Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
File: D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft (raw, json)
Hash identifier: mmlnW1A8b1bbP8zg+bL1dHfCWLGhE2sC72F/sUdaE94=
Subject key identifier: DC:03:38:45:10:A1:58:02:F7:06:3C:90:4E:58:34:62:4C:FB:FE:2B
Authority key identifier: 0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4
Certificate issuer: /CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4
Certificate serial: 019E1DFE04CD1420A72C20C1341C30E794CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
Manifest number: 01C2
Signing time: Tue 12 May 2026 21:00:47 +0000
Manifest this update: Tue 12 May 2026 21:00:47 +0000
Manifest next update: Wed 13 May 2026 21:00:47 +0000
Files and hashes: 1: D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl (hash: 8hZACBwScTXZRWGw7nNFOkVfi7OTo4aHRPIQSBc7II8=)
2: JE0qSqnrDvpmqnPdeXtfY3ANrng.roa (hash: X1IyMy+PkbmsuUsMO+dutHfTqsCVh+3kH50SqPaLXA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:04:cd:14:20:a7:2c:20:c1:34:1c:30:e7:94:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4
Validity
Not Before: May 12 21:00:47 2026 GMT
Not After : May 13 21:00:47 2026 GMT
Subject: CN=dc03384510a15802f7063c904e5834624cfbfe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:3f:3f:87:51:b5:37:ce:71:fb:e8:72:30:
a0:9c:65:8f:ad:a1:42:4c:2b:cb:05:c4:bb:9b:06:
47:94:29:52:c2:c7:91:2d:bc:ce:19:2c:88:f2:da:
74:c4:58:50:d3:87:93:9a:97:ef:62:7a:93:e8:f0:
53:7b:c3:24:c0:b2:fc:a9:99:c1:a8:ab:f8:ff:d5:
fd:55:8c:e0:a7:ec:1b:cc:10:37:de:9f:f0:08:86:
20:66:b9:12:09:a1:62:18:af:b1:f6:e9:41:60:df:
8f:b4:f4:22:99:2c:53:13:80:70:ba:b2:91:ca:df:
3a:a6:71:d4:e2:a1:0b:b9:aa:29:55:34:14:fe:30:
9e:e6:38:1b:b0:18:fa:48:da:12:e1:89:71:fa:15:
73:1c:23:e1:21:24:78:e6:87:29:6a:a6:a3:7a:81:
f9:cf:1f:ab:fe:7a:e5:d3:de:d8:e3:95:de:c9:e6:
e1:0a:71:b6:e2:50:14:a9:ed:0b:19:db:0f:51:c0:
9e:b3:11:39:f8:a8:ec:a2:3c:b9:c8:1a:35:38:66:
e1:d7:a7:1e:5e:ef:d0:b8:84:53:de:18:15:87:a5:
51:5f:ee:60:2f:76:19:bd:cd:a5:0f:f5:b9:fd:24:
d4:4c:0d:ee:cd:b5:70:6d:51:bd:5b:ee:cc:04:71:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:38:45:10:A1:58:02:F7:06:3C:90:4E:58:34:62:4C:FB:FE:2B
X509v3 Authority Key Identifier:
keyid:0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:99:e7:1d:2c:ef:74:e5:42:c0:e3:68:e0:99:24:7a:d2:58:
57:25:2e:db:36:ec:fa:1f:53:25:45:70:5e:e4:95:df:ee:06:
99:85:b6:ab:31:1a:6f:b3:81:b0:39:e8:46:ee:81:21:c1:01:
05:05:58:13:59:a7:d0:6b:66:a4:4b:47:73:68:41:e4:2f:e5:
3c:f6:f4:09:7f:93:6b:ac:a2:bc:70:12:25:5f:35:02:7a:de:
8f:75:10:7d:87:df:cf:1d:e8:42:b2:26:df:00:11:46:02:c1:
40:d5:60:07:24:3f:b3:ba:29:95:94:3d:6f:7b:c8:2f:2e:02:
14:32:da:b2:ae:9e:eb:e7:2d:44:7b:7e:12:08:04:3a:37:35:
bf:c5:99:d8:ea:12:f4:f2:5a:1e:59:43:1b:cd:77:12:8b:78:
4b:ff:68:5d:e5:9e:9e:e2:0c:d3:b6:4c:c1:28:3c:78:83:f7:
f0:cf:0a:6f:1f:b7:ad:0f:92:7e:d9:b0:87:0a:67:74:ef:7c:
51:34:49:05:b9:f1:79:ed:74:69:e9:15:7d:a9:a2:0d:75:5f:
ce:50:8c:ac:2d:39:38:a8:33:63:56:0d:bc:b1:d8:c4:c2:28:
90:f4:3c:25:35:3e:bb:06:e8:9e:cf:a2:de:f4:b4:f6:b3:2c:
16:8c:d4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/gTNFCCnLCDBNBww55TMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNDIwN2NlODA4NTVhNWNjOTdjMGJhNDczYjk1ODcyYzdj
MTkzYzQwHhcNMjYwNTEyMjEwMDQ3WhcNMjYwNTEzMjEwMDQ3WjAzMTEwLwYDVQQD
EyhkYzAzMzg0NTEwYTE1ODAyZjcwNjNjOTA0ZTU4MzQ2MjRjZmJmZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/k/P4dRtTfOcfvocjCgnGWPraFC
TCvLBcS7mwZHlClSwseRLbzOGSyI8tp0xFhQ04eTmpfvYnqT6PBTe8MkwLL8qZnB
qKv4/9X9VYzgp+wbzBA33p/wCIYgZrkSCaFiGK+x9ulBYN+PtPQimSxTE4BwurKR
yt86pnHU4qELuaopVTQU/jCe5jgbsBj6SNoS4Ylx+hVzHCPhISR45ocpaqajeoH5
zx+r/nrl097Y45XeyebhCnG24lAUqe0LGdsPUcCesxE5+Kjsojy5yBo1OGbh16ce
Xu/QuIRT3hgVh6VRX+5gL3YZvc2lD/W5/STUTA3uzbVwbVG9W+7MBHHlcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwDOEUQoVgC9wY8kE5YNGJM+/4rMB8GA1UdIwQY
MBaAFA9CB86AhVpcyXwLpHO5WHLHwZPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDBJSHpvQ0ZXbHpKZkF1a2M3bFljc2ZCazhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85MDE5NTctNGU3MS00Y2YzLWFjYjgt
ZmIyYzhhODE0MzQ3LzEvRDBJSHpvQ0ZXbHpKZkF1a2M3bFljc2ZCazhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85MDE5NTctNGU3MS00Y2YzLWFjYjgtZmIyYzhhODE0MzQ3
LzEvRDBJSHpvQ0ZXbHpKZkF1a2M3bFljc2ZCazhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpnnHSzv
dOVCwONo4JkketJYVyUu2zbs+h9TJUVwXuSV3+4GmYW2qzEab7OBsDnoRu6BIcEB
BQVYE1mn0GtmpEtHc2hB5C/lPPb0CX+Ta6yivHASJV81Anrej3UQfYffzx3oQrIm
3wARRgLBQNVgByQ/s7oplZQ9b3vILy4CFDLasq6e6+ctRHt+EggEOjc1v8WZ2OoS
9PJaHllDG813Eot4S/9oXeWenuIM07ZMwSg8eIP38M8Kbx+3rQ+SftmwhwpndO98
UTRJBbnxee10aekVfamiDXVfzlCMrC05OKgzY1YNvLHYxMIokPQ8JTU+uwbons+i
3vS09rMsFozUQw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:02:09 2026 by rpki-client