Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: k7ivR3b0jP/SCqZrAhqNvBMJNJ6j341dKgfjKAmk6CU=
Subject key identifier: 8F:12:56:AB:3C:D4:46:25:93:40:B1:29:0E:3D:38:73:35:0A:AA:2C
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 01A0D2375768417EEEECA1462E19740BB650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0ECE
Signing time: Thu 24 Sep 2026 07:00:37 +0000
Manifest this update: Thu 24 Sep 2026 07:00:37 +0000
Manifest next update: Fri 25 Sep 2026 07:00:37 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: SPzuo+KFhj0XzNTqCfero+TZlauIVfOKMDEb+B0w63c=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:57:68:41:7e:ee:ec:a1:46:2e:19:74:0b:b6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Sep 24 07:00:37 2026 GMT
Not After : Sep 25 07:00:37 2026 GMT
Subject: CN=8f1256ab3cd446259340b1290e3d3873350aaa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:1b:7e:05:80:57:f6:30:2b:aa:f6:33:d7:
19:2b:d4:4e:ec:b4:03:c4:56:d5:ae:03:00:f5:ff:
a8:75:8d:d1:d0:45:05:cf:90:89:91:e2:a1:fb:3a:
a7:2f:77:21:90:c9:d1:72:6e:7e:09:0b:ec:f9:d2:
21:0f:15:b8:ad:ec:d0:c7:cf:3a:7b:13:4c:6f:42:
61:4e:11:f2:f5:15:4f:71:d1:2c:0f:10:df:93:ae:
b5:e2:d8:b9:e2:03:8e:1a:5d:d9:a3:10:43:8f:c4:
33:fa:98:1f:f9:c0:b5:3a:da:6d:6c:8a:eb:3a:fc:
aa:27:35:55:78:2a:85:72:2b:49:1e:1d:e1:e8:3d:
3d:40:c1:76:6b:c2:50:43:90:fd:6f:7e:a6:08:24:
c8:7a:eb:44:1c:6d:0e:1f:45:de:de:a3:e3:23:de:
42:13:f9:de:8a:d2:b0:9b:8e:bc:bf:29:d8:5f:a2:
81:18:25:cf:c3:f4:be:95:05:58:f3:7d:1c:e7:ed:
48:98:9b:df:e3:57:45:a7:eb:7f:16:35:0e:8f:57:
f1:e5:67:ef:44:b0:f7:23:7f:d8:74:22:ac:99:cb:
cb:87:10:e7:df:8e:d0:d7:39:77:0d:1f:49:2a:0a:
b8:d8:3c:2e:06:bd:52:08:e9:7b:37:cf:54:37:14:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:12:56:AB:3C:D4:46:25:93:40:B1:29:0E:3D:38:73:35:0A:AA:2C
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:e0:2c:3c:5f:50:df:d1:ff:71:e9:54:b9:9e:da:29:f8:87:
4b:5a:73:b4:56:2c:33:83:15:d0:07:f6:48:90:93:74:24:8b:
07:ba:4a:5a:35:07:5b:33:bb:f8:2d:1d:20:e2:0a:70:81:9d:
13:70:fb:ff:7a:2d:7f:38:6c:f9:3c:85:eb:89:28:1c:da:95:
50:9d:91:5d:9c:1a:74:cd:39:a0:95:dc:65:17:25:be:f5:b3:
fe:2b:5b:dd:c9:42:65:c4:81:42:e8:7f:f9:5e:52:9d:b4:84:
91:3c:a1:c4:52:a0:bf:d0:34:97:bf:bf:2b:4f:60:0c:20:ad:
64:d6:12:58:61:21:3b:02:b5:48:a4:86:2a:9c:99:a1:0b:41:
6e:15:de:c9:b2:b0:a1:99:87:b3:1c:03:7f:72:9e:21:9b:1b:
99:53:a8:36:3e:97:4d:76:d1:1c:6d:26:d5:b8:23:8b:cb:cc:
bc:21:f2:7c:ca:7e:22:19:08:24:94:5e:c4:96:65:47:0e:20:
8d:b2:45:1f:2b:73:38:04:f9:3d:99:53:0b:a2:16:c3:db:de:
b8:f4:ab:73:15:28:12:71:32:c5:50:32:9b:8c:9f:e8:d8:51:
78:da:b2:4a:cf:ad:c6:f5:c5:1e:0f:ed:d7:57:81:84:97:18:
50:23:63:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSN1doQX7u7KFGLhl0C7ZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1
YmJjZGQwHhcNMjYwOTI0MDcwMDM3WhcNMjYwOTI1MDcwMDM3WjAzMTEwLwYDVQQD
Eyg4ZjEyNTZhYjNjZDQ0NjI1OTM0MGIxMjkwZTNkMzg3MzM1MGFhYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1YbfgWAV/YwK6r2M9cZK9RO7LQD
xFbVrgMA9f+odY3R0EUFz5CJkeKh+zqnL3chkMnRcm5+CQvs+dIhDxW4rezQx886
exNMb0JhThHy9RVPcdEsDxDfk6614ti54gOOGl3ZoxBDj8Qz+pgf+cC1OtptbIrr
OvyqJzVVeCqFcitJHh3h6D09QMF2a8JQQ5D9b36mCCTIeutEHG0OH0Xe3qPjI95C
E/neitKwm468vynYX6KBGCXPw/S+lQVY830c5+1ImJvf41dFp+t/FjUOj1fx5Wfv
RLD3I3/YdCKsmcvLhxDn347Q1zl3DR9JKgq42DwuBr1SCOl7N89UNxTGKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8SVqs81EYlk0CxKQ49OHM1CqosMB8GA1UdIwQY
MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt
YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw
LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1eAsPF9Q
39H/celUuZ7aKfiHS1pztFYsM4MV0Af2SJCTdCSLB7pKWjUHWzO7+C0dIOIKcIGd
E3D7/3otfzhs+TyF64koHNqVUJ2RXZwadM05oJXcZRclvvWz/itb3clCZcSBQuh/
+V5SnbSEkTyhxFKgv9A0l7+/K09gDCCtZNYSWGEhOwK1SKSGKpyZoQtBbhXeybKw
oZmHsxwDf3KeIZsbmVOoNj6XTXbRHG0m1bgji8vMvCHyfMp+IhkIJJRexJZlRw4g
jbJFHytzOAT5PZlTC6IWw9veuPSrcxUoEnEyxVAym4yf6NhReNqySs+txvXFHg/t
11eBhJcYUCNj7w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:45:35 2026 by rpki-client