Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: ncnk6lpRsdSp3+Q01d3hw4iJKW2fAIOBAkPlroRxLMA=
Subject key identifier: 20:44:4B:78:DD:F4:CC:8B:83:2E:7A:94:24:15:00:59:F0:D1:95:F9
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 019D26CD7288CAD0458F76F405C122CED0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0C8B
Signing time: Wed 25 Mar 2026 21:01:31 +0000
Manifest this update: Wed 25 Mar 2026 21:01:31 +0000
Manifest next update: Thu 26 Mar 2026 21:01:31 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: wVPxjqTOzAyjj+zkKxRrHD/6xnzmWGGsqM7/y888Jio=)
2: iGY_Mv10YgE-XbLN8s6W95SGc3w.roa (hash: 2VVKNx6PRdYWZ0nNRbCgG4Dar1wwW4X2eQNLFYqQiUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:72:88:ca:d0:45:8f:76:f4:05:c1:22:ce:d0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Mar 25 21:01:31 2026 GMT
Not After : Mar 26 21:01:31 2026 GMT
Subject: CN=20444b78ddf4cc8b832e7a9424150059f0d195f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:cc:53:ce:07:cc:56:ce:8b:42:0e:67:94:
14:3a:1f:7b:3f:26:19:02:ea:68:16:fd:ed:55:0d:
31:1a:62:21:fc:d9:41:6d:30:b6:60:8a:43:84:5c:
2b:ad:0e:7a:4d:ce:5a:4b:dd:22:59:36:b6:02:49:
c0:64:b9:51:a4:21:e3:99:3c:7e:3e:a7:b9:72:3f:
ac:67:9b:db:8b:78:31:8c:cf:19:10:85:25:32:42:
bf:c5:44:1d:e4:2f:5c:8e:ce:10:24:54:02:56:1a:
71:70:b2:5a:8f:ed:9f:78:9d:7d:65:d8:cd:ee:7b:
59:a0:d5:6a:81:18:f5:0b:eb:e9:db:a1:18:f7:d7:
08:ec:30:26:82:8f:c9:65:96:ed:72:31:53:f0:c2:
4b:99:71:73:3a:e5:49:04:89:71:07:46:d8:4a:53:
a9:af:de:8f:d6:29:5e:10:55:e5:01:7f:d0:2c:f6:
78:91:6b:52:c2:95:a2:15:72:b5:60:37:0b:2c:32:
b3:ab:58:d5:eb:4b:a0:af:23:47:57:ae:c7:7f:d7:
31:83:a7:47:30:80:6c:25:de:f6:2e:39:5f:48:94:
0a:1d:7b:f9:44:37:f1:21:da:fc:07:ea:ab:05:d2:
97:f1:36:66:b0:98:10:df:8c:63:64:70:8a:09:d3:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:44:4B:78:DD:F4:CC:8B:83:2E:7A:94:24:15:00:59:F0:D1:95:F9
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:78:9c:bd:21:ee:3c:88:76:fd:61:95:0b:06:0e:89:94:65:
b3:a0:88:9b:6e:f1:08:a1:84:b7:1d:53:13:5e:fe:30:9c:fa:
43:f7:4d:a9:bb:b2:71:c6:11:15:b8:4f:c3:97:62:fc:90:b6:
bf:39:9c:69:a6:57:3c:42:42:8d:f4:21:ea:fa:a3:51:c3:ac:
49:bf:a0:8a:d4:58:37:2e:fb:80:ed:74:ee:d0:5a:dc:12:c2:
c3:22:df:5d:97:0a:45:4f:ed:4b:41:b7:31:7b:59:88:72:c3:
d7:1b:ea:e3:30:e8:13:be:78:c2:3e:fb:6a:a8:36:bb:66:98:
42:d5:b2:ed:73:84:ee:66:f3:9a:7a:b5:bb:dc:f1:ab:e8:47:
a2:89:d6:d9:82:15:9b:9d:c4:c7:14:56:96:e2:6c:68:a5:95:
7d:33:96:5f:87:bb:db:57:a9:65:8f:88:02:5e:9c:7b:41:ab:
be:42:aa:a0:21:90:98:b5:88:fa:49:cb:b5:d8:ca:51:e3:c3:
b1:ee:c0:56:73:7c:ab:cb:8f:9d:3b:ec:d3:31:85:27:2e:b6:
be:ac:2e:b9:ef:cb:42:67:44:9e:01:af:7e:18:64:6b:cd:79:
06:90:b4:c7:12:a6:ad:82:4f:c4:aa:cd:80:84:81:ec:4f:4e:
90:f0:50:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzXKIytBFj3b0BcEiztDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh
YTU5YzcwHhcNMjYwMzI1MjEwMTMxWhcNMjYwMzI2MjEwMTMxWjAzMTEwLwYDVQQD
EygyMDQ0NGI3OGRkZjRjYzhiODMyZTdhOTQyNDE1MDA1OWYwZDE5NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMXMU84HzFbOi0IOZ5QUOh97PyYZ
AupoFv3tVQ0xGmIh/NlBbTC2YIpDhFwrrQ56Tc5aS90iWTa2AknAZLlRpCHjmTx+
Pqe5cj+sZ5vbi3gxjM8ZEIUlMkK/xUQd5C9cjs4QJFQCVhpxcLJaj+2feJ19ZdjN
7ntZoNVqgRj1C+vp26EY99cI7DAmgo/JZZbtcjFT8MJLmXFzOuVJBIlxB0bYSlOp
r96P1ileEFXlAX/QLPZ4kWtSwpWiFXK1YDcLLDKzq1jV60ugryNHV67Hf9cxg6dH
MIBsJd72LjlfSJQKHXv5RDfxIdr8B+qrBdKX8TZmsJgQ34xjZHCKCdMp+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBES3jd9MyLgy56lCQVAFnw0ZX5MB8GA1UdIwQY
MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt
MGRlZDA2ZTQwYTc1LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1
LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXicvSHu
PIh2/WGVCwYOiZRls6CIm27xCKGEtx1TE17+MJz6Q/dNqbuyccYRFbhPw5di/JC2
vzmcaaZXPEJCjfQh6vqjUcOsSb+gitRYNy77gO107tBa3BLCwyLfXZcKRU/tS0G3
MXtZiHLD1xvq4zDoE754wj77aqg2u2aYQtWy7XOE7mbzmnq1u9zxq+hHoonW2YIV
m53ExxRWluJsaKWVfTOWX4e721epZY+IAl6ce0GrvkKqoCGQmLWI+knLtdjKUePD
se7AVnN8q8uPnTvs0zGFJy62vqwuue/LQmdEngGvfhhka815BpC0xxKmrYJPxKrN
gISB7E9OkPBQ3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:19 2026 by rpki-client