Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier: 4hYXLFHYcTtXb7OCa8rprqX2QyB1foo2jCVzxWnjKJM=
Subject key identifier: 39:33:86:E5:E7:F4:67:10:39:85:C5:C1:F4:26:2F:CC:9A:2A:07:38
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial: 019DE40F1949CCA2C5EA17C98DE5D2BE51E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number: 0215
Signing time: Fri 01 May 2026 15:01:27 +0000
Manifest this update: Fri 01 May 2026 15:01:27 +0000
Manifest next update: Sat 02 May 2026 15:01:27 +0000
Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: MP1MMsSLGnRHQ3v2ZkZmAVIaxMi1BBkETM2H+fKqgMY=)
2: BMvBIwftHVjOq-ECziUj7FT9eNs.roa (hash: VyJ9dmhC8T/OTxMz+hnV4q4zH9/xxLGMFMd7o25VL7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:0f:19:49:cc:a2:c5:ea:17:c9:8d:e5:d2:be:51:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Validity
Not Before: May 1 15:01:27 2026 GMT
Not After : May 2 15:01:27 2026 GMT
Subject: CN=393386e5e7f467103985c5c1f4262fcc9a2a0738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:66:6d:0d:45:2e:6d:31:89:8e:07:29:60:
33:97:b2:bc:38:9f:d3:bf:85:b4:af:60:00:a9:b2:
39:76:9b:70:3d:46:eb:db:04:47:df:e8:3a:03:87:
1e:66:77:3d:31:7e:0d:b2:3d:c2:c8:13:2c:b9:14:
8b:11:65:0c:39:77:27:03:b1:d4:b8:54:f3:b3:a3:
50:05:81:be:75:d5:5e:6a:e7:1d:ed:e5:65:eb:8b:
18:e0:ac:29:5e:39:27:f1:d8:a6:7b:c2:6b:49:d9:
01:e7:b6:a7:ed:c6:2e:e9:25:ab:f3:80:f8:bb:b4:
f0:60:50:7e:69:be:5e:38:2e:bb:91:f6:02:2e:79:
7b:94:b8:83:2f:b3:8d:7a:cf:6a:e8:c2:0e:8b:d0:
c8:fa:79:e2:7c:32:d9:4c:da:67:45:0b:63:10:cb:
23:f2:43:50:eb:1e:21:f6:97:a8:b2:1b:75:91:56:
e4:f4:a9:f4:63:16:25:9f:f8:4e:0d:c4:fb:8e:03:
3f:54:fd:dc:1e:66:4e:6a:b5:64:28:2d:fc:0b:ed:
89:fd:6a:eb:be:31:04:57:f9:19:b9:0c:e2:f5:31:
7c:4e:b5:fe:2d:4e:c7:df:70:b7:f2:37:41:b1:85:
13:98:a5:63:87:e2:4b:98:72:b2:3d:47:c7:28:8c:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:33:86:E5:E7:F4:67:10:39:85:C5:C1:F4:26:2F:CC:9A:2A:07:38
X509v3 Authority Key Identifier:
keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f2:6f:2c:1a:12:f3:39:a1:f6:59:10:fc:73:25:33:de:6f:
80:de:72:d2:83:a4:a2:22:6d:06:6b:40:b2:b0:ca:10:15:ee:
63:a9:dd:2d:d0:ec:df:88:02:81:01:e1:d5:f6:a2:31:09:cc:
e8:62:63:5f:55:3a:c1:1e:c3:4e:41:05:46:40:34:ac:93:e6:
d9:4f:81:07:7a:49:16:b0:fe:78:39:18:7f:d9:f2:0e:6b:8f:
08:f6:9d:41:d0:07:6b:95:10:28:2b:30:a2:88:62:a4:9e:69:
37:48:41:0e:47:23:d3:91:4a:61:a5:90:da:41:8d:bd:4b:57:
ec:f3:14:65:66:48:42:eb:a9:d0:2a:04:87:8c:d1:6a:39:3b:
aa:7f:ae:5d:b7:f7:9e:ee:9e:bf:1c:ae:23:12:70:4f:72:9a:
d4:b2:7e:e2:b7:74:71:4c:12:79:87:38:2b:e9:05:0a:f3:ac:
52:e0:3c:e9:94:d3:5a:ed:16:f4:44:6e:00:aa:d7:cd:9e:33:
a1:3d:f9:f7:c6:a8:64:77:2a:84:f4:62:3d:ea:7b:0f:4e:05:
a8:13:18:3c:2d:2e:f5:91:5c:76:c4:9c:23:bb:ef:26:1a:82:
08:28:6a:e9:98:b9:23:a3:cd:bb:c2:90:81:62:50:f7:dc:25:
c9:f3:31:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3kDxlJzKLF6hfJjeXSvlHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZWQ2NjRmNGFmMmY4ZTExOWI4N2EyNjhjNWQ0MzAzZmJi
MzYxMTYwHhcNMjYwNTAxMTUwMTI3WhcNMjYwNTAyMTUwMTI3WjAzMTEwLwYDVQQD
EygzOTMzODZlNWU3ZjQ2NzEwMzk4NWM1YzFmNDI2MmZjYzlhMmEwNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVJmbQ1FLm0xiY4HKWAzl7K8OJ/T
v4W0r2AAqbI5dptwPUbr2wRH3+g6A4ceZnc9MX4Nsj3CyBMsuRSLEWUMOXcnA7HU
uFTzs6NQBYG+ddVeaucd7eVl64sY4KwpXjkn8dime8JrSdkB57an7cYu6SWr84D4
u7TwYFB+ab5eOC67kfYCLnl7lLiDL7ONes9q6MIOi9DI+nnifDLZTNpnRQtjEMsj
8kNQ6x4h9peosht1kVbk9Kn0YxYln/hODcT7jgM/VP3cHmZOarVkKC38C+2J/Wrr
vjEEV/kZuQzi9TF8TrX+LU7H33C38jdBsYUTmKVjh+JLmHKyPUfHKIxHRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkzhuXn9GcQOYXFwfQmL8yaKgc4MB8GA1UdIwQY
MBaAFNHtZk9K8vjhGbh6JoxdQwP7s2EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2Mt
NGI5NTI5YjQ4Y2VhLzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2MtNGI5NTI5YjQ4Y2Vh
LzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/JvLBoS
8zmh9lkQ/HMlM95vgN5y0oOkoiJtBmtAsrDKEBXuY6ndLdDs34gCgQHh1faiMQnM
6GJjX1U6wR7DTkEFRkA0rJPm2U+BB3pJFrD+eDkYf9nyDmuPCPadQdAHa5UQKCsw
oohipJ5pN0hBDkcj05FKYaWQ2kGNvUtX7PMUZWZIQuup0CoEh4zRajk7qn+uXbf3
nu6evxyuIxJwT3Ka1LJ+4rd0cUwSeYc4K+kFCvOsUuA86ZTTWu0W9ERuAKrXzZ4z
oT3598aoZHcqhPRiPep7D04FqBMYPC0u9ZFcdsScI7vvJhqCCChq6Zi5I6PNu8KQ
gWJQ99wlyfMxFg==
-----END CERTIFICATE-----
Generated at Fri May 1 17:01:40 2026 by rpki-client