Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: Uf3Q9u7CJEmlrWCkZpgTEzyvQKDTomgNrB/JSbYzPso=
Subject key identifier: 57:2E:92:18:88:CC:2D:49:33:FF:29:A4:C7:8F:A8:22:86:93:28:4B
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 01A0CE2499CD5F5418F0F9614BAFCA7716E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0D5D
Signing time: Wed 23 Sep 2026 12:01:40 +0000
Manifest this update: Wed 23 Sep 2026 12:01:40 +0000
Manifest next update: Thu 24 Sep 2026 12:01:40 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: Nclg581Sh6VNj9PY/DVUbBEFcpVpa5M7TiMWEjS5zn4=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:99:cd:5f:54:18:f0:f9:61:4b:af:ca:77:16:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Sep 23 12:01:40 2026 GMT
Not After : Sep 24 12:01:40 2026 GMT
Subject: CN=572e921888cc2d4933ff29a4c78fa8228693284b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:91:3b:2b:58:53:1b:5d:43:44:ea:22:28:
9f:64:2b:6d:33:72:b1:51:4c:be:0f:d2:91:fc:17:
82:64:01:4c:fd:7c:f4:7e:b9:52:56:08:36:da:d2:
aa:ce:6a:19:91:41:f9:b6:a4:0f:19:5b:79:98:9f:
fd:f7:55:1d:24:b6:88:83:77:6a:cc:be:9c:79:0c:
e8:0a:a3:23:c9:46:fe:39:78:1a:b6:4e:7a:b0:68:
21:04:17:6f:41:99:81:34:ed:01:8e:5d:7d:1e:55:
a7:53:69:2b:44:3d:21:83:f4:67:f5:89:1a:a7:75:
9f:e2:ea:37:94:84:2c:b1:e5:a6:7d:63:eb:1f:71:
77:24:4e:95:c5:c9:03:e5:a0:6b:e3:15:99:fc:89:
e2:fd:53:bf:3c:5a:40:91:81:71:a8:b2:79:3a:80:
3d:bd:c7:6d:97:52:f1:b2:a6:16:59:a2:64:3a:1e:
99:46:57:66:9d:42:e4:bb:1e:44:5e:bb:4a:27:fb:
bd:cf:dc:3a:2f:bd:2a:e1:42:6d:11:5f:18:90:10:
a1:fb:c7:83:43:ef:7d:21:76:f6:4a:72:e6:12:bd:
5d:05:17:50:50:fa:fa:17:10:23:ce:28:f4:3e:f8:
29:7a:ac:60:95:16:07:24:ad:25:73:8b:52:86:a1:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2E:92:18:88:CC:2D:49:33:FF:29:A4:C7:8F:A8:22:86:93:28:4B
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:29:2d:1f:7c:87:27:38:12:8b:98:2f:ae:bb:e7:7f:59:10:
ad:c9:59:ad:50:06:4b:06:3e:d3:b6:9d:54:9f:7b:13:40:3d:
33:3e:21:4a:1b:37:d3:1f:49:0b:5e:e9:8a:bb:b3:f2:ea:e7:
f9:89:f1:0f:da:41:42:93:c6:42:e8:8e:ba:ae:77:40:a0:da:
24:25:70:2e:5c:f9:69:65:d1:86:20:2a:c0:c8:2b:a3:32:50:
27:ad:cf:0d:87:e4:7d:db:5d:52:5b:46:2f:d6:c8:00:ea:1c:
07:8a:88:89:18:83:94:fa:d3:70:9c:bb:4f:0e:c4:48:e1:8b:
3c:be:f5:7a:a8:88:9f:2f:15:a1:e5:0a:b7:ef:3e:a5:1d:68:
04:31:5c:c3:fa:f5:a4:8d:14:9b:5c:ae:81:f3:33:6f:52:81:
8f:58:70:c7:c8:a0:0e:97:ad:56:20:57:29:0a:12:8d:22:d7:
cc:31:dc:77:b2:3d:38:15:94:c7:66:7b:a2:83:6e:18:12:d9:
eb:05:c0:01:b2:78:3b:57:c3:6e:c0:22:15:09:30:ff:90:1f:
46:96:d2:37:ff:a2:1f:0c:8b:4e:a7:a2:a1:46:ad:78:46:d3:
d2:e3:b3:89:42:a0:05:5c:76:61:ae:87:93:50:0f:11:8e:a2:
c9:be:24:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJJnNX1QY8PlhS6/KdxbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTBlZTc4YmJkNDg3ZDM5ZDc5Y2IxOTgwODVlOTg0Zjcw
MmEyMDgwHhcNMjYwOTIzMTIwMTQwWhcNMjYwOTI0MTIwMTQwWjAzMTEwLwYDVQQD
Eyg1NzJlOTIxODg4Y2MyZDQ5MzNmZjI5YTRjNzhmYTgyMjg2OTMyODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R6ROytYUxtdQ0TqIiifZCttM3Kx
UUy+D9KR/BeCZAFM/Xz0frlSVgg22tKqzmoZkUH5tqQPGVt5mJ/991UdJLaIg3dq
zL6ceQzoCqMjyUb+OXgatk56sGghBBdvQZmBNO0Bjl19HlWnU2krRD0hg/Rn9Yka
p3Wf4uo3lIQsseWmfWPrH3F3JE6VxckD5aBr4xWZ/Ini/VO/PFpAkYFxqLJ5OoA9
vcdtl1LxsqYWWaJkOh6ZRldmnULkux5EXrtKJ/u9z9w6L70q4UJtEV8YkBCh+8eD
Q+99IXb2SnLmEr1dBRdQUPr6FxAjzij0PvgpeqxglRYHJK0lc4tShqEP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcukhiIzC1JM/8ppMePqCKGkyhLMB8GA1UdIwQY
MBaAFNAQ7ni71IfTnXnLGYCF6YT3AqIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wYWQ0NmUtZThmZi00MmE5LTk4YzUt
ZDc4ZjYxNzJiMTU1LzEvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8wYWQ0NmUtZThmZi00MmE5LTk4YzUtZDc4ZjYxNzJiMTU1
LzEvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyktH3yH
JzgSi5gvrrvnf1kQrclZrVAGSwY+07adVJ97E0A9Mz4hShs30x9JC17piruz8urn
+YnxD9pBQpPGQuiOuq53QKDaJCVwLlz5aWXRhiAqwMgrozJQJ63PDYfkfdtdUltG
L9bIAOocB4qIiRiDlPrTcJy7Tw7ESOGLPL71eqiIny8VoeUKt+8+pR1oBDFcw/r1
pI0Um1yugfMzb1KBj1hwx8igDpetViBXKQoSjSLXzDHcd7I9OBWUx2Z7ooNuGBLZ
6wXAAbJ4O1fDbsAiFQkw/5AfRpbSN/+iHwyLTqeioUateEbT0uOziUKgBVx2Ya6H
k1APEY6iyb4k/A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:15:27 2026 by rpki-client