Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: YX9uZ+6t/z860+oW0j8bWwkobMR8Y4YjqBBB3H4By3M=
Subject key identifier: 96:E8:A8:6C:4F:B4:E9:D1:13:1F:8F:12:0E:09:CF:89:F3:5C:20:8A
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 01A1DCB8B8AE11E6EA1FD283A29ADFDEF2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0F58
Signing time: Sun 15 Nov 2026 01:00:55 +0000
Manifest this update: Sun 15 Nov 2026 01:00:55 +0000
Manifest next update: Mon 16 Nov 2026 01:00:55 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: pVTy3G4Z+lfGZZ/hBaSrvyRg2ix3N7xGJh2tU6rHA3w=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:b8:ae:11:e6:ea:1f:d2:83:a2:9a:df:de:f2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Nov 15 01:00:55 2026 GMT
Not After : Nov 16 01:00:55 2026 GMT
Subject: CN=96e8a86c4fb4e9d1131f8f120e09cf89f35c208a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:71:ae:1f:2e:25:8e:fb:55:7f:96:0b:c4:
54:7e:d3:c5:32:57:7d:c6:17:2f:6f:82:17:ad:f2:
13:cb:c9:df:c5:1f:c4:9b:e6:41:a0:e2:b7:80:93:
65:98:97:72:f3:6f:65:ea:19:7b:d1:e8:3f:78:f8:
5b:f3:ab:92:94:b0:55:65:20:2a:c0:81:c2:52:1f:
0b:c5:92:12:4f:ae:40:2e:8b:23:82:72:7d:91:f5:
17:12:9e:30:48:9d:14:d1:cf:53:cf:21:28:93:44:
dc:d6:bc:04:b3:f0:35:2e:b8:ca:44:d1:20:f8:18:
e6:04:88:f4:05:04:bf:df:84:14:f3:25:21:b6:05:
01:97:3d:73:fc:10:8a:0f:f7:c4:54:18:9f:31:e0:
94:e7:90:b9:b7:c6:df:85:b7:9d:33:ce:f1:8f:d2:
12:96:1a:c2:8c:70:d0:6d:7c:ad:e7:f3:49:48:72:
a9:9d:73:45:3d:f0:26:c1:9c:b8:a6:80:a6:8f:59:
1a:e4:9f:f4:97:31:65:ee:e0:fd:36:c3:00:8c:56:
44:1c:69:c6:05:36:f5:32:28:54:be:70:3b:7c:c6:
14:2d:13:74:43:89:d5:e2:af:68:26:a4:19:64:fc:
cb:15:0d:77:71:85:ff:35:ee:27:e6:69:3d:b7:84:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:A8:6C:4F:B4:E9:D1:13:1F:8F:12:0E:09:CF:89:F3:5C:20:8A
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:83:1c:68:04:59:e9:39:77:fc:9c:0b:03:de:1c:cd:59:45:
71:2f:99:17:1c:ca:3e:f1:87:e4:f2:96:74:9f:c0:ea:11:0f:
15:a5:d3:4f:fe:40:9b:17:78:6a:ed:3c:44:cd:a3:73:fc:a2:
6e:44:cf:07:c6:44:3c:09:4d:ad:3a:73:0a:8c:ac:95:47:20:
28:ed:d9:38:8d:b1:d0:5f:19:d3:6c:67:b1:15:13:a1:2e:24:
db:7f:82:47:a1:4b:df:83:4c:6c:02:65:19:bc:eb:84:06:e3:
8a:92:79:29:aa:55:59:bb:a5:e5:c8:8e:88:8e:4a:2e:e1:b9:
78:70:72:56:b0:9f:e4:02:44:87:c7:1f:0a:66:6c:9c:9c:05:
84:70:2f:64:d7:9e:a9:74:87:3c:2e:96:9d:09:8f:db:e1:2c:
32:c8:80:bf:3b:19:da:e0:e7:df:11:40:90:f8:a4:96:45:76:
a7:57:41:e1:58:10:fa:dd:d1:4e:27:1f:2d:73:1a:bc:62:c5:
5b:38:4a:96:0e:fe:53:2c:4e:20:1c:d6:18:fc:14:dc:c9:6f:
c0:52:9e:ef:40:6f:31:c8:51:31:b8:45:b3:47:bd:d8:73:b5:
01:64:4a:c3:c7:bd:22:54:a8:b1:c2:55:f5:1d:8c:70:0e:23:
bb:36:ca:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuLiuEebqH9KDoprf3vLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1
YmJjZGQwHhcNMjYxMTE1MDEwMDU1WhcNMjYxMTE2MDEwMDU1WjAzMTEwLwYDVQQD
Eyg5NmU4YTg2YzRmYjRlOWQxMTMxZjhmMTIwZTA5Y2Y4OWYzNWMyMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApThxrh8uJY77VX+WC8RUftPFMld9
xhcvb4IXrfITy8nfxR/Em+ZBoOK3gJNlmJdy829l6hl70eg/ePhb86uSlLBVZSAq
wIHCUh8LxZIST65ALosjgnJ9kfUXEp4wSJ0U0c9TzyEok0Tc1rwEs/A1LrjKRNEg
+BjmBIj0BQS/34QU8yUhtgUBlz1z/BCKD/fEVBifMeCU55C5t8bfhbedM87xj9IS
lhrCjHDQbXyt5/NJSHKpnXNFPfAmwZy4poCmj1ka5J/0lzFl7uD9NsMAjFZEHGnG
BTb1MihUvnA7fMYULRN0Q4nV4q9oJqQZZPzLFQ13cYX/Ne4n5mk9t4RNGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJboqGxPtOnREx+PEg4Jz4nzXCCKMB8GA1UdIwQY
MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt
YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw
LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4McaARZ
6Tl3/JwLA94czVlFcS+ZFxzKPvGH5PKWdJ/A6hEPFaXTT/5Amxd4au08RM2jc/yi
bkTPB8ZEPAlNrTpzCoyslUcgKO3ZOI2x0F8Z02xnsRUToS4k23+CR6FL34NMbAJl
GbzrhAbjipJ5KapVWbul5ciOiI5KLuG5eHByVrCf5AJEh8cfCmZsnJwFhHAvZNee
qXSHPC6WnQmP2+EsMsiAvzsZ2uDn3xFAkPiklkV2p1dB4VgQ+t3RTicfLXMavGLF
WzhKlg7+UyxOIBzWGPwU3MlvwFKe70BvMchRMbhFs0e92HO1AWRKw8e9IlSoscJV
9R2McA4juzbK9w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:19 2026 by rpki-client