Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: 2yoju4C3Z/Fm+/A+h9YBqzBUoMlKuq7b/45oFbye7l4=
Subject key identifier: BF:C0:21:93:66:1B:E6:89:B9:97:4E:10:61:37:0B:4A:15:C2:AF:BB
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019E1E36052E8A3A1519AF3A85DDD383C883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0D12
Signing time: Tue 12 May 2026 22:01:57 +0000
Manifest this update: Tue 12 May 2026 22:01:57 +0000
Manifest next update: Wed 13 May 2026 22:01:57 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: vV5RZrLfIgSwIRwA4dSkj8C9LUMAa6wkEJ7UvYPh+iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:05:2e:8a:3a:15:19:af:3a:85:dd:d3:83:c8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: May 12 22:01:57 2026 GMT
Not After : May 13 22:01:57 2026 GMT
Subject: CN=bfc02193661be689b9974e1061370b4a15c2afbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:93:6b:45:3b:56:07:c8:ed:9c:69:dd:a5:
38:01:2f:63:bd:96:bc:da:51:dc:3c:77:6e:9f:6d:
9c:92:a9:f0:ff:f3:f0:7f:d8:56:27:1d:3a:ee:da:
3e:96:d1:35:b7:51:39:b3:61:9d:f5:40:26:52:8f:
76:d8:59:32:66:1d:9c:e5:6e:63:95:51:2d:9c:77:
58:ad:48:96:1d:73:83:cf:9f:4e:24:cc:51:83:d0:
7d:ef:35:b6:b1:19:d6:52:43:39:9e:9f:93:6b:06:
0a:ff:80:4e:5c:cf:b1:21:e8:1b:43:50:b2:db:23:
39:ae:26:c0:3a:82:26:d3:2b:cb:e7:03:02:be:af:
a3:94:b8:f9:21:ed:9f:78:e1:5f:ac:7a:a4:1b:3e:
08:e9:12:88:10:3f:a1:bd:81:e1:21:59:fb:7d:a7:
04:69:b9:a2:18:50:66:da:e0:12:6c:d0:ca:d0:ee:
02:4a:1e:19:58:fb:42:de:65:fd:2b:a9:ef:ab:59:
34:a4:4f:2d:2f:68:07:f8:a5:5c:a2:ba:87:a5:ce:
50:b9:61:73:d2:55:35:0d:b7:0a:d9:d0:c1:5a:1b:
fe:c6:7a:3f:64:c7:9b:d6:b6:3d:f9:76:28:17:5a:
82:e1:a9:c7:99:6c:d0:cd:63:47:33:c0:a9:25:40:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C0:21:93:66:1B:E6:89:B9:97:4E:10:61:37:0B:4A:15:C2:AF:BB
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:08:ac:0d:2f:63:e3:9f:3d:76:4e:c1:c6:60:49:61:fa:d2:
c4:aa:94:f7:c7:b1:77:20:c5:5a:70:da:b8:44:46:9f:38:37:
de:8d:5d:c8:56:7d:69:0f:eb:17:03:22:8b:ac:9b:e5:f9:e7:
ed:35:82:02:f5:bc:25:2d:30:50:15:27:45:6e:4f:0b:51:77:
3a:af:de:08:d1:c7:1b:35:48:71:e6:e0:cf:75:8b:44:cf:58:
fd:37:2a:1a:7d:7f:ed:ad:fe:df:20:89:5c:f9:9f:eb:a4:87:
3e:72:2f:88:00:95:20:cf:7e:58:0f:d5:fb:98:35:d6:ae:db:
4b:01:d5:01:c4:4e:a0:f2:19:0b:82:26:b7:af:93:2d:68:90:
68:2c:0c:c5:a8:74:b8:9a:18:83:9c:6e:8b:89:ad:19:a6:5d:
57:71:de:0f:e4:1c:bd:d8:e5:b1:b5:3e:b2:ab:7f:7c:f8:02:
c9:af:ea:29:0e:b2:c8:1c:36:fd:ee:ed:7e:14:72:f1:a0:f3:
cd:7a:8b:38:b1:02:f9:3c:c3:a0:d7:b0:5d:3b:0d:88:98:5d:
92:c9:8b:1c:9d:b5:8a:a1:25:97:df:c9:d0:c7:ab:d4:6a:db:
8e:23:b3:bc:f8:6f:6e:df:a3:d8:d6:e5:c4:f6:e6:55:6b:3e:
be:ea:99:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNgUuijoVGa86hd3Tg8iDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWQxYjZjY2E1MzA5MWY2ZjkwZDFhNTk1MGNlYjZkNTNi
MDNhYWQwHhcNMjYwNTEyMjIwMTU3WhcNMjYwNTEzMjIwMTU3WjAzMTEwLwYDVQQD
EyhiZmMwMjE5MzY2MWJlNjg5Yjk5NzRlMTA2MTM3MGI0YTE1YzJhZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38CTa0U7VgfI7Zxp3aU4AS9jvZa8
2lHcPHdun22ckqnw//Pwf9hWJx067to+ltE1t1E5s2Gd9UAmUo922FkyZh2c5W5j
lVEtnHdYrUiWHXODz59OJMxRg9B97zW2sRnWUkM5np+TawYK/4BOXM+xIegbQ1Cy
2yM5ribAOoIm0yvL5wMCvq+jlLj5Ie2feOFfrHqkGz4I6RKIED+hvYHhIVn7facE
abmiGFBm2uASbNDK0O4CSh4ZWPtC3mX9K6nvq1k0pE8tL2gH+KVcorqHpc5QuWFz
0lU1DbcK2dDBWhv+xno/ZMeb1rY9+XYoF1qC4anHmWzQzWNHM8CpJUBBawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/AIZNmG+aJuZdOEGE3C0oVwq+7MB8GA1UdIwQY
MBaAFNLtG2zKUwkfb5DRpZUM621TsDqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUt
OTQzN2U1ZmU2ZGI0LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUtOTQzN2U1ZmU2ZGI0
LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQisDS9j
4589dk7BxmBJYfrSxKqU98exdyDFWnDauERGnzg33o1dyFZ9aQ/rFwMii6yb5fnn
7TWCAvW8JS0wUBUnRW5PC1F3Oq/eCNHHGzVIcebgz3WLRM9Y/TcqGn1/7a3+3yCJ
XPmf66SHPnIviACVIM9+WA/V+5g11q7bSwHVAcROoPIZC4Imt6+TLWiQaCwMxah0
uJoYg5xui4mtGaZdV3HeD+QcvdjlsbU+sqt/fPgCya/qKQ6yyBw2/e7tfhRy8aDz
zXqLOLEC+TzDoNewXTsNiJhdksmLHJ21iqEll9/J0Mer1GrbjiOzvPhvbt+j2Nbl
xPbmVWs+vuqZKQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:07:35 2026 by rpki-client