Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File: 0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier: 125Y+B3I9fD3Nhx5HtxCrMCalV+2qsMUo6vWf3jgXNU=
Subject key identifier: AF:A5:EA:76:97:5F:1A:F8:B4:FB:DE:C7:1E:38:D2:93:28:BF:BD:D2
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer: /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial: 01A001DCE375EB0A261CE4536B9749A872F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number: 19FB
Signing time: Fri 14 Aug 2026 20:00:48 +0000
Manifest this update: Fri 14 Aug 2026 20:00:48 +0000
Manifest next update: Sat 15 Aug 2026 20:00:48 +0000
Files and hashes: 1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: MjePIoYjs33hIuT8/JPwfXzCywqt1JNVZirNtMWca1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:e3:75:eb:0a:26:1c:e4:53:6b:97:49:a8:72:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Validity
Not Before: Aug 14 20:00:48 2026 GMT
Not After : Aug 15 20:00:48 2026 GMT
Subject: CN=afa5ea76975f1af8b4fbdec71e38d29328bfbdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:ce:36:0c:5b:8e:c1:8a:7d:88:4f:c5:00:
c4:6b:34:00:68:b9:fc:1b:5c:26:5b:78:e5:4c:14:
2e:64:5c:94:ec:c4:59:ad:44:5f:47:44:e4:d7:7e:
c4:53:20:79:af:7d:fa:97:ed:ed:b5:4c:a6:bc:d8:
b2:de:f7:35:b7:da:19:f8:98:82:a1:9b:b1:c4:0a:
ee:86:ab:c8:65:fd:8c:83:fe:ec:fd:80:a2:ce:ae:
de:36:27:a1:12:6d:69:fb:5c:0d:41:4b:d6:c8:a9:
57:24:83:e0:4e:72:17:39:0a:a8:08:ff:95:4c:d6:
21:a8:1b:9e:45:da:9e:58:86:0f:b9:2e:4c:da:1d:
d4:c1:37:6c:3d:e3:99:e7:0c:1f:47:f4:61:eb:47:
ce:37:07:16:f5:69:2e:4c:aa:8c:45:5c:78:b3:79:
9f:4a:30:65:e2:dc:47:53:e6:23:61:e3:44:b5:19:
98:ad:2d:1f:7e:8b:3d:48:0c:8e:c4:98:83:a4:aa:
4c:ab:da:06:ca:33:3f:04:eb:3e:5b:0c:b2:5b:3c:
ed:8a:26:fc:46:37:50:c6:2f:18:1e:8b:9c:8e:99:
34:ec:bb:cd:66:1c:2d:59:ce:f6:fe:7c:7d:f5:4c:
6b:ad:28:e5:2d:80:7c:63:83:92:24:a8:e8:8e:0a:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:EA:76:97:5F:1A:F8:B4:FB:DE:C7:1E:38:D2:93:28:BF:BD:D2
X509v3 Authority Key Identifier:
keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0b:a1:36:2e:5e:bb:93:38:8d:02:0f:52:16:78:6e:ea:79:
4b:9f:46:28:74:d4:7f:33:2e:12:56:d5:fd:68:00:ca:2e:e2:
68:22:f5:35:8e:fe:44:aa:13:c9:d2:47:ef:3f:02:26:98:f8:
14:2d:a9:49:bf:1a:9a:07:df:ef:77:3f:e3:33:5d:84:67:28:
a2:c5:a0:7a:78:21:63:a3:26:3e:a9:d0:e5:d2:90:00:67:f1:
6a:0e:08:31:cb:c1:4f:95:ad:c8:09:4f:9f:8c:0c:20:8c:a7:
f7:15:c6:e2:7a:34:6b:c0:7b:a2:60:cc:85:ed:bb:8c:d7:83:
77:f8:ce:b6:f0:b8:36:c6:e0:32:8b:3b:ac:f1:2f:b8:b3:bf:
b2:30:c1:82:7e:f2:72:8b:eb:69:ed:c1:40:1a:29:c5:5e:e4:
b7:7e:2e:1f:f9:d5:65:ae:9b:84:79:f0:58:e9:1a:f7:a4:9d:
e6:f7:2a:32:50:73:11:12:06:c5:ed:25:7b:96:ae:2f:44:48:
d4:18:5c:88:90:87:d5:c8:95:3a:68:7a:5f:37:2b:fb:2d:fe:
21:11:d9:31:4b:06:95:be:dd:f5:d3:12:4d:ba:62:1b:24:5e:
3f:ac:73:6d:43:71:62:23:00:97:56:7d:5b:5d:87:d9:7b:82:
cf:6b:03:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3ON16womHORTa5dJqHLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjJkNGNkMGMxYTlmZmUyNGFkNTE1M2QxOWNlOWMzMWRj
YjRjN2QwHhcNMjYwODE0MjAwMDQ4WhcNMjYwODE1MjAwMDQ4WjAzMTEwLwYDVQQD
EyhhZmE1ZWE3Njk3NWYxYWY4YjRmYmRlYzcxZTM4ZDI5MzI4YmZiZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/TONgxbjsGKfYhPxQDEazQAaLn8
G1wmW3jlTBQuZFyU7MRZrURfR0Tk137EUyB5r336l+3ttUymvNiy3vc1t9oZ+JiC
oZuxxAruhqvIZf2Mg/7s/YCizq7eNiehEm1p+1wNQUvWyKlXJIPgTnIXOQqoCP+V
TNYhqBueRdqeWIYPuS5M2h3UwTdsPeOZ5wwfR/Rh60fONwcW9WkuTKqMRVx4s3mf
SjBl4txHU+YjYeNEtRmYrS0ffos9SAyOxJiDpKpMq9oGyjM/BOs+WwyyWzztiib8
RjdQxi8YHoucjpk07LvNZhwtWc72/nx99UxrrSjlLYB8Y4OSJKjojgqIawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+l6naXXxr4tPvexx440pMov73SMB8GA1UdIwQY
MBaAFNFi1M0MGp/+JK1RU9Gc6cMdy0x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdMVXpRd2FuXzRrclZGVDBaenB3eDNMVEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Zjg0YTEtZThkYy00MTE1LWE2NDUt
ZTgxNzIwYTM5NzhkLzEvMFdMVXpRd2FuXzRrclZGVDBaenB3eDNMVEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81Zjg0YTEtZThkYy00MTE1LWE2NDUtZTgxNzIwYTM5Nzhk
LzEvMFdMVXpRd2FuXzRrclZGVDBaenB3eDNMVEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQuhNi5e
u5M4jQIPUhZ4bup5S59GKHTUfzMuElbV/WgAyi7iaCL1NY7+RKoTydJH7z8CJpj4
FC2pSb8amgff73c/4zNdhGcoosWgenghY6MmPqnQ5dKQAGfxag4IMcvBT5WtyAlP
n4wMIIyn9xXG4no0a8B7omDMhe27jNeDd/jOtvC4NsbgMos7rPEvuLO/sjDBgn7y
covrae3BQBopxV7kt34uH/nVZa6bhHnwWOka96Sd5vcqMlBzERIGxe0le5auL0RI
1BhciJCH1ciVOmh6Xzcr+y3+IRHZMUsGlb7d9dMSTbpiGyReP6xzbUNxYiMAl1Z9
W12H2XuCz2sDaQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:33 2026 by rpki-client