Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: 8NtiTE1CDZo3ZdyKnw40ZABajQPngargG1WXlwpV9Tg=
Subject key identifier: 14:E5:F2:66:DD:45:30:70:CF:ED:29:6F:58:AD:6A:3E:14:CA:83:7E
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 01A0D31576ED678D14EC084D208892B975E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 19C5
Signing time: Thu 24 Sep 2026 11:03:14 +0000
Manifest this update: Thu 24 Sep 2026 11:03:14 +0000
Manifest next update: Fri 25 Sep 2026 11:03:14 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: oexoESoBbd38DP8+s/sHUYOTUcJd6JxQgLY0jilB+Mw=)
2: EK7og_r9H_ffSIUUiem5NEk6UL8.roa (hash: eLq/wtFM6uQM0OwlqKSUvfOwD4gri3G8Vxxkp/URFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:76:ed:67:8d:14:ec:08:4d:20:88:92:b9:75:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Sep 24 11:03:14 2026 GMT
Not After : Sep 25 11:03:14 2026 GMT
Subject: CN=14e5f266dd453070cfed296f58ad6a3e14ca837e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:ea:5d:54:8b:b5:07:8d:86:50:24:8b:e5:
b8:d5:33:ac:da:68:f8:79:af:ee:42:7b:d5:d7:02:
74:59:2a:f1:6c:67:d8:84:21:b5:32:a7:ec:d3:09:
4b:17:e6:0e:24:93:77:34:48:6a:d8:02:14:f7:70:
db:67:25:ff:71:af:0c:81:44:88:62:38:69:fb:65:
04:13:4b:f5:37:8d:23:39:a6:e9:91:1f:71:c7:96:
5b:78:d8:66:a2:3a:ac:6a:cc:13:b7:24:29:ae:c2:
0d:9f:7b:42:6b:1e:97:d4:bc:83:27:d6:dd:5b:ff:
5d:75:fd:8a:93:44:70:0b:88:e9:a4:68:aa:1e:14:
89:76:2a:7d:07:0e:20:87:ac:48:71:cc:bd:c4:bc:
b1:57:84:3a:f8:ed:5c:05:7c:b9:d7:c5:4a:96:52:
ca:93:1b:fa:ed:41:dc:05:03:94:6d:71:2b:98:14:
3b:43:e1:d1:32:26:1f:4d:d1:3b:13:5a:5a:e5:2b:
17:2d:89:93:d4:5c:25:27:21:72:4a:3f:f2:2d:80:
af:23:00:44:43:f7:9d:c7:4e:65:85:f2:bf:18:dc:
1f:26:31:01:8c:07:8c:73:12:38:02:bd:6b:01:5f:
b4:20:6b:f5:22:c6:7c:87:5a:8a:0b:be:53:f9:fc:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:F2:66:DD:45:30:70:CF:ED:29:6F:58:AD:6A:3E:14:CA:83:7E
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ec:71:e3:a5:28:b6:fe:16:c7:85:04:cb:75:de:fa:2d:3f:
88:cd:d5:9e:0e:4c:93:6d:7f:c9:68:05:6b:ad:bc:b6:fb:7a:
f9:da:09:5d:a9:99:92:07:71:1e:ff:e7:73:d9:42:ad:53:2b:
23:93:ee:c2:20:4a:a5:67:d8:50:29:04:32:78:45:f6:f1:8c:
c3:a0:68:62:93:88:30:f7:c5:c4:10:f6:be:ae:77:ae:ef:b6:
2c:46:0f:98:c1:c3:22:51:9b:c4:e7:98:43:87:27:67:f4:bd:
7c:98:0b:48:fd:50:f9:87:b0:17:30:76:02:45:1c:6d:80:be:
4d:99:05:b9:24:dd:1e:bf:bb:12:50:5a:70:e1:f7:46:0f:3e:
9e:ff:d1:3c:fe:78:67:f9:53:ab:bd:dd:4a:23:88:1b:b5:6e:
0c:e2:e5:c4:1e:85:72:93:9d:19:52:8e:2f:df:19:07:5a:71:
c2:a6:5f:79:4f:00:27:40:65:46:f4:92:cf:f8:b5:1c:1f:37:
8b:6e:e7:17:0a:a9:f6:81:c3:4a:e9:47:94:b5:a2:ec:31:70:
b4:5d:58:37:0b:05:f3:a4:f7:99:18:67:4b:19:31:d9:23:4c:
8e:1e:cd:42:a7:06:03:29:32:e5:d6:f0:c7:db:4e:a1:af:90:
6a:29:75:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFXbtZ40U7AhNIIiSuXXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTY1MzQ4ZGMxM2M4NTQ5OWM3Nzc0ZDE1NjYxNGMxMjAx
MThhYjUwHhcNMjYwOTI0MTEwMzE0WhcNMjYwOTI1MTEwMzE0WjAzMTEwLwYDVQQD
EygxNGU1ZjI2NmRkNDUzMDcwY2ZlZDI5NmY1OGFkNmEzZTE0Y2E4MzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eDqXVSLtQeNhlAki+W41TOs2mj4
ea/uQnvV1wJ0WSrxbGfYhCG1Mqfs0wlLF+YOJJN3NEhq2AIU93DbZyX/ca8MgUSI
Yjhp+2UEE0v1N40jOabpkR9xx5ZbeNhmojqsaswTtyQprsINn3tCax6X1LyDJ9bd
W/9ddf2Kk0RwC4jppGiqHhSJdip9Bw4gh6xIccy9xLyxV4Q6+O1cBXy518VKllLK
kxv67UHcBQOUbXErmBQ7Q+HRMiYfTdE7E1pa5SsXLYmT1FwlJyFySj/yLYCvIwBE
Q/edx05lhfK/GNwfJjEBjAeMcxI4Ar1rAV+0IGv1IsZ8h1qKC75T+fwQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTl8mbdRTBwz+0pb1itaj4UyoN+MB8GA1UdIwQY
MBaAFNDmU0jcE8hUmcd3TRVmFMEgEYq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYt
MGRiMGVjMWU5NDVjLzEvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYtMGRiMGVjMWU5NDVj
LzEvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduxx46Uo
tv4Wx4UEy3Xe+i0/iM3Vng5Mk21/yWgFa628tvt6+doJXamZkgdxHv/nc9lCrVMr
I5PuwiBKpWfYUCkEMnhF9vGMw6BoYpOIMPfFxBD2vq53ru+2LEYPmMHDIlGbxOeY
Q4cnZ/S9fJgLSP1Q+YewFzB2AkUcbYC+TZkFuSTdHr+7ElBacOH3Rg8+nv/RPP54
Z/lTq73dSiOIG7VuDOLlxB6FcpOdGVKOL98ZB1pxwqZfeU8AJ0BlRvSSz/i1HB83
i27nFwqp9oHDSulHlLWi7DFwtF1YNwsF86T3mRhnSxkx2SNMjh7NQqcGAyky5dbw
x9tOoa+Qail1tg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:42:30 2026 by rpki-client