Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: z9PPc2CYUeSympWqQpwxib170v0E7vdhXnuEs+WFsWQ=
Subject key identifier: D1:1C:DE:11:BA:4A:D3:E2:4B:A0:CE:C2:99:E1:E3:24:89:E3:05:ED
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 019F182FFF91ED4E3D4366E7B93339C1B40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 1887
Signing time: Tue 30 Jun 2026 11:00:26 +0000
Manifest this update: Tue 30 Jun 2026 11:00:26 +0000
Manifest next update: Wed 01 Jul 2026 11:00:26 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: Cez2KaFgBMdx3OdZBi63fUUbXI0ra9xVgM700/r+/G4=)
2: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (hash: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:2f:ff:91:ed:4e:3d:43:66:e7:b9:33:39:c1:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Jun 30 11:00:26 2026 GMT
Not After : Jul 1 11:00:26 2026 GMT
Subject: CN=d11cde11ba4ad3e24ba0cec299e1e32489e305ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e9:bd:e2:0b:f5:56:2b:6b:ad:cd:66:3d:db:
14:63:af:10:c4:08:1e:96:aa:77:b6:4e:63:2a:25:
47:f7:97:04:4f:14:ef:a4:a8:2c:e1:b6:05:72:a1:
95:f0:39:be:15:91:61:af:59:d0:3d:21:db:f7:1e:
1d:c4:58:c1:bb:f2:78:d2:67:ec:15:fe:7e:b2:81:
90:ec:56:02:20:5f:ba:89:8d:05:81:36:0a:f7:d8:
e6:1f:7f:9c:bf:51:08:7c:ab:61:6b:97:b9:79:15:
e6:dd:59:28:6e:90:39:4c:50:d0:22:30:6e:77:fa:
bf:ab:ed:86:04:71:01:dc:fc:9a:6f:46:e8:7a:68:
8b:59:a9:d1:19:37:b8:54:2f:6e:84:a7:fb:63:99:
86:ea:1f:ea:6e:ce:63:84:00:68:02:0d:59:20:0e:
dc:0a:91:b3:f3:b7:c1:5b:2d:d8:cc:27:3d:32:f7:
a1:29:e3:c2:6b:b3:93:1d:d4:46:f1:e3:8d:7c:1f:
8c:0c:92:7c:d6:a8:3a:e5:0f:a2:c6:d8:fd:0c:29:
08:9a:cc:12:71:73:33:c2:3f:2a:7a:c4:b7:6b:0e:
1c:e9:23:a3:60:2a:c2:08:ef:4c:35:14:9a:68:b0:
21:be:62:5e:f6:e3:28:99:aa:24:fe:dd:06:2e:1e:
88:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:DE:11:BA:4A:D3:E2:4B:A0:CE:C2:99:E1:E3:24:89:E3:05:ED
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8f:26:df:7d:f3:27:c2:b3:75:8e:b9:b3:fd:10:06:e2:4f:
1d:3f:f9:42:ba:98:02:4c:4d:8b:8e:be:bd:57:c0:ff:34:19:
1c:38:ce:37:8e:6a:16:85:c7:33:71:ab:1e:d2:37:dc:f2:74:
0d:47:c1:d9:9c:29:61:af:71:88:cb:df:a6:86:a1:74:7b:41:
8b:d0:73:ef:b5:2c:d0:05:8b:5f:ee:f2:14:39:f8:84:5d:6f:
8c:d2:24:be:6a:ec:22:4f:ab:98:a7:26:90:3e:b9:c2:54:42:
d5:55:7e:48:ad:2c:02:42:d2:c1:03:61:09:e9:ef:42:7d:27:
9c:2b:b8:50:cf:59:da:22:b3:62:e4:66:02:f2:d4:04:f1:71:
82:fc:f3:54:7b:9f:b2:7f:2f:69:ac:38:dd:80:89:c5:b4:82:
ce:4d:bc:ea:91:4e:29:ae:d0:e5:39:91:7c:54:95:3b:2c:b2:
04:06:01:a6:19:bf:28:fe:af:a2:03:1e:c6:82:a5:8c:bb:1c:
9a:34:6b:86:79:94:6c:4a:a2:40:34:8d:78:9a:2f:31:a3:b9:
3d:bc:df:3c:a5:3d:f0:0e:bd:82:ea:61:23:d2:17:ce:35:e4:
9b:78:9e:14:06:48:46:b8:40:b4:6d:f0:f7:0b:09:c0:29:5f:
6b:6d:50:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YL/+R7U49Q2bnuTM5wbQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx
MTA2YmIwHhcNMjYwNjMwMTEwMDI2WhcNMjYwNzAxMTEwMDI2WjAzMTEwLwYDVQQD
EyhkMTFjZGUxMWJhNGFkM2UyNGJhMGNlYzI5OWUxZTMyNDg5ZTMwNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOm94gv1Vitrrc1mPdsUY68QxAge
lqp3tk5jKiVH95cETxTvpKgs4bYFcqGV8Dm+FZFhr1nQPSHb9x4dxFjBu/J40mfs
Ff5+soGQ7FYCIF+6iY0FgTYK99jmH3+cv1EIfKtha5e5eRXm3VkobpA5TFDQIjBu
d/q/q+2GBHEB3Pyab0boemiLWanRGTe4VC9uhKf7Y5mG6h/qbs5jhABoAg1ZIA7c
CpGz87fBWy3YzCc9MvehKePCa7OTHdRG8eONfB+MDJJ81qg65Q+ixtj9DCkImswS
cXMzwj8qesS3aw4c6SOjYCrCCO9MNRSaaLAhvmJe9uMomaok/t0GLh6IrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEc3hG6StPiS6DOwpnh4ySJ4wXtMB8GA1UdIwQY
MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt
MGZlODM5OWRlNzI3LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3
LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe48m333z
J8KzdY65s/0QBuJPHT/5QrqYAkxNi46+vVfA/zQZHDjON45qFoXHM3GrHtI33PJ0
DUfB2ZwpYa9xiMvfpoahdHtBi9Bz77Us0AWLX+7yFDn4hF1vjNIkvmrsIk+rmKcm
kD65wlRC1VV+SK0sAkLSwQNhCenvQn0nnCu4UM9Z2iKzYuRmAvLUBPFxgvzzVHuf
sn8vaaw43YCJxbSCzk286pFOKa7Q5TmRfFSVOyyyBAYBphm/KP6vogMexoKljLsc
mjRrhnmUbEqiQDSNeJovMaO5PbzfPKU98A69guphI9IXzjXkm3ieFAZIRrhAtG3w
9wsJwClfa21QXg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:29 2026 by rpki-client