Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: 3AdhnaSL4ClGEwmz7nAGJh4Jp7vZlOtzn7us+4r4Jp8=
Subject key identifier: B1:9C:C9:22:CE:DC:96:4E:F7:EC:04:46:AC:B0:CC:55:FB:36:0A:E2
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 019F189E481E6DCF18147FFDCA5FDC97EF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 13:00:54 +0000
Manifest this update: Tue 30 Jun 2026 13:00:54 +0000
Manifest next update: Wed 01 Jul 2026 13:00:54 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: /pKi+OMQ3t2AZ8inJkrK9e2zsJTTlKYXLe+FRPrvQFI=)
2: 12mV3ZosY8cTKWpFfBQEfwnx0BM.roa (hash: sqnV6smhnureA54M31ulMVSP8a9WYb/7AIpEIZop+fE=)
3: w-By4YicrBafnG_nw52slsPB7Mo.roa (hash: EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:48:1e:6d:cf:18:14:7f:fd:ca:5f:dc:97:ef:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Jun 30 13:00:54 2026 GMT
Not After : Jul 1 13:00:54 2026 GMT
Subject: CN=b19cc922cedc964ef7ec0446acb0cc55fb360ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:ff:4e:0d:e0:46:ed:e4:ad:9c:a1:2f:4d:
c7:1d:4c:3b:02:df:5f:8a:9d:93:48:f2:1b:c8:88:
7a:33:6b:60:ef:f9:5c:70:14:11:88:11:1d:23:a5:
70:45:72:04:08:48:57:ed:10:1f:8a:a0:fc:75:4c:
79:ef:c8:16:37:23:f4:4d:c8:ba:19:ff:4d:de:68:
e1:1d:1a:6e:6b:18:3f:56:96:6c:e3:47:8a:cc:cb:
e6:08:fb:b9:e9:da:be:8b:52:93:a6:5e:f4:51:8e:
f4:85:eb:35:89:af:44:43:81:fe:6c:ae:07:e1:b1:
90:1c:41:c8:3b:c9:37:51:95:5a:62:65:57:c2:30:
06:58:56:43:38:18:f1:10:ea:14:26:55:5c:5a:ce:
fb:f7:d7:a9:7a:de:05:2e:f9:17:e1:3a:32:6f:cf:
22:38:0c:05:a2:b5:73:ab:4f:5d:48:56:a0:c9:3c:
94:24:75:8b:25:3f:3e:62:84:02:26:b9:39:7b:c9:
3d:90:4d:6c:c4:26:a0:ff:0d:99:11:25:c4:72:fa:
a9:09:5d:83:4d:82:c9:3b:7b:05:cc:30:3b:ad:7c:
a6:bf:88:d2:f0:66:2b:7a:45:60:17:69:79:39:ac:
79:69:cf:9c:37:75:e9:17:27:05:ff:00:d2:9f:05:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9C:C9:22:CE:DC:96:4E:F7:EC:04:46:AC:B0:CC:55:FB:36:0A:E2
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7f:2e:86:9b:9c:41:62:9a:3d:22:57:70:fc:be:c2:fe:63:
fd:af:c0:70:ab:e6:39:45:a5:74:91:06:2f:3b:39:d1:01:d5:
73:3d:2f:f8:88:2e:82:fc:76:a1:85:3b:99:a2:76:05:2c:a0:
59:d4:d6:d9:ba:72:6c:26:7a:29:27:b8:bc:ab:61:a6:b1:91:
da:16:40:1b:76:51:cf:61:0b:d4:31:78:3d:a1:0a:17:6a:71:
17:fd:92:7a:11:92:e1:35:74:93:91:ef:9c:e1:9e:c4:01:2b:
d4:19:97:54:01:a8:d4:16:a9:2c:bb:24:89:82:bb:29:3e:0f:
fc:0e:02:6b:0e:1b:21:67:dd:d5:04:5c:96:86:4a:4f:20:66:
aa:f9:91:4c:17:9a:05:b8:dd:00:78:ed:b7:b1:23:09:9f:99:
ce:bb:ab:94:d9:fe:e1:0b:8f:03:6b:bc:9f:2a:bf:10:01:c3:
36:23:b1:af:15:82:7a:f4:a6:21:95:dd:9d:43:35:29:5c:7f:
c7:59:b0:7b:96:cd:82:75:5a:11:ca:da:4b:4a:86:bb:24:c3:
6e:2e:6c:a3:16:ca:ec:d5:ce:02:ef:ca:0b:c5:fb:eb:ec:08:
7b:63:8f:d4:38:42:25:18:43:cb:0d:92:be:4d:91:4e:47:e1:
2d:a8:81:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynkgebc8YFH/9yl/cl+8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTEzOTJjZDdlNmU0MGE0NWMxYjhhNDQ3OTg4MGVlZjk2
MGYzMzAwHhcNMjYwNjMwMTMwMDU0WhcNMjYwNzAxMTMwMDU0WjAzMTEwLwYDVQQD
EyhiMTljYzkyMmNlZGM5NjRlZjdlYzA0NDZhY2IwY2M1NWZiMzYwYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWX/Tg3gRu3krZyhL03HHUw7At9f
ip2TSPIbyIh6M2tg7/lccBQRiBEdI6VwRXIECEhX7RAfiqD8dUx578gWNyP0Tci6
Gf9N3mjhHRpuaxg/VpZs40eKzMvmCPu56dq+i1KTpl70UY70hes1ia9EQ4H+bK4H
4bGQHEHIO8k3UZVaYmVXwjAGWFZDOBjxEOoUJlVcWs7799epet4FLvkX4Toyb88i
OAwForVzq09dSFagyTyUJHWLJT8+YoQCJrk5e8k9kE1sxCag/w2ZESXEcvqpCV2D
TYLJO3sFzDA7rXymv4jS8GYrekVgF2l5Oax5ac+cN3XpFycF/wDSnwU2qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGcySLO3JZO9+wERqywzFX7NgriMB8GA1UdIwQY
MBaAFNJROSzX5uQKRcG4pEeYgO75YPMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQt
ZGYxZDUyMDVjNWQwLzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQtZGYxZDUyMDVjNWQw
LzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe38uhpuc
QWKaPSJXcPy+wv5j/a/AcKvmOUWldJEGLzs50QHVcz0v+Igugvx2oYU7maJ2BSyg
WdTW2bpybCZ6KSe4vKthprGR2hZAG3ZRz2EL1DF4PaEKF2pxF/2SehGS4TV0k5Hv
nOGexAEr1BmXVAGo1BapLLskiYK7KT4P/A4Caw4bIWfd1QRcloZKTyBmqvmRTBea
BbjdAHjtt7EjCZ+ZzrurlNn+4QuPA2u8nyq/EAHDNiOxrxWCevSmIZXdnUM1KVx/
x1mwe5bNgnVaEcraS0qGuyTDbi5soxbK7NXOAu/KC8X76+wIe2OP1DhCJRhDyw2S
vk2RTkfhLaiB3w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:56 2026 by rpki-client