Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: o30bluXmocGi7ox+Rd6oMxgTppbYKLQWJ5N6NYqFFPI=
Subject key identifier: 35:1A:A9:37:07:B7:CA:20:2B:19:DE:EF:13:3D:E4:3F:DE:03:02:D3
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 01A17D735878D91CB217FF48F486C33217D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 15B1
Signing time: Tue 27 Oct 2026 13:01:13 +0000
Manifest this update: Tue 27 Oct 2026 13:01:13 +0000
Manifest next update: Wed 28 Oct 2026 13:01:13 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: nsjY57SBRAzZzh9Hq00WONvFXOy4LAH4tv3pcE/r664=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:58:78:d9:1c:b2:17:ff:48:f4:86:c3:32:17:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Oct 27 13:01:13 2026 GMT
Not After : Oct 28 13:01:13 2026 GMT
Subject: CN=351aa93707b7ca202b19deef133de43fde0302d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:6c:b0:cf:4a:4a:ff:b5:da:6a:42:2b:d7:
34:2d:54:bf:19:d4:0c:44:d3:57:21:56:19:0f:12:
48:dd:9f:ec:79:d4:89:46:68:10:21:91:7f:ea:31:
27:b7:fb:c3:eb:47:b7:dd:8d:6f:34:a6:b4:2f:55:
5d:3b:e3:d9:a5:b8:6b:8a:d2:4b:39:4c:b7:7d:ea:
80:7e:c9:64:41:26:12:fc:71:58:0f:c5:81:0d:82:
be:70:9a:5a:2f:c1:b7:4a:c2:78:a1:ff:3c:73:b7:
b8:7c:1b:eb:cd:60:21:3a:74:4a:62:1a:3d:56:ad:
89:21:b1:e0:d0:71:48:ec:8d:21:79:50:08:fe:cd:
b7:39:00:22:1e:b1:e1:5d:9d:b3:17:7f:94:cb:ae:
3d:d2:a0:c3:3c:5b:ef:0f:bb:78:6a:46:ce:76:f4:
f6:c5:96:89:08:cc:12:f3:f6:f2:1e:78:5f:63:59:
2d:a7:de:0a:38:3e:73:5d:ea:e8:9b:90:cb:33:18:
8e:a0:a3:58:c1:d5:2b:84:1b:65:b3:8f:d0:4a:a2:
53:48:9f:47:75:3c:12:cc:29:10:00:21:f2:dd:de:
15:41:68:d4:65:a1:52:44:63:ef:96:b7:7f:b5:52:
ce:65:e2:ca:5d:f4:ee:ad:39:26:3c:66:aa:e3:b1:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1A:A9:37:07:B7:CA:20:2B:19:DE:EF:13:3D:E4:3F:DE:03:02:D3
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7c:bb:f2:3c:28:1b:31:35:2b:6d:49:2d:89:38:81:e9:0d:
ea:a2:19:1a:4a:be:aa:b1:fc:7d:cf:2c:c5:a4:c1:18:f7:84:
8a:a4:fe:3c:a5:65:d1:48:8f:36:82:e1:78:12:1f:ca:ec:ff:
c0:b9:26:93:d4:3d:12:79:9a:a0:1e:a6:77:fc:9a:af:01:69:
7a:7c:60:82:e4:2d:0f:f4:56:ac:77:6a:77:f8:30:cf:f9:8f:
90:d6:3f:c7:73:47:c5:44:5e:69:a1:9f:5d:e5:15:59:20:e5:
0c:a3:3e:f2:06:8e:d4:af:2b:cb:84:02:75:3c:a7:06:e4:f8:
9f:09:3d:26:db:10:e2:19:fe:96:de:00:75:9b:07:12:e4:47:
fe:17:af:0d:d1:83:85:c2:c9:87:12:18:e5:a0:bd:38:f2:b4:
e3:6d:ea:4e:f4:58:c5:90:e3:48:3f:7a:21:ad:c5:d2:7b:87:
d3:a8:2b:5e:1e:27:25:27:7b:58:1b:3c:72:e2:0d:61:4a:2e:
e6:a8:12:46:7b:23:17:be:f2:ee:09:0e:93:ad:0a:9d:7d:93:
b2:7b:d7:79:7e:09:86:5a:34:2a:fc:fa:69:ec:b5:37:80:ed:
9c:44:36:45:88:86:27:36:6b:7b:e4:27:de:69:f2:a8:f6:78:
11:8f:f4:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9c1h42RyyF/9I9IbDMhfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjRmYTgwNzU4NzUzYjI0M2EyMTY1ZWRkZWE3NWRiZWVl
ODI2YzQwHhcNMjYxMDI3MTMwMTEzWhcNMjYxMDI4MTMwMTEzWjAzMTEwLwYDVQQD
EygzNTFhYTkzNzA3YjdjYTIwMmIxOWRlZWYxMzNkZTQzZmRlMDMwMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqFssM9KSv+12mpCK9c0LVS/GdQM
RNNXIVYZDxJI3Z/sedSJRmgQIZF/6jEnt/vD60e33Y1vNKa0L1VdO+PZpbhritJL
OUy3feqAfslkQSYS/HFYD8WBDYK+cJpaL8G3SsJ4of88c7e4fBvrzWAhOnRKYho9
Vq2JIbHg0HFI7I0heVAI/s23OQAiHrHhXZ2zF3+Uy6490qDDPFvvD7t4akbOdvT2
xZaJCMwS8/byHnhfY1ktp94KOD5zXerom5DLMxiOoKNYwdUrhBtls4/QSqJTSJ9H
dTwSzCkQACHy3d4VQWjUZaFSRGPvlrd/tVLOZeLKXfTurTkmPGaq47Eo/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUaqTcHt8ogKxne7xM95D/eAwLTMB8GA1UdIwQY
MBaAFND0+oB1h1OyQ6IWXt3qddvu6CbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMt
NzJhMWYzNzcxOWJiLzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMtNzJhMWYzNzcxOWJi
LzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXy78jwo
GzE1K21JLYk4gekN6qIZGkq+qrH8fc8sxaTBGPeEiqT+PKVl0UiPNoLheBIfyuz/
wLkmk9Q9EnmaoB6md/yarwFpenxgguQtD/RWrHdqd/gwz/mPkNY/x3NHxUReaaGf
XeUVWSDlDKM+8gaO1K8ry4QCdTynBuT4nwk9JtsQ4hn+lt4AdZsHEuRH/hevDdGD
hcLJhxIY5aC9OPK0423qTvRYxZDjSD96Ia3F0nuH06grXh4nJSd7WBs8cuINYUou
5qgSRnsjF77y7gkOk60KnX2TsnvXeX4Jhlo0Kvz6aey1N4DtnEQ2RYiGJzZre+Qn
3mnyqPZ4EY/0NA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:25:08 2026 by rpki-client