Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: T+h9jNKtKTcoc7H4FuBx+CfsghV8bDbQdOqtX/Ow5uE=
Subject key identifier: 53:BC:3C:9C:35:9D:E1:DD:B4:2D:13:9C:B6:02:31:0D:ED:6B:FC:BB
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 01A001A5BF3756038775F80C6E5EE52CDC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 1500
Signing time: Fri 14 Aug 2026 19:00:34 +0000
Manifest this update: Fri 14 Aug 2026 19:00:34 +0000
Manifest next update: Sat 15 Aug 2026 19:00:34 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: pcku0tDJ5YOJh3IYb/FulP2ZQtPUeleL11M+Q/vTcIM=)
2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:bf:37:56:03:87:75:f8:0c:6e:5e:e5:2c:dc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Aug 14 19:00:34 2026 GMT
Not After : Aug 15 19:00:34 2026 GMT
Subject: CN=53bc3c9c359de1ddb42d139cb602310ded6bfcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:83:c9:5a:02:c4:9e:1d:e3:e3:cc:6b:cb:
ab:2a:90:70:3c:27:c1:33:17:b8:a0:2a:68:9b:3a:
13:73:d6:f1:9a:95:1c:25:a0:23:f6:ab:0d:87:0d:
11:7d:16:b9:e6:79:5b:3d:1f:2a:8e:6f:11:8b:e3:
a4:5c:cf:8f:90:ca:e2:1f:21:9e:67:3d:51:dd:14:
e8:c9:7d:20:07:a3:d4:1c:ad:66:01:c8:c6:eb:0f:
d0:74:91:86:3e:dc:a2:05:c4:d1:eb:b9:2d:de:83:
a4:f6:c0:43:29:fe:85:58:57:51:09:11:2d:07:5f:
0f:eb:e1:32:42:59:3e:30:40:df:08:80:89:2f:2e:
0a:66:0c:06:7a:d0:e4:6a:9d:19:9d:d4:01:c8:24:
ae:6c:7d:12:a7:d7:74:6f:b2:a2:1e:a3:bf:f6:cb:
1e:d1:d6:bf:91:2b:e7:8b:f9:da:9a:82:b6:f6:b0:
8a:da:02:5c:59:c7:5e:3f:72:fc:81:4b:11:09:e2:
37:fe:a6:03:99:0f:42:cb:a2:6a:e4:56:a2:0d:91:
97:30:cd:f8:6d:9d:0a:a8:e5:5c:60:f4:c5:11:68:
da:56:29:1a:2f:31:39:f3:a9:0c:d8:8f:57:86:2a:
70:53:d2:49:a3:d7:34:47:ee:b3:87:17:77:a8:c8:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:3C:9C:35:9D:E1:DD:B4:2D:13:9C:B6:02:31:0D:ED:6B:FC:BB
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c7:29:ac:06:c5:3e:b7:1b:5b:ee:41:b2:06:98:f5:d4:39:
05:08:d2:1b:42:f8:fb:61:20:0a:aa:9c:0b:58:16:93:0d:2a:
45:64:d5:48:3d:42:41:b9:b0:c3:cd:df:66:80:fa:fb:dd:3f:
96:83:1d:1e:ac:72:26:3d:3a:34:c4:1d:15:a9:4f:ea:65:2f:
f2:43:86:ca:8d:dd:81:ab:b0:23:6c:d4:fb:84:c6:59:92:b8:
3b:07:0b:dc:0e:bc:6f:2d:d2:43:dd:5a:6a:89:80:e6:d9:a7:
50:82:c4:45:45:fc:3a:34:fb:61:3d:82:f9:82:f0:e8:ec:e0:
96:3e:9c:75:6f:5d:78:a1:4b:e9:a6:e2:73:67:14:5c:e4:6d:
2e:ad:2d:6e:9c:08:54:0b:8c:3d:29:f1:bf:a3:3a:b1:59:fc:
68:bf:6e:79:f3:a7:f5:50:e6:d2:51:23:5b:95:97:d4:cf:41:
e4:e2:9c:ac:91:1e:b2:f5:32:a2:2f:7b:9a:86:f9:07:3a:0e:
85:3c:91:49:8b:32:2a:05:3f:c2:4f:11:dc:ac:16:52:f2:6a:
e7:89:49:b0:a1:85:94:62:2c:d3:e9:9f:1f:3c:c0:fa:3b:eb:
a0:bc:51:6a:8b:64:3c:7b:4a:93:65:bf:d4:40:5c:5f:4e:95:
53:25:72:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpb83VgOHdfgMbl7lLNwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxM2JiYzkyYTJmYTkwYTBhMTEyMmI4MzMwMzQ2ZjlhNjE3
MWQ5NzYwHhcNMjYwODE0MTkwMDM0WhcNMjYwODE1MTkwMDM0WjAzMTEwLwYDVQQD
Eyg1M2JjM2M5YzM1OWRlMWRkYjQyZDEzOWNiNjAyMzEwZGVkNmJmY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs62DyVoCxJ4d4+PMa8urKpBwPCfB
Mxe4oCpomzoTc9bxmpUcJaAj9qsNhw0RfRa55nlbPR8qjm8Ri+OkXM+PkMriHyGe
Zz1R3RToyX0gB6PUHK1mAcjG6w/QdJGGPtyiBcTR67kt3oOk9sBDKf6FWFdRCREt
B18P6+EyQlk+MEDfCICJLy4KZgwGetDkap0ZndQByCSubH0Sp9d0b7KiHqO/9sse
0da/kSvni/namoK29rCK2gJcWcdeP3L8gUsRCeI3/qYDmQ9Cy6Jq5FaiDZGXMM34
bZ0KqOVcYPTFEWjaVikaLzE586kM2I9XhipwU9JJo9c0R+6zhxd3qMhQoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO8PJw1neHdtC0TnLYCMQ3ta/y7MB8GA1UdIwQY
MBaAFNE7vJKi+pCgoRIrgzA0b5phcdl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMt
Y2MzMzg0YWQ4MWExLzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMtY2MzMzg0YWQ4MWEx
LzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8cprAbF
PrcbW+5BsgaY9dQ5BQjSG0L4+2EgCqqcC1gWkw0qRWTVSD1CQbmww83fZoD6+90/
loMdHqxyJj06NMQdFalP6mUv8kOGyo3dgauwI2zU+4TGWZK4OwcL3A68by3SQ91a
aomA5tmnUILERUX8OjT7YT2C+YLw6Ozglj6cdW9deKFL6abic2cUXORtLq0tbpwI
VAuMPSnxv6M6sVn8aL9uefOn9VDm0lEjW5WX1M9B5OKcrJEesvUyoi97mob5BzoO
hTyRSYsyKgU/wk8R3KwWUvJq54lJsKGFlGIs0+mfHzzA+jvroLxRaotkPHtKk2W/
1EBcX06VUyVyRA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:38 2026 by rpki-client