Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
File: 0aVkCYrHZdC-2EkYgJFvYba48Y0.mft (raw, json)
Hash identifier: r4FUiZRS/Kl41PDEd+mKia+upSAtlAsFYkUzdckNqV4=
Subject key identifier: F6:45:16:CB:DC:21:CC:BD:3A:77:B7:7E:9D:FA:D7:E5:11:B3:A0:70
Authority key identifier: D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
Certificate issuer: /CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Certificate serial: 019D33AD3BD231B380839720209984A7171D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
Manifest number: 6C
Signing time: Sat 28 Mar 2026 09:01:24 +0000
Manifest this update: Sat 28 Mar 2026 09:01:24 +0000
Manifest next update: Sun 29 Mar 2026 09:01:24 +0000
Files and hashes: 1: 0aVkCYrHZdC-2EkYgJFvYba48Y0.crl (hash: fJezTUCbaK2TfHg1K+l5euYAFxnEyfRCd+KY9WgtqJc=)
2: 0fBOVPEVt_Vn70y4H7R92SYVH6A.roa (hash: AXH0b2vzi3eJ8ZGHrdb03qMvGfl3ImnFJSUpRqXJVtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:3b:d2:31:b3:80:83:97:20:20:99:84:a7:17:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Validity
Not Before: Mar 28 09:01:24 2026 GMT
Not After : Mar 29 09:01:24 2026 GMT
Subject: CN=f64516cbdc21ccbd3a77b77e9dfad7e511b3a070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:d9:2f:be:1b:31:ac:aa:98:e5:5c:6b:20:
95:8e:7c:71:ad:c2:06:50:cc:61:ad:c4:53:50:1f:
0b:03:15:83:66:8e:ed:ac:0c:03:9a:cf:43:1e:e8:
6c:f1:c5:02:b9:4b:a1:3e:4f:8a:a0:a7:86:15:bc:
bb:4c:57:5d:91:f9:33:bf:8f:5b:f6:f3:22:39:5f:
80:c4:c5:18:a7:0a:0d:3c:a9:76:51:fa:ea:0c:43:
10:ac:64:7b:a1:26:4a:9c:57:4c:1e:d9:78:cd:b0:
f5:0b:d5:e1:60:03:ee:95:aa:49:3e:a5:df:cc:99:
59:33:a9:dc:82:17:1e:9a:ca:08:db:ca:29:29:2b:
8a:7d:60:59:8f:32:6a:b0:3c:79:bd:b9:c4:f7:1f:
b3:18:5c:d0:d1:a3:89:9e:31:c2:a8:80:d2:c0:4a:
ce:19:49:8a:ab:39:74:a2:5c:e3:e1:64:bb:5a:70:
c6:80:87:06:79:2f:17:91:0f:85:ee:22:65:fd:d3:
26:6d:47:2e:99:eb:8e:73:48:2e:10:c0:02:81:5b:
29:ee:c2:ec:42:68:b2:62:1c:06:5e:06:99:d9:c7:
60:1c:77:20:32:d9:f6:3e:d1:84:26:fc:d1:fb:ef:
39:c6:be:ce:89:bb:c4:3a:69:c6:27:ad:f4:40:dd:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:45:16:CB:DC:21:CC:BD:3A:77:B7:7E:9D:FA:D7:E5:11:B3:A0:70
X509v3 Authority Key Identifier:
keyid:D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:28:44:40:15:ae:41:de:b6:31:09:36:32:b0:eb:3f:1c:18:
cb:00:b1:b3:3f:2e:e4:b5:3f:af:23:09:76:90:20:31:94:ee:
