Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File: 0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier: kQgz3NM28qpNI81psmd3QLAdsgzXYHyhlkVBhdUXUjU=
Subject key identifier: FC:22:19:E8:0D:5C:31:F5:D4:DF:07:6A:F9:1A:3B:24:49:C1:3F:90
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial: 01A0CDB6213A5F0B21363F25559E858534FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number: 121C
Signing time: Wed 23 Sep 2026 10:01:00 +0000
Manifest this update: Wed 23 Sep 2026 10:01:00 +0000
Manifest next update: Thu 24 Sep 2026 10:01:00 +0000
Files and hashes: 1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: cQ1aCgTK9eZgDCSYoZQqN7IAq4OpV0dgh17jyx5iezM=)
2: 2JYWg4gqZMghUwSsH_cELClo_DE.roa (hash: XmfRPL/CjIz58Jli7M5Cw1QTYVH2xAtyBdeQbzz9+4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:21:3a:5f:0b:21:36:3f:25:55:9e:85:85:34:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Validity
Not Before: Sep 23 10:01:00 2026 GMT
Not After : Sep 24 10:01:00 2026 GMT
Subject: CN=fc2219e80d5c31f5d4df076af91a3b2449c13f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:86:4d:26:ef:5e:1f:18:2c:c2:8f:46:8b:
9f:3b:f9:9b:84:d0:ba:3b:bc:8b:94:e5:9b:90:d6:
6b:a5:72:de:a4:e3:51:56:f5:a7:86:e6:58:75:b0:
f5:ab:8e:14:5d:8f:6a:03:1a:fb:ce:63:54:d5:41:
f8:d1:cb:db:1f:35:1a:3a:b0:b5:83:2c:49:0f:9b:
e7:61:ab:ed:ee:f4:90:d8:12:63:4e:fb:f5:a6:03:
fb:f2:a8:76:9d:8a:5a:6c:31:60:d7:17:25:b1:9f:
13:fb:e4:cd:72:65:b4:71:fb:70:45:95:7d:87:57:
40:f3:fc:b8:f9:ee:c8:73:1f:f5:c9:f1:1b:7f:39:
29:4a:e5:d8:f6:5d:3f:1c:af:8a:91:4f:45:51:bf:
f1:75:34:83:6b:71:9a:f2:89:47:85:50:18:71:7d:
23:10:e1:3d:cd:6d:0a:a8:da:9d:5c:bf:08:95:e0:
d8:fe:6d:73:8f:a1:c8:55:fb:60:90:05:b2:85:de:
0d:59:5c:60:dc:25:aa:a5:b6:2d:2c:5f:72:48:cb:
b2:f3:1d:04:92:14:e9:bb:a0:76:ca:7f:49:4a:c9:
59:b5:64:81:b2:0f:85:4e:94:aa:4f:4a:38:24:6c:
35:a4:eb:1f:3a:88:4c:ad:cc:e8:9b:46:49:10:b3:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:19:E8:0D:5C:31:F5:D4:DF:07:6A:F9:1A:3B:24:49:C1:3F:90
X509v3 Authority Key Identifier:
keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b6:28:59:6c:62:c2:73:85:c7:73:36:9b:e1:a7:08:9b:a4:
86:c2:29:ca:5f:42:c6:57:37:a5:b7:6c:0f:96:89:92:7e:1b:
da:cd:31:a1:b2:07:09:22:27:8b:86:41:8d:74:37:7a:5f:96:
10:5c:0d:d9:0f:0c:56:83:9a:2b:a4:fd:a5:3d:b8:ea:0b:e1:
85:ee:22:e2:ae:b7:34:23:77:bc:98:10:84:53:4f:4b:f8:c1:
0b:d3:cf:db:d1:f4:1e:ec:e4:61:1f:ce:18:c0:f0:57:59:ae:
7e:95:19:46:5a:d2:d0:07:b5:a1:df:f0:67:25:16:e4:42:9d:
37:55:79:2a:b1:f0:a7:67:3d:97:0b:18:59:ee:69:fc:63:f9:
f3:7f:bb:cc:b4:a7:1f:34:42:a0:48:c1:e2:4e:31:34:cb:ad:
01:3e:e7:50:2c:e1:7d:82:e3:9b:21:1c:15:0a:ba:fa:ae:17:
ac:49:25:ed:c8:37:1a:99:85:0c:8f:0f:de:c8:4e:3c:f7:f8:
26:7d:95:2e:7c:98:25:4b:55:3d:63:98:ff:bb:66:07:0f:3f:
7d:84:a9:73:0a:7e:00:d9:22:c0:0d:9c:ae:6c:1b:3b:a6:8a:
13:f2:db:57:8b:d4:db:93:eb:e6:5d:14:04:88:75:93:8a:68:
5b:e2:b5:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtiE6XwshNj8lVZ6FhTT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmZhZGYyOTIzOWVkOGNmM2Y2YzY5M2Q4YmRiNzlmNDIw
MDBhYmMwHhcNMjYwOTIzMTAwMTAwWhcNMjYwOTI0MTAwMTAwWjAzMTEwLwYDVQQD
EyhmYzIyMTllODBkNWMzMWY1ZDRkZjA3NmFmOTFhM2IyNDQ5YzEzZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiuGTSbvXh8YLMKPRoufO/mbhNC6
O7yLlOWbkNZrpXLepONRVvWnhuZYdbD1q44UXY9qAxr7zmNU1UH40cvbHzUaOrC1
gyxJD5vnYavt7vSQ2BJjTvv1pgP78qh2nYpabDFg1xclsZ8T++TNcmW0cftwRZV9
h1dA8/y4+e7Icx/1yfEbfzkpSuXY9l0/HK+KkU9FUb/xdTSDa3Ga8olHhVAYcX0j
EOE9zW0KqNqdXL8IleDY/m1zj6HIVftgkAWyhd4NWVxg3CWqpbYtLF9ySMuy8x0E
khTpu6B2yn9JSslZtWSBsg+FTpSqT0o4JGw1pOsfOohMrczom0ZJELPffwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwiGegNXDH11N8HavkaOyRJwT+QMB8GA1UdIwQY
MBaAFNC/rfKSOe2M8/bGk9i9t59CAAq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAt
N2JiMzY1ZjM0YzZjLzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAtN2JiMzY1ZjM0YzZj
LzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7YoWWxi
wnOFx3M2m+GnCJukhsIpyl9Cxlc3pbdsD5aJkn4b2s0xobIHCSIni4ZBjXQ3el+W
EFwN2Q8MVoOaK6T9pT246gvhhe4i4q63NCN3vJgQhFNPS/jBC9PP29H0HuzkYR/O
GMDwV1mufpUZRlrS0Ae1od/wZyUW5EKdN1V5KrHwp2c9lwsYWe5p/GP583+7zLSn
HzRCoEjB4k4xNMutAT7nUCzhfYLjmyEcFQq6+q4XrEkl7cg3GpmFDI8P3shOPPf4
Jn2VLnyYJUtVPWOY/7tmBw8/fYSpcwp+ANkiwA2crmwbO6aKE/LbV4vU25Pr5l0U
BIh1k4poW+K1OQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:19:08 2026 by rpki-client