Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: IZlhuFU1mQa4adMHo9r5l0HHZ8G2tpDHz3KIR9hxQag=
Subject key identifier: BF:39:9C:5F:6D:E7:B0:CF:49:68:53:29:C4:81:0A:33:E9:BC:B4:CD
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019F8F0FF399995D853BD7939042B7ED4115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0DD1
Signing time: Thu 23 Jul 2026 13:00:14 +0000
Manifest this update: Thu 23 Jul 2026 13:00:14 +0000
Manifest next update: Fri 24 Jul 2026 13:00:14 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: kmkUzWv44m5B6d1YLHOrmlT+pGaqhzMQbJjnS1ldcOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:0f:f3:99:99:5d:85:3b:d7:93:90:42:b7:ed:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Jul 23 13:00:14 2026 GMT
Not After : Jul 24 13:00:14 2026 GMT
Subject: CN=bf399c5f6de7b0cf49685329c4810a33e9bcb4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:97:ab:48:2e:56:55:a2:89:f7:d4:b5:c0:
88:62:8d:8b:20:6d:6d:fa:4d:c1:ef:aa:40:bc:8b:
b6:a2:d6:24:94:11:27:6f:3d:e0:a9:6e:70:c3:b0:
cc:2c:75:13:e7:9f:d1:7f:db:8f:1c:2d:b1:57:74:
c5:71:9d:35:78:57:4f:9a:da:ed:94:d5:b4:4e:c4:
03:29:b1:c6:71:8b:59:92:3d:d3:b8:be:52:ae:97:
ec:71:a7:0a:2d:7d:d7:7a:4d:0c:72:f8:7f:17:f4:
92:99:34:51:9c:d1:06:d5:df:ea:dc:7f:5e:d4:41:
b5:d7:54:03:af:2f:38:a5:70:8c:c0:77:0e:53:1c:
c6:c8:71:d4:fa:dc:3b:47:86:fc:95:8c:a5:f0:05:
51:9b:4e:59:fa:ec:f6:df:5b:2e:a0:dc:0d:8c:cb:
e0:b1:c5:11:bd:fc:21:0a:ef:74:21:68:be:ec:13:
c3:88:b9:ac:a3:0c:71:e1:12:f4:0e:14:63:c9:e7:
7a:7a:ea:72:c5:f0:80:bb:90:19:4e:44:57:ba:d4:
bc:09:04:b1:9c:52:73:6a:15:75:66:a3:ab:05:84:
d5:3c:eb:8d:9a:57:6d:3b:37:ca:a9:c6:7d:c9:12:
7c:db:b0:52:3e:02:ec:d3:53:9f:4d:f8:37:fc:eb:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:39:9C:5F:6D:E7:B0:CF:49:68:53:29:C4:81:0A:33:E9:BC:B4:CD
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c4:06:e6:c8:0b:f4:46:67:b3:9c:d2:7c:87:1e:7b:af:bb:
62:9f:13:be:2d:99:d8:61:56:77:4b:b4:23:8e:4d:3f:43:b7:
0f:68:c0:dc:6a:33:bd:8f:05:db:91:ae:83:7a:ce:98:12:54:
94:c1:bf:1d:b2:91:5e:10:38:48:c0:d8:c7:f3:6f:a7:22:3d:
f2:5a:cf:a7:e9:b7:b7:ea:a8:0d:80:63:f1:98:36:e3:4e:77:
59:f2:ea:57:d6:0c:3b:ec:8f:45:37:f5:bd:b4:1a:3b:b6:8e:
c8:4d:81:81:51:1e:18:7f:e7:6a:9f:7d:d9:56:72:4f:2d:f8:
dd:41:04:11:af:22:65:a7:6a:0c:b4:98:9d:63:0c:d8:79:5f:
6e:fa:8c:56:95:8a:8a:51:44:60:73:cd:51:05:ad:a8:11:88:
ea:6b:2d:9a:ad:bb:e5:dd:83:f5:eb:31:23:32:a7:33:8f:7e:
90:1c:9f:02:50:af:91:bd:d6:3d:51:24:2c:91:15:6f:93:50:
7a:2c:96:11:c4:3d:f5:0d:28:aa:e0:d6:ec:1e:30:41:67:fc:
4e:b8:f9:7a:b5:80:aa:78:5f:75:9a:11:eb:72:76:cf:e8:a5:
b3:d6:82:e2:9e:a7:72:de:a4:3b:12:32:cf:10:dd:42:33:d1:
ef:3b:e4:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PD/OZmV2FO9eTkEK37UEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWQxYjZjY2E1MzA5MWY2ZjkwZDFhNTk1MGNlYjZkNTNi
MDNhYWQwHhcNMjYwNzIzMTMwMDE0WhcNMjYwNzI0MTMwMDE0WjAzMTEwLwYDVQQD
EyhiZjM5OWM1ZjZkZTdiMGNmNDk2ODUzMjljNDgxMGEzM2U5YmNiNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kWXq0guVlWiiffUtcCIYo2LIG1t
+k3B76pAvIu2otYklBEnbz3gqW5ww7DMLHUT55/Rf9uPHC2xV3TFcZ01eFdPmtrt
lNW0TsQDKbHGcYtZkj3TuL5SrpfscacKLX3Xek0Mcvh/F/SSmTRRnNEG1d/q3H9e
1EG111QDry84pXCMwHcOUxzGyHHU+tw7R4b8lYyl8AVRm05Z+uz231suoNwNjMvg
scURvfwhCu90IWi+7BPDiLmsowxx4RL0DhRjyed6eupyxfCAu5AZTkRXutS8CQSx
nFJzahV1ZqOrBYTVPOuNmldtOzfKqcZ9yRJ827BSPgLs01OfTfg3/OsvrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL85nF9t57DPSWhTKcSBCjPpvLTNMB8GA1UdIwQY
MBaAFNLtG2zKUwkfb5DRpZUM621TsDqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUt
OTQzN2U1ZmU2ZGI0LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUtOTQzN2U1ZmU2ZGI0
LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8QG5sgL
9EZns5zSfIcee6+7Yp8Tvi2Z2GFWd0u0I45NP0O3D2jA3GozvY8F25Gug3rOmBJU
lMG/HbKRXhA4SMDYx/NvpyI98lrPp+m3t+qoDYBj8Zg24053WfLqV9YMO+yPRTf1
vbQaO7aOyE2BgVEeGH/nap992VZyTy343UEEEa8iZadqDLSYnWMM2HlfbvqMVpWK
ilFEYHPNUQWtqBGI6mstmq275d2D9esxIzKnM49+kByfAlCvkb3WPVEkLJEVb5NQ
eiyWEcQ99Q0oquDW7B4wQWf8Trj5erWAqnhfdZoR63J2z+ils9aC4p6nct6kOxIy
zxDdQjPR7zvk4g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:46 2026 by rpki-client