Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: T6IKsbRJPunV9sCCcHrFcKK1NIc7g5x9GfK2SbDNiZE=
Subject key identifier: 95:02:52:AB:1E:71:EA:D3:CA:7B:24:C5:29:4D:C2:D9:D3:22:8A:94
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019F189EFB84BCAFC8643FFEFC05E562E46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0A95
Signing time: Tue 30 Jun 2026 13:01:39 +0000
Manifest this update: Tue 30 Jun 2026 13:01:39 +0000
Manifest next update: Wed 01 Jul 2026 13:01:39 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: B9fdD/m42yn8wgqALA2ZmL+IwfacVXh4zTHNWO675Xw=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:fb:84:bc:af:c8:64:3f:fe:fc:05:e5:62:e4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Jun 30 13:01:39 2026 GMT
Not After : Jul 1 13:01:39 2026 GMT
Subject: CN=950252ab1e71ead3ca7b24c5294dc2d9d3228a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:b3:bc:2c:45:74:a6:fb:4e:98:c1:f5:f6:
11:e3:1f:77:17:90:37:82:75:03:ac:59:3d:a0:4f:
69:08:c1:cb:a7:aa:39:65:a1:7e:4f:70:1c:38:cf:
0b:6c:e7:52:a4:99:5b:67:3e:af:05:dd:04:6e:49:
6c:f2:1f:da:f8:ab:3c:e6:4d:a2:b5:51:e4:9f:46:
27:99:f0:b7:2e:80:73:81:a6:5f:90:b3:c8:86:32:
ae:51:05:2c:66:cc:5c:db:44:75:2c:e8:05:46:06:
df:88:68:e8:c4:58:90:38:4b:cb:9e:28:54:59:11:
0c:7f:f2:06:a6:ab:ed:90:a5:0b:17:a6:44:1d:63:
62:48:fc:3d:3e:5d:48:dc:cb:12:80:d3:71:4a:39:
cc:e1:a2:d9:7b:94:77:13:0a:76:6e:9b:3f:30:73:
b3:0b:bc:85:7d:d4:ba:23:34:87:93:99:61:fe:d5:
fb:26:11:93:9d:52:ca:59:93:ef:ba:ae:4d:ed:6e:
aa:bb:9b:a6:83:79:0a:ed:38:55:e7:20:1b:06:c9:
91:b0:da:04:eb:41:e7:df:a5:73:48:15:1d:73:da:
88:b6:bb:76:dc:70:b5:66:7f:c5:cf:54:83:2a:40:
26:4f:34:d8:67:fc:9f:49:72:5a:ae:da:0b:76:07:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:02:52:AB:1E:71:EA:D3:CA:7B:24:C5:29:4D:C2:D9:D3:22:8A:94
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ed:16:4a:20:90:77:c7:d5:8d:02:6f:59:44:63:a3:36:76:
40:6e:19:37:dd:4c:5d:c0:21:63:22:e3:51:74:35:fe:3c:66:
e9:78:86:43:50:87:0a:83:c7:d7:1c:ea:c4:e6:02:7e:57:22:
28:d9:5f:a9:44:50:b1:4e:8e:23:8d:b1:19:71:91:8b:64:7f:
18:1f:63:d9:3b:66:0c:08:c3:8b:50:19:94:45:ad:a0:43:51:
08:a0:7d:2d:02:00:4f:11:bf:ec:9e:7b:dd:db:6f:f4:f8:ec:
e8:38:8c:c6:80:88:42:e4:63:2a:2f:c9:97:88:8a:1b:a2:fe:
b6:a6:32:6f:9f:9d:8d:1d:5f:61:93:9a:d8:e3:84:c8:80:86:
19:ea:9f:25:3b:c7:24:3d:9a:c9:d0:9a:dd:cd:66:11:ba:e5:
36:b7:e2:24:cc:c4:9a:a8:b1:07:e3:88:56:6c:06:67:fd:f8:
92:9c:07:21:fd:bf:13:e4:c8:b6:dd:02:80:58:d4:95:f0:69:
05:cc:90:0f:d4:46:3b:71:15:0c:16:39:71:0b:e3:5c:2d:7a:
97:a8:30:dd:5e:64:f2:1c:e0:86:fa:ea:ee:8e:96:c8:9a:57:
28:c1:30:f6:04:e1:28:8d:bf:f8:fb:18:aa:30:c3:f8:39:61:
f2:a9:8f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnvuEvK/IZD/+/AXlYuRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0
MDRjMDcwHhcNMjYwNjMwMTMwMTM5WhcNMjYwNzAxMTMwMTM5WjAzMTEwLwYDVQQD
Eyg5NTAyNTJhYjFlNzFlYWQzY2E3YjI0YzUyOTRkYzJkOWQzMjI4YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1qzvCxFdKb7TpjB9fYR4x93F5A3
gnUDrFk9oE9pCMHLp6o5ZaF+T3AcOM8LbOdSpJlbZz6vBd0Ebkls8h/a+Ks85k2i
tVHkn0YnmfC3LoBzgaZfkLPIhjKuUQUsZsxc20R1LOgFRgbfiGjoxFiQOEvLnihU
WREMf/IGpqvtkKULF6ZEHWNiSPw9Pl1I3MsSgNNxSjnM4aLZe5R3Ewp2bps/MHOz
C7yFfdS6IzSHk5lh/tX7JhGTnVLKWZPvuq5N7W6qu5umg3kK7ThV5yAbBsmRsNoE
60Hn36VzSBUdc9qItrt23HC1Zn/Fz1SDKkAmTzTYZ/yfSXJartoLdgeavwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUCUqsecerTynskxSlNwtnTIoqUMB8GA1UdIwQY
MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt
NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx
LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAau0WSiCQ
d8fVjQJvWURjozZ2QG4ZN91MXcAhYyLjUXQ1/jxm6XiGQ1CHCoPH1xzqxOYCflci
KNlfqURQsU6OI42xGXGRi2R/GB9j2TtmDAjDi1AZlEWtoENRCKB9LQIATxG/7J57
3dtv9Pjs6DiMxoCIQuRjKi/Jl4iKG6L+tqYyb5+djR1fYZOa2OOEyICGGeqfJTvH
JD2aydCa3c1mEbrlNrfiJMzEmqixB+OIVmwGZ/34kpwHIf2/E+TItt0CgFjUlfBp
BcyQD9RGO3EVDBY5cQvjXC16l6gw3V5k8hzghvrq7o6WyJpXKMEw9gThKI2/+PsY
qjDD+Dlh8qmPzA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:34 2026 by rpki-client