Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: 8mDTFpsn48DyIHD4n5SiAnDNxxzuhMAYvdeN0bQ/SnU=
Subject key identifier: 84:34:FF:E1:92:DA:53:77:19:C8:44:3F:CA:6F:95:98:AC:B7:9A:40
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 01A0D4CBA6D77D0526F9E2B02240D3F6C788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 06F3
Signing time: Thu 24 Sep 2026 19:01:51 +0000
Manifest this update: Thu 24 Sep 2026 19:01:51 +0000
Manifest next update: Fri 25 Sep 2026 19:01:51 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: VnpE53h74NCBZ4deRgG8rEurISNdqpAJFycNEY0y6zw=)
2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:a6:d7:7d:05:26:f9:e2:b0:22:40:d3:f6:c7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Sep 24 19:01:51 2026 GMT
Not After : Sep 25 19:01:51 2026 GMT
Subject: CN=8434ffe192da537719c8443fca6f9598acb79a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:1e:7a:d2:91:0f:60:69:47:ba:d1:6e:db:
79:c4:15:f5:cc:32:5c:d9:bb:aa:0d:92:49:b7:96:
06:53:65:fd:a6:28:e6:fa:c0:8f:60:56:af:27:f1:
08:b0:08:7b:9e:21:be:0c:77:2c:72:95:42:13:18:
43:ab:2a:28:13:18:e7:83:66:85:0b:3e:09:31:f8:
69:30:e0:fa:ea:8f:77:9f:b4:4b:2d:02:0d:0b:cb:
9e:f8:00:3b:4e:93:6c:6e:e9:dc:00:76:86:80:a4:
62:84:48:8e:3d:2f:35:ce:24:bb:04:78:14:02:49:
b6:19:e3:15:bd:71:b9:4a:6a:92:8d:e5:f6:e1:f2:
29:a1:73:ee:22:6e:9e:ee:a0:17:44:bb:13:da:17:
3d:5d:9f:a7:65:77:40:7e:bf:f6:ae:40:94:44:8b:
71:8c:63:9b:fe:1f:4f:bc:b7:9b:cd:26:57:cf:23:
b4:52:b1:74:f7:74:3a:07:e1:d1:bb:e2:b4:16:40:
f0:c1:5a:ae:a4:54:1d:ed:95:f4:7a:c3:79:71:1a:
e6:bc:53:c8:c3:4e:c5:82:c9:74:c7:8b:17:04:39:
d4:79:27:f0:58:8f:45:82:d6:4c:a9:7d:4e:4c:a8:
c3:80:7c:e4:31:7e:9a:46:7b:ee:c2:c6:3b:46:2a:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:FF:E1:92:DA:53:77:19:C8:44:3F:CA:6F:95:98:AC:B7:9A:40
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c4:b5:b5:46:f1:6c:e3:cd:6d:0a:5e:ba:4e:88:83:68:53:
b2:0a:06:1c:60:cf:55:fd:61:f1:14:33:4a:16:b6:ff:65:31:
78:5e:b2:d6:73:b7:08:a5:4f:da:81:59:54:24:b2:f8:fe:e4:
32:c1:30:7a:bf:8d:2c:05:2b:38:d7:ee:09:4b:cf:08:7f:00:
41:6e:08:40:22:e2:1f:ce:53:f6:2a:db:f3:1e:e3:cf:82:54:
22:a8:bd:ee:89:65:e4:d3:bf:33:3f:10:f8:43:79:68:ea:ee:
61:20:09:42:81:55:e0:42:24:e6:b7:95:8e:21:07:32:1a:b8:
59:47:a9:91:c9:56:22:e8:c8:4a:6a:be:81:a8:df:cb:64:1c:
69:a7:90:bd:9f:36:6e:9e:97:3f:aa:4a:54:8a:97:5f:e3:fd:
83:8c:2b:5b:3e:fe:44:4c:86:30:6f:2e:58:66:04:d0:e3:9e:
31:1f:a7:35:8c:2f:bb:34:d2:1e:83:e9:66:69:04:cf:ab:61:
19:f5:2c:09:4d:97:9a:fc:4e:8e:dd:e1:36:35:82:de:a6:85:
8d:78:19:65:be:c8:0b:33:37:8d:92:d2:cb:fd:2f:62:70:a4:
b3:9d:1a:39:2f:26:0a:30:33:6e:6b:eb:45:5e:cb:3a:e2:af:
48:98:82:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy6bXfQUm+eKwIkDT9seIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDg1MGY4MDY5ZGY2MmRjNTE1NWMwMmVkMWU2MmJmNTFj
ZWRiYzgwHhcNMjYwOTI0MTkwMTUxWhcNMjYwOTI1MTkwMTUxWjAzMTEwLwYDVQQD
Eyg4NDM0ZmZlMTkyZGE1Mzc3MTljODQ0M2ZjYTZmOTU5OGFjYjc5YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LkeetKRD2BpR7rRbtt5xBX1zDJc
2buqDZJJt5YGU2X9pijm+sCPYFavJ/EIsAh7niG+DHcscpVCExhDqyooExjng2aF
Cz4JMfhpMOD66o93n7RLLQINC8ue+AA7TpNsbuncAHaGgKRihEiOPS81ziS7BHgU
Akm2GeMVvXG5SmqSjeX24fIpoXPuIm6e7qAXRLsT2hc9XZ+nZXdAfr/2rkCURItx
jGOb/h9PvLebzSZXzyO0UrF093Q6B+HRu+K0FkDwwVqupFQd7ZX0esN5cRrmvFPI
w07Fgsl0x4sXBDnUeSfwWI9FgtZMqX1OTKjDgHzkMX6aRnvuwsY7Rio0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ0/+GS2lN3GchEP8pvlZist5pAMB8GA1UdIwQY
MBaAFNBIUPgGnfYtxRVcAu0eYr9RztvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYt
YWQ5NWViZmFhYWUyLzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYtYWQ5NWViZmFhYWUy
LzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMS1tUbx
bOPNbQpeuk6Ig2hTsgoGHGDPVf1h8RQzSha2/2UxeF6y1nO3CKVP2oFZVCSy+P7k
MsEwer+NLAUrONfuCUvPCH8AQW4IQCLiH85T9irb8x7jz4JUIqi97oll5NO/Mz8Q
+EN5aOruYSAJQoFV4EIk5reVjiEHMhq4WUepkclWIujISmq+gajfy2QcaaeQvZ82
bp6XP6pKVIqXX+P9g4wrWz7+REyGMG8uWGYE0OOeMR+nNYwvuzTSHoPpZmkEz6th
GfUsCU2XmvxOjt3hNjWC3qaFjXgZZb7ICzM3jZLSy/0vYnCks50aOS8mCjAzbmvr
RV7LOuKvSJiCtQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:52:04 2026 by rpki-client