Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: 9BVWIj+JbSAjfByKMQz6VfrHiWJIG87LX4AYyryY/Q4=
Subject key identifier: 75:EF:A0:41:4A:8D:51:2E:E9:25:F8:01:20:07:9B:11:77:4E:E5:81
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019E30E03B838D68ECBA091E9AAA8530F9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 13:01:02 +0000
Manifest this update: Sat 16 May 2026 13:01:02 +0000
Manifest next update: Sun 17 May 2026 13:01:02 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: YeEUcvW3KoHJnWNKmUq2jRCkmGh+4a6Ptxi2i866ijU=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:3b:83:8d:68:ec:ba:09:1e:9a:aa:85:30:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: May 16 13:01:02 2026 GMT
Not After : May 17 13:01:02 2026 GMT
Subject: CN=75efa0414a8d512ee925f80120079b11774ee581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:b2:99:8a:67:1d:4d:7e:6e:c6:af:bd:f8:
56:88:33:d0:70:e0:93:b7:da:19:7a:1f:61:ca:9b:
46:62:f9:a2:b2:97:62:ae:f8:87:0e:0c:1f:b3:6a:
03:ca:4f:9a:75:0e:54:dc:1c:4a:83:b6:24:e4:b1:
34:95:8c:67:03:5c:11:22:cd:62:f3:5c:da:77:10:
af:29:e5:f1:3e:31:de:34:ea:66:60:9d:b9:a9:f6:
68:1d:ad:1e:98:b4:68:f4:d4:cc:04:c9:15:4d:e9:
e9:3a:d9:bc:81:65:82:16:cd:db:28:45:e6:26:59:
4d:1d:e2:43:23:33:03:38:5c:8a:47:d6:0b:71:af:
41:67:b4:9a:bc:f5:ed:ef:21:78:7e:0c:07:55:3f:
c0:f8:5e:d2:91:27:a5:44:83:e6:c5:f1:f8:f5:99:
7d:a5:4e:55:90:b0:37:d4:e2:b8:be:b3:c4:61:75:
b1:1a:67:9b:44:27:22:49:92:93:5b:c1:f3:dd:35:
ae:2c:90:e4:eb:91:eb:b7:92:e3:e0:a9:b7:51:02:
54:3f:63:66:80:61:ef:3f:47:00:e7:fe:47:87:d7:
67:23:6e:17:fe:7c:9e:58:c0:ff:dc:21:66:f6:ac:
7d:93:63:44:c5:23:d4:1c:f2:d7:a5:9c:83:a8:80:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EF:A0:41:4A:8D:51:2E:E9:25:F8:01:20:07:9B:11:77:4E:E5:81
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c0:f4:91:67:2b:9e:4a:d5:c2:34:bd:ed:14:53:1d:09:4a:
8e:bf:21:b9:70:81:4d:4b:70:89:e8:29:22:37:0c:c9:24:15:
ca:88:8f:8a:f4:0b:c4:64:8a:28:27:55:4e:9e:f2:4d:a2:28:
ec:ca:87:eb:d2:4b:dd:ac:47:b5:e7:22:0f:48:19:b9:5f:d2:
97:e5:a8:96:95:d8:1c:df:53:ad:82:49:c3:63:dc:f4:1a:9b:
a0:46:95:7e:f3:e2:8e:f3:c8:e7:a2:dc:8a:f9:d3:00:72:55:
54:a3:b1:c5:5b:be:14:c3:11:aa:df:9b:a3:a8:2a:d0:2e:c0:
4e:a0:af:d1:ce:ce:13:b7:61:a0:c3:44:78:bd:df:b9:eb:ef:
5a:0f:29:18:ae:67:8a:60:1c:d6:f4:49:35:d8:ed:86:9e:1d:
44:cf:f4:15:12:66:cd:bd:be:ef:de:81:a3:a7:b3:53:e8:69:
ab:71:cc:1e:fc:c7:8d:71:21:09:8b:cf:7b:e7:45:fc:0c:13:
ee:b4:d8:12:23:64:7e:db:4a:bc:38:84:36:81:d9:7e:8f:5a:
58:0d:6e:ec:44:a0:8e:66:e3:f8:00:85:ae:3c:d8:47:f2:35:
fd:43:35:3c:e1:c3:f9:9f:de:e3:5c:70:b1:11:b6:a9:f5:0d:
c4:c5:59:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4DuDjWjsugkemqqFMPnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh
MzExMGYwHhcNMjYwNTE2MTMwMTAyWhcNMjYwNTE3MTMwMTAyWjAzMTEwLwYDVQQD
Eyg3NWVmYTA0MTRhOGQ1MTJlZTkyNWY4MDEyMDA3OWIxMTc3NGVlNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35aymYpnHU1+bsavvfhWiDPQcOCT
t9oZeh9hyptGYvmispdirviHDgwfs2oDyk+adQ5U3BxKg7Yk5LE0lYxnA1wRIs1i
81zadxCvKeXxPjHeNOpmYJ25qfZoHa0emLRo9NTMBMkVTenpOtm8gWWCFs3bKEXm
JllNHeJDIzMDOFyKR9YLca9BZ7SavPXt7yF4fgwHVT/A+F7SkSelRIPmxfH49Zl9
pU5VkLA31OK4vrPEYXWxGmebRCciSZKTW8Hz3TWuLJDk65Hrt5Lj4Km3UQJUP2Nm
gGHvP0cA5/5Hh9dnI24X/nyeWMD/3CFm9qx9k2NExSPUHPLXpZyDqIAOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXvoEFKjVEu6SX4ASAHmxF3TuWBMB8GA1UdIwQY
MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt
ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll
LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMD0kWcr
nkrVwjS97RRTHQlKjr8huXCBTUtwiegpIjcMySQVyoiPivQLxGSKKCdVTp7yTaIo
7MqH69JL3axHteciD0gZuV/Sl+WolpXYHN9TrYJJw2Pc9BqboEaVfvPijvPI56Lc
ivnTAHJVVKOxxVu+FMMRqt+bo6gq0C7ATqCv0c7OE7dhoMNEeL3fuevvWg8pGK5n
imAc1vRJNdjthp4dRM/0FRJmzb2+796Bo6ezU+hpq3HMHvzHjXEhCYvPe+dF/AwT
7rTYEiNkfttKvDiENoHZfo9aWA1u7ESgjmbj+ACFrjzYR/I1/UM1POHD+Z/e41xw
sRG2qfUNxMVZmA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:08:17 2026 by rpki-client