Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: DbboyP4H8DIgVhEGX4P9T69Ab4AR1QN2ZWmlal6Prbs=
Subject key identifier: 71:1A:D0:B6:04:B9:94:95:7E:AE:58:3A:CA:EF:1E:8D:10:32:09:29
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 01A001DD86EDAE291875FDA5DCC156844DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 1900
Signing time: Fri 14 Aug 2026 20:01:30 +0000
Manifest this update: Fri 14 Aug 2026 20:01:30 +0000
Manifest next update: Sat 15 Aug 2026 20:01:30 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: LPqaWOlPJ6O5J5ZhtgylhwaUjMf4Chsu0ptvZhc26UA=)
2: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (hash: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:86:ed:ae:29:18:75:fd:a5:dc:c1:56:84:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Aug 14 20:01:30 2026 GMT
Not After : Aug 15 20:01:30 2026 GMT
Subject: CN=711ad0b604b994957eae583acaef1e8d10320929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:9f:e5:07:44:97:ec:38:51:dd:f9:95:3c:
ab:76:93:ee:7b:9e:2d:8d:e3:27:94:a8:c7:93:f4:
2d:0e:96:54:c4:7c:83:2b:07:b3:9b:03:40:c4:a2:
16:f4:ac:50:34:a3:18:3f:df:12:96:ec:f0:4b:e5:
f7:93:3b:b1:15:69:4f:e6:e6:6a:8e:ac:2e:b8:49:
fe:83:d9:12:d1:89:45:d3:70:ca:a4:03:91:c5:a9:
db:11:3f:d3:04:9f:0d:5d:1f:aa:c1:de:e7:1e:84:
f2:fa:36:7e:51:fb:0c:6e:22:71:9d:47:b2:9d:c2:
d0:69:50:ba:70:bf:08:82:fe:fa:45:37:4b:15:46:
05:74:cd:a8:99:c2:68:02:7f:68:63:9b:3a:ad:9c:
7d:98:e9:78:44:70:32:36:26:c2:9c:34:0c:d3:67:
31:74:74:b9:0e:14:95:d5:67:c8:94:ec:9f:fa:94:
c0:0b:a8:d4:de:46:42:9d:f2:d4:fc:c4:d1:3d:6a:
c0:d6:4d:39:dd:4d:9e:55:b7:03:9f:c9:70:d6:a5:
11:43:de:fc:61:60:2c:25:d1:45:dd:96:1c:cf:fa:
bf:f4:84:00:72:cc:ba:a8:37:3b:e7:a7:d0:9e:48:
65:ce:78:b2:9f:76:95:e6:c3:ba:09:ad:51:7d:fe:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1A:D0:B6:04:B9:94:95:7E:AE:58:3A:CA:EF:1E:8D:10:32:09:29
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:18:44:64:72:6b:a9:3c:a8:78:fa:57:77:b0:a9:c3:8c:7c:
ce:6e:80:7a:ef:30:49:0c:0f:7f:cf:ea:b5:83:7b:17:4d:ec:
78:68:8c:28:0e:19:1f:de:b7:95:56:3e:f9:ef:9b:c0:44:36:
fe:11:a4:f6:44:9a:95:24:cd:92:15:f4:3f:34:16:44:6e:56:
ee:5c:e6:1d:d0:5f:3d:9e:cd:4c:35:61:97:11:61:aa:d0:be:
4e:9e:73:13:d2:d4:bc:45:1d:80:64:13:39:a1:65:d7:45:2f:
05:eb:15:04:ed:5d:89:38:ce:29:ad:0b:3e:41:18:2b:21:59:
d7:50:2d:bb:ab:02:d1:16:c8:df:65:00:c3:11:b8:91:f8:50:
72:73:91:45:dd:e4:16:87:a5:c4:f2:6e:08:59:31:45:c0:2e:
00:bf:50:53:a2:9f:b6:d8:d4:7c:eb:ef:d8:39:89:49:a3:2a:
1c:4e:29:98:1d:3a:3c:61:c1:46:86:98:73:0a:ed:61:ca:ce:
7a:28:3d:3e:63:91:d0:73:89:10:04:b9:93:f5:45:46:b9:9d:
c1:fd:5b:b6:44:bb:07:2a:08:5a:08:8e:6f:2f:d2:fe:7b:83:
c1:e5:50:a3:2c:0f:bf:50:6b:73:f2:c9:2f:ca:19:d3:15:db:
73:37:c5:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3YbtrikYdf2l3MFWhE3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx
MTA2YmIwHhcNMjYwODE0MjAwMTMwWhcNMjYwODE1MjAwMTMwWjAzMTEwLwYDVQQD
Eyg3MTFhZDBiNjA0Yjk5NDk1N2VhZTU4M2FjYWVmMWU4ZDEwMzIwOTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrif5QdEl+w4Ud35lTyrdpPue54t
jeMnlKjHk/QtDpZUxHyDKwezmwNAxKIW9KxQNKMYP98SluzwS+X3kzuxFWlP5uZq
jqwuuEn+g9kS0YlF03DKpAORxanbET/TBJ8NXR+qwd7nHoTy+jZ+UfsMbiJxnUey
ncLQaVC6cL8Igv76RTdLFUYFdM2omcJoAn9oY5s6rZx9mOl4RHAyNibCnDQM02cx
dHS5DhSV1WfIlOyf+pTAC6jU3kZCnfLU/MTRPWrA1k053U2eVbcDn8lw1qURQ978
YWAsJdFF3ZYcz/q/9IQAcsy6qDc756fQnkhlzniyn3aV5sO6Ca1Rff6O2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEa0LYEuZSVfq5YOsrvHo0QMgkpMB8GA1UdIwQY
MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt
MGZlODM5OWRlNzI3LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3
LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhhEZHJr
qTyoePpXd7Cpw4x8zm6Aeu8wSQwPf8/qtYN7F03seGiMKA4ZH963lVY++e+bwEQ2
/hGk9kSalSTNkhX0PzQWRG5W7lzmHdBfPZ7NTDVhlxFhqtC+Tp5zE9LUvEUdgGQT
OaFl10UvBesVBO1diTjOKa0LPkEYKyFZ11Atu6sC0RbI32UAwxG4kfhQcnORRd3k
FoelxPJuCFkxRcAuAL9QU6KfttjUfOvv2DmJSaMqHE4pmB06PGHBRoaYcwrtYcrO
eig9PmOR0HOJEAS5k/VFRrmdwf1btkS7ByoIWgiOby/S/nuDweVQoywPv1Brc/LJ
L8oZ0xXbczfFJg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:06 2026 by rpki-client