14:24:33:6f:8a:7f:40:65:ac:0b:a3:d2:af:72:cb:93:28:e3:
61:27:90:77:f2:3b:c8:b1:2e:0d:82:20:2c:94:98:74:ca:c6:
34:0a:61:be:6b:ad:47:44:ba:c8:34:85:1e:f9:64:36:53:3d:
c6:2b:b6:cb:99:37:86:6d:88:c7:cd:5e:7f:53:76:e7:ee:b3:
20:6c:f0:a8:c3:49:79:3f:dd:57:6e:d9:ef:2f:74:1e:6e:f9:
8b:26:bd:c8:82:27:5b:b0:a6:01:de:a7:32:77:60:60:2c:11:
2a:f2:60:9f:9e:9b:2f:05:51:92:5e:4e:67:88:6f:b3:da:25:
7f:40:1d:b6:74:36:7f:9d:55:52:60:ad:8a:20:db:33:49:5f:
b7:4f:c7:6b:16:b4:94:51:7b:9d:3d:8c:29:3a:c4:92:e1:5d:
b4:26:59:f6:5d:ef:65:1c:2b:43:8c:de:aa:1a:71:9e:0c:be:
d6:33:a7:a9:9c:19:9b:03:2e:26:42:45:5e:9f:e2:9d:8d:33:
29:7f:1d:14:61:97:ce:62:3f:1d:32:57:71:6d:c0:af:03:76:
29:a6:2b:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zrTvSMbOAg5cgIJmEpxcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYTU2NDA5OGFjNzY1ZDBiZWQ4NDkxODgwOTE2ZjYxYjZi
OGYxOGQwHhcNMjYwMzI4MDkwMTI0WhcNMjYwMzI5MDkwMTI0WjAzMTEwLwYDVQQD
EyhmNjQ1MTZjYmRjMjFjY2JkM2E3N2I3N2U5ZGZhZDdlNTExYjNhMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDbZL74bMayqmOVcayCVjnxxrcIG
UMxhrcRTUB8LAxWDZo7trAwDms9DHuhs8cUCuUuhPk+KoKeGFby7TFddkfkzv49b
9vMiOV+AxMUYpwoNPKl2UfrqDEMQrGR7oSZKnFdMHtl4zbD1C9XhYAPulapJPqXf
zJlZM6ncghcemsoI28opKSuKfWBZjzJqsDx5vbnE9x+zGFzQ0aOJnjHCqIDSwErO
GUmKqzl0olzj4WS7WnDGgIcGeS8XkQ+F7iJl/dMmbUcumeuOc0guEMACgVsp7sLs
QmiyYhwGXgaZ2cdgHHcgMtn2PtGEJvzR++85xr7OibvEOmnGJ630QN37swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZFFsvcIcy9One3fp361+URs6BwMB8GA1UdIwQY
MBaAFNGlZAmKx2XQvthJGICRb2G2uPGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGFWa0NZckhaZEMtMkVrWWdKRnZZYmE0OFkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mNDlmOTUtYmI2Yy00NmMxLTg4ZTIt
MTIxNjVmMjcxNDJmLzEvMGFWa0NZckhaZEMtMkVrWWdKRnZZYmE0OFkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mNDlmOTUtYmI2Yy00NmMxLTg4ZTItMTIxNjVmMjcxNDJm
LzEvMGFWa0NZckhaZEMtMkVrWWdKRnZZYmE0OFkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUChEQBWu
Qd62MQk2MrDrPxwYywCxsz8u5LU/ryMJdpAgMZTuFCQzb4p/QGWsC6PSr3LLkyjj
YSeQd/I7yLEuDYIgLJSYdMrGNAphvmutR0S6yDSFHvlkNlM9xiu2y5k3hm2Ix81e
f1N25+6zIGzwqMNJeT/dV27Z7y90Hm75iya9yIInW7CmAd6nMndgYCwRKvJgn56b
LwVRkl5OZ4hvs9olf0AdtnQ2f51VUmCtiiDbM0lft0/Haxa0lFF7nT2MKTrEkuFd
tCZZ9l3vZRwrQ4zeqhpxngy+1jOnqZwZmwMuJkJFXp/inY0zKX8dFGGXzmI/HTJX
cW3ArwN2KaYrqg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:40 2026 by rpki-client