Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: Y0UU1NHzEs+gAR8RQZSmc4IGXIkFEZSqT313iJ1K6OA=
Subject key identifier: 9E:10:39:D9:EA:FF:FC:31:DC:DE:8E:0E:C1:00:5D:22:CA:FA:C6:6A
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 01A1DE39A4E7BA183A58FF41973196529A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 08:01:22 +0000
Manifest this update: Sun 15 Nov 2026 08:01:22 +0000
Manifest next update: Mon 16 Nov 2026 08:01:22 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: ykGxrMO+d2xNDwIhWb3DKpJYO2xUzjg+oahl4K1jfvU=)
2: MZedXybYHwozV6I5FVF9kaQXqGw.roa (hash: 9GqJqyPbldCXpYPmuX8YAVKvtX3ZVzz/4Tffa0wjAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:a4:e7:ba:18:3a:58:ff:41:97:31:96:52:9a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Nov 15 08:01:22 2026 GMT
Not After : Nov 16 08:01:22 2026 GMT
Subject: CN=9e1039d9eafffc31dcde8e0ec1005d22cafac66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:5c:e9:9b:a0:67:f0:ea:29:f2:ec:c3:7d:
d3:2b:21:d0:81:f6:19:22:73:88:2c:ee:92:37:a3:
6b:a3:c0:6d:b7:37:62:72:34:e5:73:00:66:f5:60:
d9:1d:22:17:a2:05:fa:70:5c:fe:19:79:b0:ad:d9:
47:e8:bc:85:97:28:34:63:79:38:0d:ab:54:29:79:
7f:ff:af:4f:dc:8e:b3:8e:1e:21:8c:c1:c4:ba:cd:
f4:7c:c8:04:b5:22:9c:b4:9f:d8:fc:4d:54:9d:79:
41:38:32:2e:10:6d:e0:80:5f:3d:fd:c8:5c:53:33:
e0:c7:9a:53:05:05:3f:bf:00:c6:15:28:56:00:c3:
f2:a5:92:78:4e:e2:a9:cf:41:e4:c5:9e:54:e8:63:
7c:68:a6:51:fe:ff:f3:7f:0f:a5:73:88:ae:a5:ea:
03:9a:be:5a:4b:b4:5d:bd:7b:f7:9b:4a:0b:05:7d:
d7:92:51:91:4b:cf:ed:0a:43:2b:08:41:6e:a0:1b:
77:09:52:74:bf:1c:9c:ab:3a:b7:e6:56:f0:d0:63:
73:37:8e:d1:7f:89:cf:bb:a2:19:75:19:21:59:d5:
2b:50:cf:9f:85:b6:ba:84:cc:42:0e:67:14:0d:51:
2b:10:96:04:32:03:8f:8b:6c:30:8f:dc:d4:ea:b3:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:10:39:D9:EA:FF:FC:31:DC:DE:8E:0E:C1:00:5D:22:CA:FA:C6:6A
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:eb:a6:82:28:c5:eb:1a:d4:33:ef:75:d9:d5:69:24:5b:48:
a3:ea:60:06:5f:67:2d:5e:7d:66:10:ae:1b:23:67:0b:f3:ba:
67:eb:18:41:13:b0:e7:b7:f7:f0:e8:21:09:4b:71:87:69:de:
ae:98:cc:ba:d8:65:8f:1b:e4:36:9f:ec:f3:7b:73:d9:2e:ad:
17:d2:3d:d6:c0:69:fb:47:9a:80:30:42:c7:d6:ed:9b:dd:ac:
90:90:64:4d:1a:9f:94:23:6a:e9:cd:9c:3b:ac:47:65:ff:94:
b6:21:77:27:b4:e4:7f:b5:98:a5:2b:cc:f6:46:a0:7c:13:77:
73:a4:aa:dc:33:22:97:ce:fa:ca:f2:67:51:5a:95:40:e9:b3:
83:79:b4:87:28:7d:a3:0e:3c:59:9b:02:e0:cf:7c:16:0e:7c:
92:03:92:aa:fd:cf:3a:70:73:84:0b:05:65:71:82:b1:38:61:
95:cb:da:29:62:94:94:2a:b9:19:35:9e:e6:e7:64:eb:f7:31:
67:f3:14:d3:11:09:50:bc:d4:fd:f0:f6:dc:64:d6:2d:12:59:
79:03:02:8f:79:e9:3e:63:85:f4:2f:32:b6:13:ed:ca:83:88:
83:6a:cd:a0:5b:c5:77:a3:da:cf:4e:d8:9e:fd:65:64:85:6b:
f6:40:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:40:49 2026 by rpki-client