Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: rm1dAILsSgPGuDYnjTjfgIF3VWk7dWRgsfV6y4kkWDQ=
Subject key identifier: D2:95:F1:41:B9:71:FC:B1:34:51:69:2A:AD:63:42:93:CB:2F:4C:7F
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019E20922BF4056172DDBDE6BC87344185E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0E03
Signing time: Wed 13 May 2026 09:01:50 +0000
Manifest this update: Wed 13 May 2026 09:01:50 +0000
Manifest next update: Thu 14 May 2026 09:01:50 +0000
Files and hashes: 1: Xw0tG7wkuJ53SwbNc0cLbPMmcp4.roa (hash: Q04fJI0pywOQvv0zS/yBZaHryv+3l7wVIcVq1qKuHZI=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: niFs0f1+pscEx1793tXJtqY/VRAez0IFPhL9wviJyc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:2b:f4:05:61:72:dd:bd:e6:bc:87:34:41:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: May 13 09:01:50 2026 GMT
Not After : May 14 09:01:50 2026 GMT
Subject: CN=d295f141b971fcb13451692aad634293cb2f4c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:d0:52:99:10:07:5d:06:52:a9:71:8d:93:
83:80:34:99:13:66:4c:f2:56:4e:2b:75:13:c1:fa:
d6:90:16:64:2e:69:7c:c2:0b:cb:2a:4e:0f:98:4b:
22:f5:af:36:f1:12:3b:d1:77:0d:e3:2d:25:64:24:
c3:78:83:70:99:11:a6:6b:03:27:58:11:18:c4:8f:
d2:f8:bb:bf:dc:fc:ea:77:fe:fe:33:7d:e3:89:4b:
79:93:23:35:8f:c0:f1:2f:3e:f9:a5:0a:fe:81:ab:
77:68:23:5e:dc:a8:14:4c:96:37:a2:7c:9d:57:3d:
3d:1a:17:ac:e6:d3:7f:92:30:10:16:ca:84:ce:62:
b2:a0:0d:8a:f3:8a:07:c6:80:f4:82:d9:56:b6:92:
2b:32:98:f0:04:ef:97:00:4d:84:46:01:07:0f:0f:
50:87:8d:53:ce:fb:25:fd:47:bb:29:09:4c:ce:bd:
c7:dc:83:c1:39:00:17:d1:ca:bd:6e:6e:fb:30:63:
ac:3a:67:b9:60:61:45:9b:ff:cc:e0:ba:be:98:10:
bd:cb:de:8e:a2:64:1a:97:e7:7d:7e:7a:de:f5:17:
1c:4a:56:81:df:77:66:17:ef:5c:07:85:bb:90:7b:
90:88:3f:f9:c3:6f:00:f0:a9:d5:87:ea:04:c1:da:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:95:F1:41:B9:71:FC:B1:34:51:69:2A:AD:63:42:93:CB:2F:4C:7F
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0b:d3:35:38:cf:9c:59:ea:d1:58:53:13:79:48:71:86:51:
67:3c:a7:95:08:7f:e9:4d:ba:e5:5b:82:f7:39:c5:64:6f:8a:
a6:dd:d9:16:77:b1:1d:49:14:2a:fb:d7:7a:36:53:49:a3:b8:
9b:f7:0f:df:08:5d:f4:98:69:8c:d8:98:7f:c2:d6:06:54:45:
c6:50:d4:60:46:8d:ea:c3:7b:77:c9:6e:88:2b:eb:0e:65:6e:
ce:5f:40:04:46:56:f3:40:80:2c:69:27:96:4a:b4:84:a8:8f:
05:ea:32:3d:d3:8c:d4:86:26:ce:4b:0b:ce:1c:ce:56:73:28:
18:e8:57:33:40:fa:57:e9:13:ee:a8:f5:e1:b2:af:31:f6:69:
2b:52:6d:af:36:17:f9:9b:79:ff:36:be:01:9e:f7:92:1c:49:
ea:ca:9a:90:ec:01:ef:42:f0:5d:fb:9c:c8:51:9e:a4:fb:d1:
3d:4f:73:c6:6e:d6:36:eb:ac:e4:28:96:66:2a:18:19:ea:be:
89:bc:19:6b:ef:6f:9a:d0:c4:7f:c0:91:55:11:93:dc:07:9f:
d8:f0:31:b6:92:cb:50:4f:0e:50:85:f3:21:29:e0:74:0a:2b:
93:b2:df:ef:72:e7:c5:ab:56:d5:4a:ec:9c:b3:42:41:64:44:
72:d9:ed:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkiv0BWFy3b3mvIc0QYXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDkyZWNjMzdiYWUyYjlmODFkYTAyOTM4NTgxN2Q0MzNj
NTA0NjcwHhcNMjYwNTEzMDkwMTUwWhcNMjYwNTE0MDkwMTUwWjAzMTEwLwYDVQQD
EyhkMjk1ZjE0MWI5NzFmY2IxMzQ1MTY5MmFhZDYzNDI5M2NiMmY0YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApanQUpkQB10GUqlxjZODgDSZE2ZM
8lZOK3UTwfrWkBZkLml8wgvLKk4PmEsi9a828RI70XcN4y0lZCTDeINwmRGmawMn
WBEYxI/S+Lu/3Pzqd/7+M33jiUt5kyM1j8DxLz75pQr+gat3aCNe3KgUTJY3onyd
Vz09Ghes5tN/kjAQFsqEzmKyoA2K84oHxoD0gtlWtpIrMpjwBO+XAE2ERgEHDw9Q
h41Tzvsl/Ue7KQlMzr3H3IPBOQAX0cq9bm77MGOsOme5YGFFm//M4Lq+mBC9y96O
omQal+d9fnre9RccSlaB33dmF+9cB4W7kHuQiD/5w28A8KnVh+oEwdrRNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKV8UG5cfyxNFFpKq1jQpPLL0x/MB8GA1UdIwQY
MBaAFJdJLsw3uuK5+B2gKThYF9QzxQRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQt
ZTlmMWM1OTFjZWRjLzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82NzA4YWEtZjZkZi00YzRkLTkyYmQtZTlmMWM1OTFjZWRj
LzEvbDBrdXpEZTY0cm40SGFBcE9GZ1gxRFBGQkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQvTNTjP
nFnq0VhTE3lIcYZRZzynlQh/6U265VuC9znFZG+Kpt3ZFnexHUkUKvvXejZTSaO4
m/cP3whd9JhpjNiYf8LWBlRFxlDUYEaN6sN7d8luiCvrDmVuzl9ABEZW80CALGkn
lkq0hKiPBeoyPdOM1IYmzksLzhzOVnMoGOhXM0D6V+kT7qj14bKvMfZpK1JtrzYX
+Zt5/za+AZ73khxJ6sqakOwB70LwXfucyFGepPvRPU9zxm7WNuus5CiWZioYGeq+
ibwZa+9vmtDEf8CRVRGT3Aef2PAxtpLLUE8OUIXzISngdAork7Lf73LnxatW1Urs
nLNCQWREctnt1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 13:22:05 2026 by rpki-client