Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
File: d2l0J3BW692_vbT4CPmoboJGA68.mft (raw, json)
Hash identifier: 6PS1KbuTSV9e1CqYIl8ivOcOQ2StJlOuVXoWMprBqJk=
Subject key identifier: 0D:14:CD:23:19:BB:79:AF:9A:D3:A9:96:3E:E7:84:25:20:E1:98:71
Authority key identifier: 77:69:74:27:70:56:EB:DD:BF:BD:B4:F8:08:F9:A8:6E:82:46:03:AF
Certificate issuer: /CN=776974277056ebddbfbdb4f808f9a86e824603af
Certificate serial: 01A160E8E8730DB71F3B3309EA1C8CEAF189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
Manifest number: 0130
Signing time: Thu 22 Oct 2026 00:00:38 +0000
Manifest this update: Thu 22 Oct 2026 00:00:38 +0000
Manifest next update: Fri 23 Oct 2026 00:00:38 +0000
Files and hashes: 1: d2l0J3BW692_vbT4CPmoboJGA68.crl (hash: am1S+lc3OV2de01wZc9W9sZP5O0LdB86o4/E+FNeerM=)
2: xEz93NHfqwGn_fMxSE5Ih9PWlqo.roa (hash: jiLVzZN8tDJN0WGRU4SoHiqOhPAJ15uV1gf5zwz/HNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e8:e8:73:0d:b7:1f:3b:33:09:ea:1c:8c:ea:f1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776974277056ebddbfbdb4f808f9a86e824603af
Validity
Not Before: Oct 22 00:00:38 2026 GMT
Not After : Oct 23 00:00:38 2026 GMT
Subject: CN=0d14cd2319bb79af9ad3a9963ee7842520e19871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:3e:0e:25:67:79:b3:e4:fc:93:34:e4:35:
6c:7f:6a:d6:f6:32:d0:93:13:08:e0:bb:bd:e5:59:
3b:77:b8:5e:10:49:a6:13:06:b5:f0:62:d6:e0:b4:
9a:87:e2:61:d4:e3:7f:c4:b8:94:53:f5:ff:ba:91:
89:c0:15:84:85:88:66:74:64:92:33:3f:60:61:b7:
46:ce:66:79:24:58:cc:7f:50:52:87:d3:83:68:61:
8d:5b:83:f0:96:e6:09:6f:4b:18:7b:95:fe:aa:64:
42:d7:e0:d3:30:8b:58:9f:55:78:c1:4e:83:3a:3e:
b2:7e:81:dd:e3:e1:da:3f:72:91:a0:b0:3d:02:03:
76:8e:1c:48:27:5c:98:da:fe:db:89:b5:b5:87:96:
6f:ea:01:38:23:8c:27:c1:3f:db:66:dc:fa:f1:fb:
c3:eb:6b:30:d8:5c:29:bf:2b:25:a2:0d:84:da:6f:
ab:f3:da:03:fb:2c:00:8e:5d:ed:20:fa:20:da:bf:
01:c1:62:e9:20:78:80:f7:ea:9e:be:73:8b:0c:1f:
72:7e:43:c5:ff:ef:ce:41:16:c3:d2:79:9a:9b:88:
ba:23:51:2e:0f:7f:75:81:4d:14:8c:da:ba:05:1c:
18:2e:df:c4:6a:89:4a:fc:3b:bd:eb:78:5d:c6:9f:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:14:CD:23:19:BB:79:AF:9A:D3:A9:96:3E:E7:84:25:20:E1:98:71
X509v3 Authority Key Identifier:
keyid:77:69:74:27:70:56:EB:DD:BF:BD:B4:F8:08:F9:A8:6E:82:46:03:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6d:21:01:f9:f7:6d:02:de:8b:b3:aa:23:00:b0:0e:e6:2e:
