Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: x47msqk4DehmMxOxRhiiKouDbSQxhZdRzLJFVvEE/+U=
Subject key identifier: 6D:94:8D:51:A2:FA:80:4C:D2:29:9A:3F:DA:49:0A:AA:A1:07:24:1F
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019E30E06741816DEDA253DF1BCAE36D0314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0A1D
Signing time: Sat 16 May 2026 13:01:13 +0000
Manifest this update: Sat 16 May 2026 13:01:13 +0000
Manifest next update: Sun 17 May 2026 13:01:13 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: HRC1IDgkrePf5ehZU+nFhQjoIlv8I/LiiAlWSVQkqhs=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:67:41:81:6d:ed:a2:53:df:1b:ca:e3:6d:03:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: May 16 13:01:13 2026 GMT
Not After : May 17 13:01:13 2026 GMT
Subject: CN=6d948d51a2fa804cd2299a3fda490aaaa107241f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:46:bd:78:d3:f1:73:ee:23:d3:b5:e4:07:
00:e5:97:34:2c:c6:e8:9e:64:ab:9e:36:cb:51:9b:
b6:b4:99:38:7a:37:73:ac:ed:0f:bb:ce:6d:f2:13:
c1:6d:1c:2d:51:18:a4:d8:76:ed:e3:02:43:6a:d7:
8e:9e:04:8d:ba:93:1b:3b:3a:36:39:1f:a0:6b:33:
10:56:af:60:56:46:dc:72:00:7a:5e:58:67:c4:d1:
9e:ed:f1:19:e8:f5:8b:a0:ef:19:d3:63:fc:07:85:
c8:80:3a:58:97:c5:a1:c8:3a:4b:39:ed:16:86:7f:
a6:fb:8c:bc:87:59:e9:d3:af:c9:f9:26:a4:c8:88:
f0:19:75:e3:8c:d7:1b:0f:e7:79:5d:62:1c:11:db:
8e:44:df:43:68:e5:5b:59:5e:5f:56:7b:76:5a:7f:
bd:9d:4d:03:70:87:10:e4:31:65:7d:cc:d7:a2:0c:
0c:46:fc:b6:b1:d8:fc:fa:8b:1a:ec:68:ce:3e:dd:
14:75:a4:5f:f1:32:c0:1b:fe:a1:e2:69:49:d7:53:
f0:6c:d4:ec:45:42:6d:3c:73:65:fb:bf:f2:08:50:
05:50:45:f6:9a:48:7c:86:66:a7:9f:06:10:2c:5e:
5c:20:68:de:50:91:ea:fa:f6:af:ba:1f:69:c6:13:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:94:8D:51:A2:FA:80:4C:D2:29:9A:3F:DA:49:0A:AA:A1:07:24:1F
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1c:f0:9c:db:33:7e:47:c9:35:05:e0:6c:59:1d:3c:47:6a:
4f:57:34:bc:4e:eb:ed:c5:97:f9:58:c1:18:6c:f2:fc:7d:c5:
7e:15:f4:4f:09:3e:2f:b3:8b:be:b8:03:a6:61:6a:12:b1:db:
78:ad:0f:e9:fd:b7:f2:fe:4a:4b:26:1a:1d:58:a9:0e:e0:94:
91:2f:58:94:80:1a:c9:ca:82:cd:25:30:59:f3:6c:5c:e8:b8:
5f:82:ae:cd:30:1f:20:f8:d5:88:1d:a7:bf:9c:80:3e:37:08:
3c:36:49:8c:f0:7b:bb:35:e9:5d:f0:58:3d:2c:06:6c:28:df:
14:62:c9:39:4d:b6:d7:08:ea:88:00:16:c4:83:6f:6e:39:27:
0c:d3:26:d1:99:8c:d8:59:94:6f:ee:10:f8:92:9b:bf:8f:74:
de:22:a7:b5:43:62:d1:58:66:2f:4b:59:7c:94:a9:40:bc:5a:
dc:09:aa:ff:68:b8:83:ca:58:bd:87:c8:41:fa:8a:c6:07:9d:
00:55:ac:08:f4:91:9a:ea:b9:2d:91:c0:4e:23:a4:8e:e1:e5:
97:f7:42:c9:be:10:42:0c:dd:91:b3:e3:97:76:89:49:8c:f7:
92:55:1e:ec:ad:9a:a6:00:2e:a9:60:43:0c:a3:de:25:aa:10:
55:fd:03:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4GdBgW3tolPfG8rjbQMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0
MDRjMDcwHhcNMjYwNTE2MTMwMTEzWhcNMjYwNTE3MTMwMTEzWjAzMTEwLwYDVQQD
Eyg2ZDk0OGQ1MWEyZmE4MDRjZDIyOTlhM2ZkYTQ5MGFhYWExMDcyNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F5GvXjT8XPuI9O15AcA5Zc0LMbo
nmSrnjbLUZu2tJk4ejdzrO0Pu85t8hPBbRwtURik2Hbt4wJDateOngSNupMbOzo2
OR+gazMQVq9gVkbccgB6XlhnxNGe7fEZ6PWLoO8Z02P8B4XIgDpYl8WhyDpLOe0W
hn+m+4y8h1np06/J+SakyIjwGXXjjNcbD+d5XWIcEduORN9DaOVbWV5fVnt2Wn+9
nU0DcIcQ5DFlfczXogwMRvy2sdj8+osa7GjOPt0UdaRf8TLAG/6h4mlJ11PwbNTs
RUJtPHNl+7/yCFAFUEX2mkh8hmannwYQLF5cIGjeUJHq+vavuh9pxhMyvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2UjVGi+oBM0imaP9pJCqqhByQfMB8GA1UdIwQY
MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt
NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx
LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBzwnNsz
fkfJNQXgbFkdPEdqT1c0vE7r7cWX+VjBGGzy/H3FfhX0Twk+L7OLvrgDpmFqErHb
eK0P6f238v5KSyYaHVipDuCUkS9YlIAaycqCzSUwWfNsXOi4X4KuzTAfIPjViB2n
v5yAPjcIPDZJjPB7uzXpXfBYPSwGbCjfFGLJOU221wjqiAAWxINvbjknDNMm0ZmM
2FmUb+4Q+JKbv4903iKntUNi0VhmL0tZfJSpQLxa3Amq/2i4g8pYvYfIQfqKxged
AFWsCPSRmuq5LZHATiOkjuHll/dCyb4QQgzdkbPjl3aJSYz3klUe7K2apgAuqWBD
DKPeJaoQVf0DOA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:42 2026 by rpki-client