Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: ko+3LY8JeqmV9Zz0PgtAifE9JNM9Py01b13J6oCwzkc=
Subject key identifier: 71:E4:B0:25:D5:81:E1:FD:A8:95:5F:5B:46:E9:26:77:89:F3:E4:F1
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019D27DF6FB51997199D6E4BFB586034DB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0E74
Signing time: Thu 26 Mar 2026 02:00:47 +0000
Manifest this update: Thu 26 Mar 2026 02:00:47 +0000
Manifest next update: Fri 27 Mar 2026 02:00:47 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: zVBfkpZ9RBtN8zM4RZF2Nkm0B6pmeXxtIVc44Yvs9sA=)
2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6f:b5:19:97:19:9d:6e:4b:fb:58:60:34:db:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Mar 26 02:00:47 2026 GMT
Not After : Mar 27 02:00:47 2026 GMT
Subject: CN=71e4b025d581e1fda8955f5b46e9267789f3e4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f1:a9:64:1e:32:93:9b:87:16:f3:06:7b:c2:
10:81:aa:8b:82:6e:d8:cc:ad:e6:00:7e:28:15:c7:
c4:b0:09:a0:d1:ee:14:f1:91:c4:cc:a0:97:dd:09:
d0:22:97:c6:6c:4c:68:a8:e4:d9:55:c2:18:91:83:
92:4e:54:25:97:9d:47:d4:61:bd:b4:a3:ad:a0:4d:
6f:f5:ad:95:57:4c:05:7b:40:81:01:64:35:18:3e:
79:76:52:a7:39:60:0c:3b:9f:12:dd:db:bb:2c:26:
9e:f7:ec:c0:03:68:5d:36:3e:5b:7c:f7:0c:03:02:
ae:0e:30:f5:ba:9a:b3:35:89:67:9e:1c:1f:95:e6:
0f:4f:5d:a0:70:58:84:c0:56:d7:57:b9:21:c7:7d:
c5:3b:65:5d:31:3e:44:2c:95:b2:c6:56:51:79:32:
69:1d:c8:a9:cf:61:78:84:ae:10:88:1a:05:d4:94:
d2:ed:6e:65:b6:36:34:22:c3:15:c9:ba:1f:bf:4b:
a5:78:8b:81:d7:7d:0f:04:f0:c4:d6:7d:98:42:5f:
78:e3:fd:f9:a0:41:b4:21:47:e6:03:fc:63:22:74:
07:e2:52:cc:fd:db:c1:29:5d:4a:58:04:3c:08:fa:
d8:36:e9:ff:b5:b0:b9:50:1f:ea:51:7c:75:c8:a4:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E4:B0:25:D5:81:E1:FD:A8:95:5F:5B:46:E9:26:77:89:F3:E4:F1
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9b:ee:6b:29:14:f1:fe:72:76:d4:7c:12:ae:cc:df:c0:89:
07:76:f6:e9:73:1b:7e:75:c8:ff:13:2a:52:67:87:5e:9f:09:
a9:09:7a:1e:bd:a4:e3:0a:a7:ed:60:d4:ba:05:9d:0f:4f:1b:
dd:b1:74:da:52:df:b6:df:e5:c3:c8:39:31:d6:8a:0f:b1:5e:
bf:69:0b:25:2d:1c:c1:95:fd:8c:4d:97:6a:30:fc:9b:87:d7:
65:ca:20:25:8e:09:92:55:0c:ca:d9:b2:90:33:ad:db:45:7d:
79:d5:d4:44:b3:eb:16:79:15:83:a2:a2:6f:df:62:ca:f4:cb:
8f:36:87:51:83:8f:dc:1c:d0:71:63:5c:ad:23:54:27:7f:20:
be:92:e9:bc:39:13:e5:9b:e1:5f:cb:27:c1:b9:57:98:5f:90:
5a:87:f6:8f:20:f6:d8:10:dc:6f:cc:77:13:cf:21:74:17:ed:
96:47:11:52:0a:c9:b6:4c:28:d9:a3:45:7d:9e:05:1c:33:15:
f8:9b:c0:0b:40:9e:c9:bb:38:08:38:0a:02:3d:2b:f9:bf:62:
9a:96:a7:12:b5:15:1c:13:e3:46:60:d0:e7:13:d2:5e:3c:8b:
a4:d1:0f:97:fa:0e:54:29:49:24:22:4d:83:68:e0:22:ec:32:
31:16:46:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32+1GZcZnW5L+1hgNNsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjdmYzhiMDU4ZDFmNDk5OTAxYThjMmY4NmU2MmFlOTUx
MzY3OTcwHhcNMjYwMzI2MDIwMDQ3WhcNMjYwMzI3MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg3MWU0YjAyNWQ1ODFlMWZkYTg5NTVmNWI0NmU5MjY3Nzg5ZjNlNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPGpZB4yk5uHFvMGe8IQgaqLgm7Y
zK3mAH4oFcfEsAmg0e4U8ZHEzKCX3QnQIpfGbExoqOTZVcIYkYOSTlQll51H1GG9
tKOtoE1v9a2VV0wFe0CBAWQ1GD55dlKnOWAMO58S3du7LCae9+zAA2hdNj5bfPcM
AwKuDjD1upqzNYlnnhwfleYPT12gcFiEwFbXV7khx33FO2VdMT5ELJWyxlZReTJp
Hcipz2F4hK4QiBoF1JTS7W5ltjY0IsMVybofv0uleIuB130PBPDE1n2YQl944/35
oEG0IUfmA/xjInQH4lLM/dvBKV1KWAQ8CPrYNun/tbC5UB/qUXx1yKQksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHksCXVgeH9qJVfW0bpJneJ8+TxMB8GA1UdIwQY
MBaAFNC3/IsFjR9JmQGowvhuYq6VE2eXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85Y2IzNGEtYzM3Mi00ODJlLTgxY2Et
OGY2MzljNWExYTcyLzEvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85Y2IzNGEtYzM3Mi00ODJlLTgxY2EtOGY2MzljNWExYTcy
LzEvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5vuaykU
8f5ydtR8Eq7M38CJB3b26XMbfnXI/xMqUmeHXp8JqQl6Hr2k4wqn7WDUugWdD08b
3bF02lLftt/lw8g5MdaKD7Fev2kLJS0cwZX9jE2XajD8m4fXZcogJY4JklUMytmy
kDOt20V9edXURLPrFnkVg6Kib99iyvTLjzaHUYOP3BzQcWNcrSNUJ38gvpLpvDkT
5ZvhX8snwblXmF+QWof2jyD22BDcb8x3E88hdBftlkcRUgrJtkwo2aNFfZ4FHDMV
+JvAC0Ceybs4CDgKAj0r+b9impanErUVHBPjRmDQ5xPSXjyLpNEPl/oOVClJJCJN
g2jgIuwyMRZGPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:13 2026 by rpki-client