Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
File: 0CIVj9T34wlqA33Dz6vY807qq9E.mft (raw, json)
Hash identifier: Zo4FSnJJ7irI4Ok0nvqicjEOe/o61Mk5UlOgzHrE7KM=
Subject key identifier: 29:C3:9B:8C:8A:80:D6:81:18:67:53:6D:5F:BE:56:DE:55:1A:6A:E5
Authority key identifier: D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
Certificate issuer: /CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Certificate serial: 01A0D01197050A465AB71D6FC132B61EF5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:08 +0000
Manifest this update: Wed 23 Sep 2026 21:00:08 +0000
Manifest next update: Thu 24 Sep 2026 21:00:08 +0000
Files and hashes: 1: 0CIVj9T34wlqA33Dz6vY807qq9E.crl (hash: jLDExVYDbv7LHxMd3BQhKAJsC76xajh5cBp2aUvJTr8=)
2: Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa (hash: xvKgGhY+ZlcBTXkjAQHJhU0l6IZYcdXuey6wO6lkMfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:97:05:0a:46:5a:b7:1d:6f:c1:32:b6:1e:f5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Validity
Not Before: Sep 23 21:00:08 2026 GMT
Not After : Sep 24 21:00:08 2026 GMT
Subject: CN=29c39b8c8a80d6811867536d5fbe56de551a6ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1a:61:2d:33:43:92:da:00:aa:01:7a:20:49:
d1:18:4d:c2:3f:8c:4e:0d:c3:1e:fb:dc:0a:71:15:
03:68:8c:99:4a:aa:a1:e8:70:09:df:ee:23:4b:2f:
0a:a0:ed:99:94:01:27:69:fd:53:89:a9:80:cc:b4:
3e:e2:2b:a7:cd:4c:ca:c4:85:ed:2f:c9:cc:50:46:
73:d3:24:de:db:0a:9c:c7:29:aa:9a:ea:6f:37:77:
6b:9c:23:74:00:46:57:10:86:34:06:dc:4d:10:3a:
e7:3b:51:21:c5:7c:ec:65:97:2e:00:01:bb:89:30:
be:b8:70:d5:57:43:6e:af:b9:0f:c9:67:5b:ff:f0:
cb:b2:f0:00:de:0f:27:cc:ab:95:30:53:2d:c9:3c:
01:bf:f9:b9:14:f1:f9:f8:60:48:46:71:fe:5a:33:
71:2f:24:35:31:5d:a1:f3:c5:d3:dc:b3:48:12:4a:
07:94:c0:92:82:96:59:54:86:8c:71:5e:14:8f:7a:
9b:0d:97:15:65:7c:31:09:28:93:77:2e:c5:b7:5f:
02:f6:19:9e:5d:9d:59:43:7a:ce:60:0e:89:46:c2:
7f:9f:3b:5a:58:39:31:8a:7d:c1:81:71:82:9e:6e:
95:6d:1c:a8:e1:c0:79:cd:2c:b4:7a:bf:e5:06:7f:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:9B:8C:8A:80:D6:81:18:67:53:6D:5F:BE:56:DE:55:1A:6A:E5
X509v3 Authority Key Identifier:
keyid:D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:28:71:9f:86:62:f1:4b:b7:47:6e:5a:fd:27:19:a2:e0:86:
9b:c2:c4:32:54:06:e2:75:4b:10:84:86:e2:26:d2:61:ae:fd:
90:f8:f9:d4:85:e4:4f:cc:0b:a8:ae:04:62:4a:0e:f4:bc:50:
99:1f:3c:63:a4:c8:06:16:62:f5:e3:da:ec:4e:7b:c1:aa:d5:
4a:ca:cc:55:5a:c8:d1:4d:81:0f:77:63:9b:60:42:df:b7:f3:
df:eb:50:ea:08:4b:26:a9:42:85:6c:d9:a5:4c:c0:eb:e2:6f:
0b:7b:2d:eb:30:e1:ca:21:3c:88:7a:13:e7:c3:89:28:24:b4:
6d:59:44:9c:be:a4:f8:58:68:c0:5b:57:9b:df:1b:bb:f7:91:
f3:88:f1:79:52:32:ae:4d:50:5e:5b:d1:c9:61:8d:dd:00:b5:
f6:45:cc:40:18:03:d9:d7:44:e6:a1:77:6e:8c:4a:72:3f:02:
0a:b5:dc:2a:83:ae:96:d7:ba:33:4b:1d:d8:4f:38:ae:72:a3:
77:b6:ab:ee:21:31:00:03:67:53:93:81:50:56:05:3f:9a:1d:
48:06:59:91:ae:fc:09:eb:7f:4f:4d:8b:5a:86:bf:4c:03:ee:
c3:ee:48:02:78:5c:45:4e:75:4d:67:ec:ca:dc:6d:22:a5:72:
61:53:62:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEZcFCkZatx1vwTK2HvXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjIxNThmZDRmN2UzMDk2YTAzN2RjM2NmYWJkOGYzNGVl
YWFiZDEwHhcNMjYwOTIzMjEwMDA4WhcNMjYwOTI0MjEwMDA4WjAzMTEwLwYDVQQD
EygyOWMzOWI4YzhhODBkNjgxMTg2NzUzNmQ1ZmJlNTZkZTU1MWE2YWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBphLTNDktoAqgF6IEnRGE3CP4xO
DcMe+9wKcRUDaIyZSqqh6HAJ3+4jSy8KoO2ZlAEnaf1TiamAzLQ+4iunzUzKxIXt
L8nMUEZz0yTe2wqcxymqmupvN3drnCN0AEZXEIY0BtxNEDrnO1EhxXzsZZcuAAG7
iTC+uHDVV0Nur7kPyWdb//DLsvAA3g8nzKuVMFMtyTwBv/m5FPH5+GBIRnH+WjNx
LyQ1MV2h88XT3LNIEkoHlMCSgpZZVIaMcV4Uj3qbDZcVZXwxCSiTdy7Ft18C9hme
XZ1ZQ3rOYA6JRsJ/nztaWDkxin3BgXGCnm6VbRyo4cB5zSy0er/lBn/INwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnDm4yKgNaBGGdTbV++Vt5VGmrlMB8GA1UdIwQY
MBaAFNAiFY/U9+MJagN9w8+r2PNO6qvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt
OTU1YWQ3OGJjYjA3LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3
LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyhxn4Zi
8Uu3R25a/ScZouCGm8LEMlQG4nVLEISG4ibSYa79kPj51IXkT8wLqK4EYkoO9LxQ
mR88Y6TIBhZi9ePa7E57warVSsrMVVrI0U2BD3djm2BC37fz3+tQ6ghLJqlChWzZ
pUzA6+JvC3st6zDhyiE8iHoT58OJKCS0bVlEnL6k+FhowFtXm98bu/eR84jxeVIy
rk1QXlvRyWGN3QC19kXMQBgD2ddE5qF3boxKcj8CCrXcKoOulte6M0sd2E84rnKj
d7ar7iExAANnU5OBUFYFP5odSAZZka78Cet/T02LWoa/TAPuw+5IAnhcRU51TWfs
ytxtIqVyYVNi3Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:46:53 2026 by rpki-client