Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: 0foO4njJTNnWN18Z7MJf/rQ6cGAHFM0Ua06ruZr6zJA=
Subject key identifier: AE:D8:FA:61:F9:10:7F:A1:46:B5:B7:3D:86:57:13:23:17:46:C7:A3
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019E3117921CCAA50BA0E4C438E87B9AAE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 130B
Signing time: Sat 16 May 2026 14:01:28 +0000
Manifest this update: Sat 16 May 2026 14:01:28 +0000
Manifest next update: Sun 17 May 2026 14:01:28 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: UZKq1m33aCHZv32T4H5GXIYUbYMygLUU1aTb2dTQpAU=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:92:1c:ca:a5:0b:a0:e4:c4:38:e8:7b:9a:ae:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: May 16 14:01:28 2026 GMT
Not After : May 17 14:01:28 2026 GMT
Subject: CN=aed8fa61f9107fa146b5b73d865713231746c7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:ba:2d:6e:7f:a0:5f:81:2f:8b:7d:fd:24:
38:29:18:05:1e:0a:8e:0c:07:6d:76:21:97:59:72:
51:1e:fe:30:b7:da:64:98:c5:76:d0:09:df:a3:4f:
88:ee:53:2e:86:89:2c:5b:2c:1a:9d:bc:34:99:46:
26:2f:ac:19:c7:44:7a:21:ca:8e:f4:a5:a8:9b:14:
0a:fd:a2:1d:68:b4:04:b2:18:4f:01:31:e1:ed:6d:
8f:19:13:f2:8a:33:a9:05:ee:f9:53:8a:fc:74:db:
07:25:5c:14:6b:b6:5a:97:92:75:30:63:f0:63:dd:
a3:ab:bc:90:34:60:b7:ff:ba:d8:da:ca:d1:a5:ad:
06:b5:02:b2:69:22:4d:1a:13:60:ed:d7:41:91:af:
ef:3e:a7:86:00:82:5d:9e:c8:9d:64:3a:dd:af:97:
71:9b:57:3a:d3:8c:c0:a2:78:e6:1c:00:79:df:af:
52:bc:19:07:40:ae:cc:cb:d3:6d:a2:29:1d:2f:cf:
d5:7d:a0:51:2c:b3:e3:23:9f:26:72:d0:20:c0:90:
13:4a:2b:5b:ef:1b:c6:25:b2:b8:9d:1d:08:c1:d3:
e4:fd:88:49:9c:db:d0:68:3e:94:c7:ca:a4:8d:20:
a7:dd:14:b1:ea:75:c6:a2:5b:50:63:ea:3a:5a:fe:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D8:FA:61:F9:10:7F:A1:46:B5:B7:3D:86:57:13:23:17:46:C7:A3
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:8f:e1:40:e9:59:8e:4d:9d:49:55:66:3d:ee:3a:50:c9:
b9:19:1c:09:c7:e5:c8:9e:c4:a1:24:b6:6f:dc:df:1e:a3:a2:
7a:63:5f:2f:5f:11:1c:6f:d3:f9:94:56:0f:71:90:68:c0:2c:
e0:f7:98:2b:c0:08:ee:97:12:26:70:47:9e:d8:39:6c:fc:c9:
5a:b5:14:01:07:ca:a4:d1:ef:5f:6c:cc:ba:72:54:1b:8b:5c:
c9:59:1f:59:0c:83:a3:ef:cf:23:21:1a:88:b9:a8:cd:fe:ed:
fa:0e:50:51:bd:6b:d4:f3:4a:31:8f:c4:ef:d3:00:7a:6c:ef:
13:3c:96:57:31:e9:a1:2a:c8:82:ce:10:8c:64:9c:a7:24:ca:
4d:a4:43:9d:65:15:53:59:c6:6d:c4:67:4b:7a:48:c7:ea:55:
e8:63:76:76:c2:cf:57:a9:02:8b:9f:c9:80:d0:e8:fa:0f:e3:
8b:a5:54:13:13:30:dc:be:4c:0d:83:de:f3:ba:69:85:83:1b:
8a:11:82:64:42:6f:95:17:1e:c1:b4:79:94:29:64:e5:ca:a5:
f5:51:22:30:6a:ab:ea:39:2b:50:ee:9c:e0:56:fa:c6:d7:62:
fb:e6:d2:de:20:1c:f5:5a:11:b9:b6:3a:0a:9c:d8:9d:c1:37:
6d:80:76:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF5IcyqULoOTEOOh7mq5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2UxMzEwMDhkZWY3MDVhNDE3ZjBkNDBkMTQ4YTM2ZjI1
YTFhMzkwHhcNMjYwNTE2MTQwMTI4WhcNMjYwNTE3MTQwMTI4WjAzMTEwLwYDVQQD
EyhhZWQ4ZmE2MWY5MTA3ZmExNDZiNWI3M2Q4NjU3MTMyMzE3NDZjN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxK6LW5/oF+BL4t9/SQ4KRgFHgqO
DAdtdiGXWXJRHv4wt9pkmMV20Anfo0+I7lMuhoksWywanbw0mUYmL6wZx0R6IcqO
9KWomxQK/aIdaLQEshhPATHh7W2PGRPyijOpBe75U4r8dNsHJVwUa7Zal5J1MGPw
Y92jq7yQNGC3/7rY2srRpa0GtQKyaSJNGhNg7ddBka/vPqeGAIJdnsidZDrdr5dx
m1c604zAonjmHAB5369SvBkHQK7My9NtoikdL8/VfaBRLLPjI58mctAgwJATSitb
7xvGJbK4nR0IwdPk/YhJnNvQaD6Ux8qkjSCn3RSx6nXGoltQY+o6Wv563QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7Y+mH5EH+hRrW3PYZXEyMXRsejMB8GA1UdIwQY
MBaAFNM+ExAI3vcFpBfw1A0UijbyWho5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAt
MDkwN2FkMzRjYjlmLzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAtMDkwN2FkMzRjYjlm
LzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuSP4UDp
WY5NnUlVZj3uOlDJuRkcCcflyJ7EoSS2b9zfHqOiemNfL18RHG/T+ZRWD3GQaMAs
4PeYK8AI7pcSJnBHntg5bPzJWrUUAQfKpNHvX2zMunJUG4tcyVkfWQyDo+/PIyEa
iLmozf7t+g5QUb1r1PNKMY/E79MAemzvEzyWVzHpoSrIgs4QjGScpyTKTaRDnWUV
U1nGbcRnS3pIx+pV6GN2dsLPV6kCi5/JgNDo+g/ji6VUExMw3L5MDYPe87pphYMb
ihGCZEJvlRcewbR5lClk5cql9VEiMGqr6jkrUO6c4Fb6xtdi++bS3iAc9VoRubY6
CpzYncE3bYB29A==
-----END CERTIFICATE-----
Generated at Sat May 16 18:41:56 2026 by rpki-client