a1:04:90:cd:cc:a2:29:09:f4:cc:82:96:61:c0:71:88:b3:38:
b2:27:2b:d9:68:4f:e2:ad:55:15:b0:1d:08:a9:3a:ce:a6:da:
cf:db:47:62:c7:64:b2:1f:0b:75:5d:61:2a:c1:ec:f7:32:4b:
e8:d3:41:7a:12:df:91:8a:f7:a6:3c:9a:8a:1b:14:28:ec:b2:
c0:52:22:e7:ac:97:a0:df:49:16:32:ca:73:9c:a7:09:0e:83:
58:fb:62:23:fa:5c:91:83:5f:cd:26:56:4f:63:9e:2c:fa:c7:
22:0b:c8:36:61:12:29:7b:88:f3:1b:be:f3:b7:9f:4f:6c:b4:
06:04:36:d5:fb:26:d3:45:72:8e:f3:80:8d:eb:7e:2d:1b:d4:
d5:24:13:e9:af:1a:f9:6c:f4:90:f2:53:f3:eb:fe:dc:ca:df:
df:a2:1b:aa:a7:5a:26:4c:ce:27:32:c3:28:51:b6:00:ed:56:
7d:28:33:51:d3:bf:04:3f:41:02:06:86:88:e7:53:97:9a:d6:
1a:98:1e:5f:f0:67:a0:3d:e2:a0:58:49:83:7f:a5:64:cb:d2:
52:4b:1e:3c:0f:ee:ac:98:53:c4:c7:fb:bd:95:54:3c:e3:83:
a0:80:c9:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFg6OhzDbcfOzMJ6hyM6vGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Njk3NDI3NzA1NmViZGRiZmJkYjRmODA4ZjlhODZlODI0
NjAzYWYwHhcNMjYxMDIyMDAwMDM4WhcNMjYxMDIzMDAwMDM4WjAzMTEwLwYDVQQD
EygwZDE0Y2QyMzE5YmI3OWFmOWFkM2E5OTYzZWU3ODQyNTIwZTE5ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWc+DiVnebPk/JM05DVsf2rW9jLQ
kxMI4Lu95Vk7d7heEEmmEwa18GLW4LSah+Jh1ON/xLiUU/X/upGJwBWEhYhmdGSS
Mz9gYbdGzmZ5JFjMf1BSh9ODaGGNW4PwluYJb0sYe5X+qmRC1+DTMItYn1V4wU6D
Oj6yfoHd4+HaP3KRoLA9AgN2jhxIJ1yY2v7bibW1h5Zv6gE4I4wnwT/bZtz68fvD
62sw2Fwpvyslog2E2m+r89oD+ywAjl3tIPog2r8BwWLpIHiA9+qevnOLDB9yfkPF
/+/OQRbD0nmam4i6I1EuD391gU0UjNq6BRwYLt/EaolK/Du963hdxp9fLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0UzSMZu3mvmtOplj7nhCUg4ZhxMB8GA1UdIwQY
MBaAFHdpdCdwVuvdv720+Aj5qG6CRgOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJsMEozQlc2OTJfdmJUNENQbW9ib0pHQTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUt
NjRjOWMyY2M5NjA5LzEvZDJsMEozQlc2OTJfdmJUNENQbW9ib0pHQTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUtNjRjOWMyY2M5NjA5
LzEvZDJsMEozQlc2OTJfdmJUNENQbW9ib0pHQTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN20hAfn3
bQLei7OqIwCwDuYuoQSQzcyiKQn0zIKWYcBxiLM4sicr2WhP4q1VFbAdCKk6zqba
z9tHYsdksh8LdV1hKsHs9zJL6NNBehLfkYr3pjyaihsUKOyywFIi56yXoN9JFjLK
c5ynCQ6DWPtiI/pckYNfzSZWT2OeLPrHIgvINmESKXuI8xu+87efT2y0BgQ21fsm
00VyjvOAjet+LRvU1SQT6a8a+Wz0kPJT8+v+3Mrf36IbqqdaJkzOJzLDKFG2AO1W
fSgzUdO/BD9BAgaGiOdTl5rWGpgeX/BnoD3ioFhJg3+lZMvSUksePA/urJhTxMf7
vZVUPOODoIDJfQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 05:50:46 2026 by rpki-client