Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.mft
File: 0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.mft (raw, json)
Hash identifier: fjG2E2dOhAC8xU4cp9SfINjb+4XnWXJE+MX4DljP8Ao=
Subject key identifier: C4:2D:F8:89:36:DA:88:32:47:91:6B:3F:BA:AC:BA:69:8E:1C:41:04
Authority key identifier: D0:82:5B:15:3D:54:CE:96:DC:8F:93:2A:BB:85:BA:A0:BF:80:61:C1
Certificate issuer: /CN=d0825b153d54ce96dc8f932abb85baa0bf8061c1
Certificate serial: 01A040F2FD1ACE357908989744B940242D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.mft
Manifest number: 53
Signing time: Thu 27 Aug 2026 02:01:01 +0000
Manifest this update: Thu 27 Aug 2026 02:01:01 +0000
Manifest next update: Fri 28 Aug 2026 02:01:01 +0000
Files and hashes: 1: 0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.crl (hash: 4tjt+SjrbbzyNzMh9ixlBE8rGATqQtAG1Bq8r2HhR2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:fd:1a:ce:35:79:08:98:97:44:b9:40:24:2d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0825b153d54ce96dc8f932abb85baa0bf8061c1
Validity
Not Before: Aug 27 02:01:01 2026 GMT
Not After : Aug 28 02:01:01 2026 GMT
Subject: CN=c42df88936da883247916b3fbaacba698e1c4104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:10:30:5b:7e:77:82:78:46:7c:93:ae:08:
50:af:3c:be:98:77:af:6b:ca:a5:89:fe:10:7b:a1:
a5:a6:d5:ef:c8:4c:64:4c:e5:e8:01:1f:e2:2b:01:
37:4f:45:11:27:da:cf:20:af:bf:1b:ba:29:0a:c3:
38:d9:ed:3e:49:ca:fd:ae:08:a7:70:b7:bf:c6:51:
b9:33:20:03:57:f7:a2:f1:bb:3f:a1:3a:77:c1:65:
2c:42:39:a6:bb:c0:95:48:f9:55:25:f5:07:15:e7:
ad:df:bf:88:53:4f:cf:00:c5:af:42:9a:f0:c2:64:
db:db:6c:48:7c:76:6d:1a:bb:fe:ef:1f:30:12:eb:
a8:bf:6c:23:b4:81:aa:80:fd:13:e2:7b:57:72:1e:
b5:09:5d:71:5b:36:f8:d2:a1:80:6c:b6:14:f6:ad:
85:0e:b1:f0:48:2c:5d:f3:db:0b:94:79:5e:9b:0e:
81:52:50:11:81:d4:ed:2d:13:64:80:26:f4:9e:87:
43:0d:fa:9c:4a:df:32:b8:e0:f3:73:3b:b3:fe:e1:
94:a4:92:21:5e:69:d6:0b:49:13:2d:f9:fb:e3:90:
b2:9d:1d:43:0e:c3:6c:9d:3b:fe:46:40:c9:eb:1a:
c2:c0:37:81:96:a5:00:e6:1f:10:c8:9b:0e:14:7b:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:F8:89:36:DA:88:32:47:91:6B:3F:BA:AC:BA:69:8E:1C:41:04
X509v3 Authority Key Identifier:
keyid:D0:82:5B:15:3D:54:CE:96:DC:8F:93:2A:BB:85:BA:A0:BF:80:61:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7e:4a:40:23:a8:f0:1b:6b:3e:25:ea:77:75:b5:f1:cd:d7:
47:1c:39:0e:96:55:c1:31:79:cb:ea:7e:3e:a6:43:f8:6d:15:
