Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: knfWfNvkyh8AscuyQkAJDll8VEHY2J2BQHr+LI9U7kM=
Subject key identifier: C0:7C:35:28:55:CE:78:9D:94:82:1D:A1:D5:B8:9C:21:D5:18:B8:85
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 019E2F28C09B25CFEE71DE8AEB3D97C42A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 17A4
Signing time: Sat 16 May 2026 05:01:00 +0000
Manifest this update: Sat 16 May 2026 05:01:00 +0000
Manifest next update: Sun 17 May 2026 05:01:00 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: T5xLb/48W6R8IM2hEkM68ch5chNFTW7jYTgLJVrG0NQ=)
2: CuoNMY7Qq37VOjNaS3NSAgeASU8.roa (hash: oV7Za3ljWN5/ELZ5W0IrtTxHnlCCtRf76iTFx/48w6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:28:c0:9b:25:cf:ee:71:de:8a:eb:3d:97:c4:2a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: May 16 05:01:00 2026 GMT
Not After : May 17 05:01:00 2026 GMT
Subject: CN=c07c352855ce789d94821da1d5b89c21d518b885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:a7:b4:36:05:3d:9c:10:29:84:a9:c5:02:
09:a2:37:d2:3a:1b:14:8b:56:d8:24:e9:79:63:69:
76:78:df:2a:26:e2:e2:cb:c6:97:67:00:c9:4f:a2:
9f:a9:08:17:26:1d:cf:56:14:a0:3d:df:ae:ed:33:
4b:90:f8:d6:12:55:1e:2c:7c:42:3c:9a:0a:8c:88:
c7:43:2d:d2:98:88:4f:50:d2:a7:d1:0f:c9:55:49:
8c:1c:e9:1a:df:14:06:7b:20:ba:24:02:49:9c:db:
8a:b9:c6:27:3c:61:85:e1:c6:40:00:03:a5:0c:a9:
8b:14:28:78:56:ca:6c:9c:6e:78:88:97:7c:55:b3:
c6:17:39:7c:33:02:7b:94:6f:36:51:20:2f:34:c2:
33:32:d3:21:fb:e9:89:7b:5f:48:fe:eb:ed:95:7b:
fc:ac:c6:c6:16:00:7e:24:15:b8:4a:38:43:b0:43:
25:ef:c4:b0:c1:7e:ca:79:78:97:2e:70:07:31:9e:
fa:5b:37:7f:f3:11:fd:23:05:fb:da:c8:d7:35:1f:
c5:cd:fc:71:9a:a4:bc:c7:b6:8e:a8:ae:5e:36:6d:
82:26:11:d4:e2:2f:85:63:fe:52:63:01:03:13:92:
45:d2:9f:86:fd:1f:8f:ea:80:1d:65:84:ac:49:48:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7C:35:28:55:CE:78:9D:94:82:1D:A1:D5:B8:9C:21:D5:18:B8:85
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:69:d6:f7:82:f9:bf:72:77:fc:03:42:96:6d:9b:ee:cc:c0:
9e:82:be:fa:1e:b3:1d:55:dd:26:c5:51:a6:64:42:b3:51:23:
7f:9e:f8:10:d8:19:69:89:8b:50:fd:60:8d:e3:91:9d:30:63:
2a:0b:5a:ef:e4:74:14:3d:6b:cf:93:40:22:f7:67:19:59:a5:
b2:d5:74:c8:b7:f6:61:d2:75:c9:69:46:1e:54:01:ea:d8:b1:
04:08:ab:c3:7b:d9:27:da:1a:e6:46:63:b6:0f:91:fe:54:25:
66:ee:f3:8b:10:fd:93:d5:3c:c5:3b:49:0f:80:2b:6e:b2:5d:
e3:ab:79:54:7a:2e:6c:7d:75:5b:17:fa:f9:38:b8:c0:02:ee:
9e:bb:c9:8d:e3:7f:fd:8f:38:14:03:9e:9d:a2:d9:93:e0:47:
80:80:ac:a8:51:0b:ee:ce:f9:dd:6e:ef:30:a9:8a:13:89:05:
9d:0c:0c:2a:d8:5e:a8:4c:9b:da:cb:c8:ca:5e:f8:bd:31:20:
4a:1e:59:bb:0c:ab:a1:94:ec:04:b0:8d:ba:16:9c:99:68:91:
23:0a:f5:1a:aa:f2:53:2c:d1:89:73:94:48:70:d6:80:a5:fb:
d9:48:a2:eb:01:88:80:d4:73:6e:7d:89:ee:82:6c:9f:56:ec:
ee:e7:41:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vKMCbJc/ucd6K6z2XxCoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYmJjOTA1NTVkNmQwZDM0MzJiYWJiOTViNjBjZGVlZWE1
ODBmNTgwHhcNMjYwNTE2MDUwMTAwWhcNMjYwNTE3MDUwMTAwWjAzMTEwLwYDVQQD
EyhjMDdjMzUyODU1Y2U3ODlkOTQ4MjFkYTFkNWI4OWMyMWQ1MThiODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaKntDYFPZwQKYSpxQIJojfSOhsU
i1bYJOl5Y2l2eN8qJuLiy8aXZwDJT6KfqQgXJh3PVhSgPd+u7TNLkPjWElUeLHxC
PJoKjIjHQy3SmIhPUNKn0Q/JVUmMHOka3xQGeyC6JAJJnNuKucYnPGGF4cZAAAOl
DKmLFCh4VspsnG54iJd8VbPGFzl8MwJ7lG82USAvNMIzMtMh++mJe19I/uvtlXv8
rMbGFgB+JBW4SjhDsEMl78SwwX7KeXiXLnAHMZ76Wzd/8xH9IwX72sjXNR/Fzfxx
mqS8x7aOqK5eNm2CJhHU4i+FY/5SYwEDE5JF0p+G/R+P6oAdZYSsSUirPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB8NShVznidlIIdodW4nCHVGLiFMB8GA1UdIwQY
MBaAFNK7yQVV1tDTQyuruVtgze7qWA9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgt
N2JjMWU0ZjU2Yzg4LzEvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgtN2JjMWU0ZjU2Yzg4
LzEvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmnW94L5
v3J3/ANClm2b7szAnoK++h6zHVXdJsVRpmRCs1Ejf574ENgZaYmLUP1gjeORnTBj
Kgta7+R0FD1rz5NAIvdnGVmlstV0yLf2YdJ1yWlGHlQB6tixBAirw3vZJ9oa5kZj
tg+R/lQlZu7zixD9k9U8xTtJD4ArbrJd46t5VHoubH11Wxf6+Ti4wALunrvJjeN/
/Y84FAOenaLZk+BHgICsqFEL7s753W7vMKmKE4kFnQwMKtheqEyb2svIyl74vTEg
Sh5ZuwyroZTsBLCNuhacmWiRIwr1GqryUyzRiXOUSHDWgKX72Uii6wGIgNRzbn2J
7oJsn1bs7udBtA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:17 2026 by rpki-client