:e2:78:b5:f7:e5:9f:eb:0c:1b:11:32:01:a6:
9d:47:9c:ad:1b:1d:e8:4d:4e:57:97:3e:9c:96:7e:
2c:16:58:76:90:31:76:2e:f8:d2:2a:b2:90:20:e4:
3b:92:60:df:b5:88:ae:2c:98:b7:f6:1b:fc:e0:34:
98:40:6e:15:4a:8f:12:a4:ba:30:21:4d:74:a8:04:
ee:9f:98:ad:ab:07:f1:34:59:03:cd:ad:68:08:51:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:60:F1:5B:8C:F9:5D:D6:2B:A1:98:D6:37:B7:1F:13:5A:B0:76
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:65:28:af:56:d8:26:5c:4d:2c:e5:3f:ae:3d:38:82:a1:
3f:3f:ca:16:a1:bf:a6:18:fd:e4:15:04:40:91:e7:9e:65:da:
5a:7b:e7:0a:0f:03:1f:92:d1:8a:1e:67:e0:b7:52:35:d8:a3:
0b:c6:fa:7d:3e:9d:e1:58:28:d8:52:bf:de:8d:12:1b:02:96:
07:90:5e:5b:95:c7:ed:c0:87:67:94:84:cc:c9:58:ea:4e:4e:
bc:15:8b:84:49:eb:4b:7c:be:7d:45:b3:a4:cd:ca:0a:4e:76:
1f:b9:08:f4:d8:cb:3a:4b:18:27:87:77:8e:81:5f:4e:74:7a:
06:b6:04:36:43:ce:3f:52:45:54:47:a3:c8:1c:9a:3d:2c:b0:
95:ec:e8:3a:20:56:d1:6d:ad:aa:2a:3b:4e:cc:54:ff:bf:f4:
15:6a:d6:5b:09:91:46:53:3c:2e:6b:e3:9b:33:75:f5:82:ee:
d1:8b:dd:9d:38:24:14:9c:89:b7:7d:c8:4e:dc:ec:af:77:6f:
58:c1:d6:42:6e:88:76:34:13:ec:7e:13:48:5d:1c:bc:65:ce:
ad:6c:09:30:27:d2:be:52:e9:31:06:f8:8c:79:59:8a:7a:a1:
49:8b:13:e6:af:08:64:77:06:a8:69:79:3c:8f:eb:ab:e7:a9:
26:30:98:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHARQmASa9m+CmABlMsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjE3ZDE1ZGI1OGZlMzA2MmQxYmFkYmUwNGQzMGMxOTQ5
ZGQ1ZmYwHhcNMjYwMzI1MjIwMTM1WhcNMjYwMzI2MjIwMTM1WjAzMTEwLwYDVQQD
Eyg4N2ZlNjBmMTViOGNmOTVkZDYyYmExOThkNjM3YjcxZjEzNWFiMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqeq66JuU2fveHXv/vqMoFy3pzdV
+XqDMAQ2Pm0uaY7YOKblzNoVGfoRWh6TiwYM30Z8b2jhAljqFzcQE3WhPxPyEAPs
SS/xy95JZ0TLl5m4s4j/wGgz7VhP+qbgnUC4/OS4EQYniLuBDpHyDEURPR72ZZI5
LNIlwVCAgsYdq4+oVXwXPiTH3xBq+ccSiHTaiacXhNJNOvGrOFHlY2BPerp4/w1q
MuJ4tffln+sMGxEyAaadR5ytGx3oTU5Xlz6cln4sFlh2kDF2LvjSKrKQIOQ7kmDf
tYiuLJi39hv84DSYQG4VSo8SpLowIU10qATun5itqwfxNFkDza1oCFGIwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf+YPFbjPld1iuhmNY3tx8TWrB2MB8GA1UdIwQY
MBaAFNJhfRXbWP4wYtG62+BNMMGUndX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3Mjct
NTdlMDhmNjFmMmVjLzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3MjctNTdlMDhmNjFmMmVj
LzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEp5lKK9W
2CZcTSzlP649OIKhPz/KFqG/phj95BUEQJHnnmXaWnvnCg8DH5LRih5n4LdSNdij
C8b6fT6d4Vgo2FK/3o0SGwKWB5BeW5XH7cCHZ5SEzMlY6k5OvBWLhEnrS3y+fUWz
pM3KCk52H7kI9NjLOksYJ4d3joFfTnR6BrYENkPOP1JFVEejyByaPSywlezoOiBW
0W2tqio7TsxU/7/0FWrWWwmRRlM8LmvjmzN19YLu0YvdnTgkFJyJt33ITtzsr3dv
WMHWQm6IdjQT7H4TSF0cvGXOrWwJMCfSvlLpMQb4jHlZinqhSYsT5q8IZHcGqGl5
PI/rq+epJjCYUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:57 2026 by rpki-client