Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: tvC1IKJv/DRwqDxCe8MAEoGbWz9dC1iy5tEEHiYxVJo=
Subject key identifier: B5:58:96:CA:B3:F3:C4:D1:D1:09:40:A7:5F:68:64:99:7E:4F:43:C0
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019DCF07885CA7608A8C735EB279392EEB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 13C9
Signing time: Mon 27 Apr 2026 13:01:10 +0000
Manifest this update: Mon 27 Apr 2026 13:01:10 +0000
Manifest next update: Tue 28 Apr 2026 13:01:10 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: Z65BPElPp1fNkJIuo3BbS2238faCKIgrv9pb8IcOUCA=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:88:5c:a7:60:8a:8c:73:5e:b2:79:39:2e:eb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Apr 27 13:01:10 2026 GMT
Not After : Apr 28 13:01:10 2026 GMT
Subject: CN=b55896cab3f3c4d1d10940a75f6864997e4f43c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:2b:0c:f0:ff:69:c1:74:3e:03:17:47:65:
24:43:f0:92:bb:96:78:b9:79:0d:5f:3c:74:6d:a9:
13:b7:cf:18:ef:97:44:af:b1:e5:ef:17:25:cf:c9:
f6:a2:86:69:bd:e9:63:46:f6:50:fb:24:36:23:b2:
8f:0a:65:65:48:15:32:91:3a:77:a7:e8:d6:e0:a1:
97:d0:c8:97:c8:bc:05:95:e2:a3:3c:f2:f2:94:2c:
0a:ff:33:b5:51:ad:0f:b3:fd:11:b9:b6:5e:6c:96:
75:6b:72:4f:e1:cc:27:16:54:51:60:b9:3f:b9:be:
b7:6b:b2:0c:9d:9b:c8:40:2f:38:29:ef:e8:c2:a3:
63:bd:8a:09:94:1f:96:02:2d:c1:63:9a:c0:7d:20:
a1:0f:c2:19:e5:ae:a4:4c:69:72:16:cc:47:a5:40:
36:8f:55:33:b1:a5:a3:da:54:1f:0d:3e:f4:f0:e2:
e8:0d:a4:ab:bd:22:78:36:9c:d2:4b:f7:5f:b9:de:
0f:cc:35:d9:87:99:ae:9e:b1:d0:c1:4f:ae:e9:e6:
7f:91:28:a1:54:2f:5f:45:9e:8d:4a:28:01:3b:1f:
68:35:70:c6:51:b3:37:1e:95:a8:30:94:d8:6d:80:
76:23:81:55:60:1d:cb:7f:27:ea:5a:74:6b:82:b8:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:96:CA:B3:F3:C4:D1:D1:09:40:A7:5F:68:64:99:7E:4F:43:C0
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e0:74:91:9e:b9:9d:b3:2d:5a:8e:9d:80:27:69:66:59:08:
ae:34:35:57:c3:30:e1:22:da:7f:0d:67:ca:de:ad:1a:ad:0a:
36:33:68:7d:c7:4f:03:f8:a8:b1:0e:75:ef:8b:15:af:94:9c:
8f:41:d4:12:38:4f:ca:73:61:8f:3a:6a:ed:b6:dd:20:59:de:
fd:29:36:ad:9b:52:0c:e8:55:3b:46:c2:83:08:5d:17:78:da:
6e:4b:1d:ca:39:66:1e:3e:32:ea:9d:9a:77:f5:e6:e0:28:37:
80:41:17:8b:44:a7:41:40:c2:24:11:00:c9:19:15:25:29:88:
80:37:7c:1c:53:04:6c:64:c4:8f:cb:1e:78:60:fa:a1:53:5f:
15:fe:a8:27:f1:4a:19:25:9c:8e:a4:cd:48:43:65:8a:3c:1b:
17:88:53:51:d1:5f:36:70:e6:1d:bf:8f:3d:7c:3a:23:0b:97:
3d:e1:56:0c:14:59:3e:48:ce:53:85:1e:2f:5f:58:ed:d3:7a:
c7:ba:48:d1:37:d4:3c:4e:64:67:ad:b1:8b:f7:cf:18:7f:12:
0e:53:69:49:c1:48:13:92:19:60:af:4d:32:59:33:46:83:8d:
3d:12:8e:f1:9f:e3:1a:4b:42:83:42:b6:56:31:79:ff:4d:74:
c8:90:48:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PB4hcp2CKjHNesnk5LuuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjRmYTgwNzU4NzUzYjI0M2EyMTY1ZWRkZWE3NWRiZWVl
ODI2YzQwHhcNMjYwNDI3MTMwMTEwWhcNMjYwNDI4MTMwMTEwWjAzMTEwLwYDVQQD
EyhiNTU4OTZjYWIzZjNjNGQxZDEwOTQwYTc1ZjY4NjQ5OTdlNGY0M2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIgrDPD/acF0PgMXR2UkQ/CSu5Z4
uXkNXzx0bakTt88Y75dEr7Hl7xclz8n2ooZpveljRvZQ+yQ2I7KPCmVlSBUykTp3
p+jW4KGX0MiXyLwFleKjPPLylCwK/zO1Ua0Ps/0RubZebJZ1a3JP4cwnFlRRYLk/
ub63a7IMnZvIQC84Ke/owqNjvYoJlB+WAi3BY5rAfSChD8IZ5a6kTGlyFsxHpUA2
j1UzsaWj2lQfDT708OLoDaSrvSJ4NpzSS/dfud4PzDXZh5munrHQwU+u6eZ/kSih
VC9fRZ6NSigBOx9oNXDGUbM3HpWoMJTYbYB2I4FVYB3LfyfqWnRrgrjrxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVYlsqz88TR0QlAp19oZJl+T0PAMB8GA1UdIwQY
MBaAFND0+oB1h1OyQ6IWXt3qddvu6CbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMt
NzJhMWYzNzcxOWJiLzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMtNzJhMWYzNzcxOWJi
LzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuB0kZ65
nbMtWo6dgCdpZlkIrjQ1V8Mw4SLafw1nyt6tGq0KNjNofcdPA/iosQ5174sVr5Sc
j0HUEjhPynNhjzpq7bbdIFne/Sk2rZtSDOhVO0bCgwhdF3jabksdyjlmHj4y6p2a
d/Xm4Cg3gEEXi0SnQUDCJBEAyRkVJSmIgDd8HFMEbGTEj8seeGD6oVNfFf6oJ/FK
GSWcjqTNSENlijwbF4hTUdFfNnDmHb+PPXw6IwuXPeFWDBRZPkjOU4UeL19Y7dN6
x7pI0TfUPE5kZ62xi/fPGH8SDlNpScFIE5IZYK9NMlkzRoONPRKO8Z/jGktCg0K2
VjF5/010yJBIJA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:39:12 2026 by rpki-client