Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: 2hgHE8M58DcRC6Gq4ry40Rwpub/XyAJJjqx98psXr1Y=
Subject key identifier: 11:B7:33:1A:47:99:50:12:E8:A0:2B:85:A1:F2:20:C0:4A:38:A2:7B
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019E2B1575210D25BBBFA45B2435633C6095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 063C
Signing time: Fri 15 May 2026 10:01:26 +0000
Manifest this update: Fri 15 May 2026 10:01:26 +0000
Manifest next update: Sat 16 May 2026 10:01:26 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: HHk7p02clPe/b7ZxtO2aRRtTqw8v6whidi7ZqTQzv6c=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:15:75:21:0d:25:bb:bf:a4:5b:24:35:63:3c:60:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: May 15 10:01:26 2026 GMT
Not After : May 16 10:01:26 2026 GMT
Subject: CN=11b7331a47995012e8a02b85a1f220c04a38a27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:96:6c:54:57:25:01:e9:76:9a:98:34:c2:
a7:05:fc:5f:d1:e9:7e:6a:ac:6d:2e:6c:24:73:b8:
c9:8f:6c:67:12:66:12:3f:6d:70:28:a2:a0:21:12:
12:59:e6:25:7a:61:d6:6f:aa:c8:5b:35:9b:1f:d1:
3f:47:52:88:88:ac:f6:ca:04:bf:8a:f4:59:a0:1f:
08:cd:5a:01:2e:4e:54:54:20:e4:69:cc:2e:37:8d:
c2:90:9e:15:e8:38:ba:c7:37:1c:b7:3f:70:b2:e9:
7d:ab:43:e6:5a:c4:b1:16:dc:3d:5d:57:76:23:3f:
7c:40:82:09:8b:4e:f3:d6:17:f7:2d:15:e1:0a:21:
52:37:23:ea:6b:cc:ac:5b:e3:d2:84:d6:6a:c0:40:
14:ec:33:38:e9:b5:e4:71:61:e5:07:dd:e8:c3:56:
11:d0:35:f2:19:69:75:a6:f2:bb:ce:50:5d:bd:c1:
8c:55:8a:91:69:a2:00:42:f2:ee:50:84:a1:c1:c2:
8d:ec:ab:3b:c1:db:f5:cb:da:be:75:55:ba:88:1d:
03:fb:58:28:66:7c:cc:64:ea:d6:bd:db:87:45:75:
2e:33:25:81:b3:89:af:fa:5a:9a:69:f0:50:e7:83:
2c:07:46:93:6f:73:ba:75:ad:41:5a:2b:ff:58:06:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B7:33:1A:47:99:50:12:E8:A0:2B:85:A1:F2:20:C0:4A:38:A2:7B
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:5c:cf:7f:be:e7:62:f0:59:70:ab:bf:1a:16:b0:29:ca:
4c:12:8b:86:54:5c:1b:e4:5a:b7:f4:84:01:7d:17:7d:3d:45:
02:e4:3b:f7:61:5f:1e:3d:e8:ec:37:c2:d6:46:f9:ae:29:90:
95:35:d0:c2:e3:0f:b2:a5:f9:48:17:e0:27:b7:bf:ed:5c:45:
b5:6b:cb:27:3d:9b:ca:71:36:92:90:15:cf:45:c9:dd:81:9e:
0f:ae:51:54:f4:27:b1:54:a9:34:b8:7b:24:f0:94:bd:c1:7e:
74:9f:f4:d8:25:8c:75:0c:3e:c7:b0:23:f1:3f:1c:24:6d:fa:
4f:99:72:c9:24:35:8b:64:4f:36:02:cf:f9:25:75:88:ae:41:
0d:f7:55:b1:36:c0:b0:3e:40:64:71:d3:65:ad:24:a6:39:21:
d8:0a:8e:14:4c:14:7f:19:a4:ca:94:e5:33:f5:30:d1:21:06:
99:d4:b8:4e:d0:6f:8c:f8:f2:c2:51:81:57:d8:01:ab:06:87:
6d:79:61:c9:f0:b5:42:1b:6c:7e:76:2d:98:92:f8:98:e9:92:
42:15:60:10:4f:70:9d:13:d7:ed:7a:d5:02:10:a2:bb:3a:4b:
fa:4d:ff:74:00:76:18:7d:f2:0e:86:cc:91:20:b8:d9:85:71:
0b:f4:d2:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4rFXUhDSW7v6RbJDVjPGCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw
MzU0OTIwHhcNMjYwNTE1MTAwMTI2WhcNMjYwNTE2MTAwMTI2WjAzMTEwLwYDVQQD
EygxMWI3MzMxYTQ3OTk1MDEyZThhMDJiODVhMWYyMjBjMDRhMzhhMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dOWbFRXJQHpdpqYNMKnBfxf0el+
aqxtLmwkc7jJj2xnEmYSP21wKKKgIRISWeYlemHWb6rIWzWbH9E/R1KIiKz2ygS/
ivRZoB8IzVoBLk5UVCDkacwuN43CkJ4V6Di6xzcctz9wsul9q0PmWsSxFtw9XVd2
Iz98QIIJi07z1hf3LRXhCiFSNyPqa8ysW+PShNZqwEAU7DM46bXkcWHlB93ow1YR
0DXyGWl1pvK7zlBdvcGMVYqRaaIAQvLuUIShwcKN7Ks7wdv1y9q+dVW6iB0D+1go
ZnzMZOrWvduHRXUuMyWBs4mv+lqaafBQ54MsB0aTb3O6da1BWiv/WAZYZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG3MxpHmVAS6KArhaHyIMBKOKJ7MB8GA1UdIwQY
MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et
MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx
LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOw9cz3++
52LwWXCrvxoWsCnKTBKLhlRcG+Rat/SEAX0XfT1FAuQ792FfHj3o7DfC1kb5rimQ
lTXQwuMPsqX5SBfgJ7e/7VxFtWvLJz2bynE2kpAVz0XJ3YGeD65RVPQnsVSpNLh7
JPCUvcF+dJ/02CWMdQw+x7Aj8T8cJG36T5lyySQ1i2RPNgLP+SV1iK5BDfdVsTbA
sD5AZHHTZa0kpjkh2AqOFEwUfxmkypTlM/Uw0SEGmdS4TtBvjPjywlGBV9gBqwaH
bXlhyfC1QhtsfnYtmJL4mOmSQhVgEE9wnRPX7XrVAhCiuzpL+k3/dAB2GH3yDobM
kSC42YVxC/TSAQ==
-----END CERTIFICATE-----
Generated at Fri May 15 17:08:40 2026 by rpki-client