3c:0a:7b:6f:4a:eb:19:94:2f:13:a0:43:8a:f7:d5:32:e1:88:
45:1b:7d:69:62:ef:41:aa:86:27:78:46:16:c4:8e:ed:c4:bf:
1e:f5:dc:2b:dd:d9:51:0a:ee:f1:e1:63:96:8c:12:c9:aa:4e:
54:3a:13:f1:7c:4c:e6:1d:3b:54:5a:18:22:91:4c:cc:13:e5:
28:58:36:ec:97:f7:5d:b0:54:00:98:3e:58:88:5b:53:ed:c2:
5f:65:a9:e2:74:da:b4:91:82:0d:e4:b3:5f:8b:1d:f1:9c:26:
78:3d:23:3c:9e:6c:17:28:c5:f7:93:16:25:17:9f:25:d1:2c:
f2:7b:6d:b1:c4:6b:90:96:eb:2a:e5:3e:3f:bf:cf:38:8a:17:
d9:5b:64:1e:f4:94:92:43:bc:35:66:6c:61:0f:38:4d:e5:a4:
1c:f5:38:59:00:18:a9:84:a3:16:a6:52:9b:5c:3e:d6:21:ec:
de:0c:38:25:93:10:90:9c:15:88:49:8b:9d:20:a0:21:d6:44:
d8:79:06:50:82:e6:fc:8e:36:d5:48:81:f2:e0:a8:89:05:97:
d3:11:02:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBA8v0azjV5CJiXRLlAJC2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwODI1YjE1M2Q1NGNlOTZkYzhmOTMyYWJiODViYWEwYmY4
MDYxYzEwHhcNMjYwODI3MDIwMTAxWhcNMjYwODI4MDIwMTAxWjAzMTEwLwYDVQQD
EyhjNDJkZjg4OTM2ZGE4ODMyNDc5MTZiM2ZiYWFjYmE2OThlMWM0MTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjsQMFt+d4J4RnyTrghQrzy+mHev
a8qlif4Qe6GlptXvyExkTOXoAR/iKwE3T0URJ9rPIK+/G7opCsM42e0+Scr9rgin
cLe/xlG5MyADV/ei8bs/oTp3wWUsQjmmu8CVSPlVJfUHFeet37+IU0/PAMWvQprw
wmTb22xIfHZtGrv+7x8wEuuov2wjtIGqgP0T4ntXch61CV1xWzb40qGAbLYU9q2F
DrHwSCxd89sLlHlemw6BUlARgdTtLRNkgCb0nodDDfqcSt8yuODzczuz/uGUpJIh
XmnWC0kTLfn745CynR1DDsNsnTv+RkDJ6xrCwDeBlqUA5h8QyJsOFHulMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQt+Ik22ogyR5FrP7qsummOHEEEMB8GA1UdIwQY
MBaAFNCCWxU9VM6W3I+TKruFuqC/gGHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMElKYkZUMVV6cGJjajVNcXU0VzZvTC1BWWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81N2ZlYjQtYTk5ZC00NGViLTgwMDct
MTMwMTljYTlkNjRkLzEvMElKYkZUMVV6cGJjajVNcXU0VzZvTC1BWWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81N2ZlYjQtYTk5ZC00NGViLTgwMDctMTMwMTljYTlkNjRk
LzEvMElKYkZUMVV6cGJjajVNcXU0VzZvTC1BWWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQH5KQCOo
8BtrPiXqd3W18c3XRxw5DpZVwTF5y+p+PqZD+G0VPAp7b0rrGZQvE6BDivfVMuGI
RRt9aWLvQaqGJ3hGFsSO7cS/HvXcK93ZUQru8eFjlowSyapOVDoT8XxM5h07VFoY
IpFMzBPlKFg27Jf3XbBUAJg+WIhbU+3CX2Wp4nTatJGCDeSzX4sd8ZwmeD0jPJ5s
FyjF95MWJRefJdEs8nttscRrkJbrKuU+P7/POIoX2VtkHvSUkkO8NWZsYQ84TeWk
HPU4WQAYqYSjFqZSm1w+1iHs3gw4JZMQkJwViEmLnSCgIdZE2HkGUILm/I421UiB
8uCoiQWX0xECbg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:05:08 2026 by rpki-client