Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: AgL0tazJwKThnUNsWsaRmFGH5qstobO6wNU/SXogLJo=
Subject key identifier: 43:8B:CE:BD:44:E4:94:62:A3:EE:C3:6C:7E:28:ED:36:76:20:3E:B8
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 01A0D2005CC9A6F658089DCA6BC0CF1C84C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 06:00:34 +0000
Manifest this update: Thu 24 Sep 2026 06:00:34 +0000
Manifest next update: Fri 25 Sep 2026 06:00:34 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: fdjPrsWWW9kEQzbLdglRpPgtjviGO1O9LMhjDP/Q+bE=)
2: i7JFrF70bzBo-gwwIdRO8VszDSY.roa (hash: tGNZRPLTTkwJbCKJRv1gdNJVG7D13l/23dduFfdxkF8=)
3: j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa (hash: 8oVyr5bD2ep8rJ+/mCDqgEEEeQzSBWCENnyJGHUEE6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:5c:c9:a6:f6:58:08:9d:ca:6b:c0:cf:1c:84:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Sep 24 06:00:34 2026 GMT
Not After : Sep 25 06:00:34 2026 GMT
Subject: CN=438bcebd44e49462a3eec36c7e28ed3676203eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:42:43:3d:c9:c7:5f:46:60:d7:f3:46:2a:
92:46:c3:57:1f:1c:be:95:ab:8b:3b:d1:b9:c1:b1:
b3:89:dd:82:da:d1:ba:77:df:1c:c7:36:46:77:45:
37:30:16:10:36:05:da:af:00:e0:e3:b8:96:4b:da:
88:3e:49:bb:09:eb:fe:41:4b:18:ec:8c:11:95:71:
ce:f0:11:2f:89:b4:23:fa:df:f4:f9:a8:c2:0c:6b:
8f:ef:45:ab:fe:14:3b:08:d2:ad:2f:2d:82:0a:66:
e8:3d:fe:4e:71:09:05:1e:b7:7b:09:fa:25:84:3f:
18:c8:78:2b:7e:28:9d:7c:64:cd:08:17:40:cc:2b:
17:b8:ed:c0:ba:3e:3f:20:b2:64:68:1d:8d:07:6e:
51:c6:01:a3:0c:27:12:b3:c9:7e:fd:c4:90:84:29:
9d:17:53:1a:51:d0:01:19:8c:e2:43:44:6a:b4:39:
a6:e2:e0:51:21:0d:6b:97:f7:6d:e2:3b:20:b0:dd:
25:72:a0:aa:08:15:fa:96:f9:24:c9:38:f8:bc:68:
bb:15:62:f3:83:eb:b2:98:34:7e:ae:cd:82:8c:66:
33:26:39:37:7a:58:03:a9:df:1c:aa:43:81:52:90:
07:ac:25:65:04:db:ea:2c:2c:e8:95:7f:8f:fa:8e:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:CE:BD:44:E4:94:62:A3:EE:C3:6C:7E:28:ED:36:76:20:3E:B8
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:40:0a:14:ea:ac:14:35:2a:eb:1e:79:d0:f3:a9:d1:fa:ce:
ad:66:37:5c:e3:0c:f4:2b:8a:af:d8:36:e7:44:ed:2e:f6:a3:
10:cc:ec:8f:42:e3:11:dc:0a:fe:06:dc:4a:b3:73:63:d6:51:
c3:95:25:46:d2:dd:20:ed:ac:ef:44:51:c2:e7:52:98:ed:ed:
d7:16:1b:66:b3:c2:31:9e:71:f3:66:7b:59:27:1f:7b:1f:06:
1d:be:d3:28:20:88:df:ea:17:f2:b5:0d:2c:7c:15:7f:99:48:
14:4a:aa:ef:ce:a6:91:e2:6d:ec:ce:50:b0:76:eb:47:ff:35:
45:11:9a:cd:bd:47:b6:7b:d5:42:ab:4b:0b:66:f7:f6:ca:bd:
f8:42:c0:9d:75:c6:aa:6c:ed:7d:a3:a8:27:2f:29:4e:1d:3e:
f8:28:d4:7b:7d:8b:b2:48:5e:5b:b9:c7:b0:e3:98:c7:01:9a:
fa:17:37:02:5a:20:c8:18:d7:23:4d:d4:a0:3d:dc:f9:bc:70:
12:20:7e:2c:5a:03:de:c8:80:c0:61:32:2b:bf:aa:e8:d2:fa:
f1:44:e4:d1:cd:7c:b6:d8:6b:03:15:f4:1b:4c:e1:6d:ee:fd:
60:da:1a:8f:93:6a:f2:7b:e6:46:41:c8:f3:df:b3:ed:4d:b2:
cc:9d:40:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAFzJpvZYCJ3Ka8DPHITBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzgxYjFkMDI4ZjJhZjYxZWE5YjQyMjY3OWE1ZjhkZTkw
NTcyZTcwHhcNMjYwOTI0MDYwMDM0WhcNMjYwOTI1MDYwMDM0WjAzMTEwLwYDVQQD
Eyg0MzhiY2ViZDQ0ZTQ5NDYyYTNlZWMzNmM3ZTI4ZWQzNjc2MjAzZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kdCQz3Jx19GYNfzRiqSRsNXHxy+
lauLO9G5wbGzid2C2tG6d98cxzZGd0U3MBYQNgXarwDg47iWS9qIPkm7Cev+QUsY
7IwRlXHO8BEvibQj+t/0+ajCDGuP70Wr/hQ7CNKtLy2CCmboPf5OcQkFHrd7Cfol
hD8YyHgrfiidfGTNCBdAzCsXuO3Auj4/ILJkaB2NB25RxgGjDCcSs8l+/cSQhCmd
F1MaUdABGYziQ0RqtDmm4uBRIQ1rl/dt4jsgsN0lcqCqCBX6lvkkyTj4vGi7FWLz
g+uymDR+rs2CjGYzJjk3elgDqd8cqkOBUpAHrCVlBNvqLCzolX+P+o7XSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOLzr1E5JRio+7DbH4o7TZ2ID64MB8GA1UdIwQY
MBaAFNLIGx0Cjyr2Hqm0ImeaX43pBXLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNnYkhRS1BLdlllcWJRaVo1cGZqZWtGY3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMjc1ZmUtODZmMC00MWU5LTgyNjMt
NjlkYjZhOGY1OGQ3LzEvMHNnYkhRS1BLdlllcWJRaVo1cGZqZWtGY3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMjc1ZmUtODZmMC00MWU5LTgyNjMtNjlkYjZhOGY1OGQ3
LzEvMHNnYkhRS1BLdlllcWJRaVo1cGZqZWtGY3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEAKFOqs
FDUq6x550POp0frOrWY3XOMM9CuKr9g250TtLvajEMzsj0LjEdwK/gbcSrNzY9ZR
w5UlRtLdIO2s70RRwudSmO3t1xYbZrPCMZ5x82Z7WScfex8GHb7TKCCI3+oX8rUN
LHwVf5lIFEqq786mkeJt7M5QsHbrR/81RRGazb1HtnvVQqtLC2b39sq9+ELAnXXG
qmztfaOoJy8pTh0++CjUe32LskheW7nHsOOYxwGa+hc3AlogyBjXI03UoD3c+bxw
EiB+LFoD3siAwGEyK7+q6NL68UTk0c18tthrAxX0G0zhbe79YNoaj5Nq8nvmRkHI
89+z7U2yzJ1A/A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:48:47 2026 by rpki-client