Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: L20hkoYzoxOiXAMp1YlW7Br88LhgQUUuQ1fRQVU4nPk=
Subject key identifier: 5C:55:FB:B6:7D:22:10:23:C8:BA:4D:3A:64:CB:F4:60:D9:41:17:50
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019E1F1125A788765C4E82F3551B1F71D402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 0321
Signing time: Wed 13 May 2026 02:01:17 +0000
Manifest this update: Wed 13 May 2026 02:01:17 +0000
Manifest next update: Thu 14 May 2026 02:01:17 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: /2Eq+m5wGGUJPZ5HGXhToUQV6YjixxOjq3/9Vs8DFpM=)
2: cSeWyBS9AzYXBpViYHa1BylGQ6s.roa (hash: PrBtaBiVH3j3v9lcfh2nnshhHKh443GU9s9mrNx3uY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:25:a7:88:76:5c:4e:82:f3:55:1b:1f:71:d4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: May 13 02:01:17 2026 GMT
Not After : May 14 02:01:17 2026 GMT
Subject: CN=5c55fbb67d221023c8ba4d3a64cbf460d9411750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:25:45:f1:06:3d:e7:82:a1:15:c5:2e:36:
aa:cc:7c:43:85:5f:d1:94:6f:d5:eb:2a:ce:a0:7c:
05:14:54:45:aa:86:36:25:f4:44:85:39:a7:f0:e7:
f1:bd:a9:3c:be:c8:f3:c1:1d:32:53:f6:ec:2b:9f:
81:85:ed:48:ea:c8:71:e8:e0:ca:2b:1e:50:27:5d:
cb:c7:c1:62:11:24:bc:19:7e:79:b6:84:7a:d4:01:
56:41:38:8b:8a:da:68:fb:3c:ef:f5:7b:64:89:b5:
53:ef:73:1b:e2:39:4a:8c:29:d1:17:fd:24:b6:59:
ac:c8:75:9a:d4:eb:d1:c0:e4:1e:8c:20:c8:eb:91:
47:b5:02:db:98:a9:65:f5:a9:b3:c3:90:ab:dc:7a:
07:de:61:5b:7c:ee:57:23:21:eb:af:77:88:5e:a4:
82:db:fd:48:62:27:f1:22:7b:9f:3c:d2:b9:e0:03:
f5:9c:bc:cf:63:ad:5a:35:39:79:cd:e8:74:65:9b:
6e:f3:47:2f:40:30:89:4f:77:67:6f:50:80:d2:48:
06:f5:a0:4d:f8:77:3a:a9:86:f8:7d:47:0b:1b:ca:
30:d1:c6:87:a8:9c:37:84:f6:03:1f:2d:db:74:3a:
88:3d:98:05:ab:fe:ad:d0:bb:b0:02:ce:03:90:16:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:55:FB:B6:7D:22:10:23:C8:BA:4D:3A:64:CB:F4:60:D9:41:17:50
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b7:54:8e:d5:5c:1c:29:e0:eb:5c:9e:54:bc:72:b0:75:2f:
dd:82:44:59:16:d6:5b:cb:8c:d5:9b:15:6b:58:fa:4d:60:81:
94:53:77:af:a8:07:df:2a:56:dc:78:3b:0c:86:d9:5f:bb:43:
4a:5e:24:cf:27:73:a2:d7:bc:05:67:f7:ab:42:e3:d1:0e:0d:
e2:54:38:9b:86:72:35:61:41:b9:7e:5f:01:12:60:3f:53:58:
0b:65:2c:68:6f:db:e7:32:67:dc:8b:c3:bd:10:e3:13:b8:31:
e0:95:37:1f:5a:5a:ae:da:3c:96:7c:7d:61:5c:d7:f8:4d:b4:
c0:6f:35:23:5a:5a:e5:8d:44:b0:31:1c:aa:fe:be:b1:dd:1a:
fe:0d:a4:0b:72:2f:5e:e0:3f:ca:a5:60:a8:29:1c:05:dc:50:
8a:9a:70:60:a9:7f:3e:6b:06:60:99:0f:c6:6f:3a:64:13:43:
77:70:48:b4:1c:4e:69:fc:6c:e3:cb:67:34:10:09:21:f4:e5:
b2:45:71:c1:5d:7c:c1:17:f7:46:d2:f8:1c:d0:87:13:98:15:
bc:f0:2c:a2:e3:b9:04:9e:27:99:b2:89:7e:72:12:f9:46:86:
72:92:63:d4:d7:69:ae:47:de:a5:cc:28:4a:93:d6:49:82:06:
3f:67:cc:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fESWniHZcToLzVRsfcdQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmM1MmQ5NGU2MmVmYTNlYmYyY2NhMTZmNDJkMmU1NjA3
Mzg4ZjAwHhcNMjYwNTEzMDIwMTE3WhcNMjYwNTE0MDIwMTE3WjAzMTEwLwYDVQQD
Eyg1YzU1ZmJiNjdkMjIxMDIzYzhiYTRkM2E2NGNiZjQ2MGQ5NDExNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrAlRfEGPeeCoRXFLjaqzHxDhV/R
lG/V6yrOoHwFFFRFqoY2JfREhTmn8Ofxvak8vsjzwR0yU/bsK5+Bhe1I6shx6ODK
Kx5QJ13Lx8FiESS8GX55toR61AFWQTiLitpo+zzv9XtkibVT73Mb4jlKjCnRF/0k
tlmsyHWa1OvRwOQejCDI65FHtQLbmKll9amzw5Cr3HoH3mFbfO5XIyHrr3eIXqSC
2/1IYifxInufPNK54AP1nLzPY61aNTl5zeh0ZZtu80cvQDCJT3dnb1CA0kgG9aBN
+Hc6qYb4fUcLG8ow0caHqJw3hPYDHy3bdDqIPZgFq/6t0LuwAs4DkBbn/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxV+7Z9IhAjyLpNOmTL9GDZQRdQMB8GA1UdIwQY
MBaAFNC8UtlOYu+j6/LMoW9C0uVgc4jwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zMGQzY2YtOTU1Ny00YmJhLWFiNDIt
YzI2YzE3NTYzMTc0LzEvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zMGQzY2YtOTU1Ny00YmJhLWFiNDItYzI2YzE3NTYzMTc0
LzEvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7dUjtVc
HCng61yeVLxysHUv3YJEWRbWW8uM1ZsVa1j6TWCBlFN3r6gH3ypW3Hg7DIbZX7tD
Sl4kzydzote8BWf3q0Lj0Q4N4lQ4m4ZyNWFBuX5fARJgP1NYC2UsaG/b5zJn3IvD
vRDjE7gx4JU3H1parto8lnx9YVzX+E20wG81I1pa5Y1EsDEcqv6+sd0a/g2kC3Iv
XuA/yqVgqCkcBdxQippwYKl/PmsGYJkPxm86ZBNDd3BItBxOafxs48tnNBAJIfTl
skVxwV18wRf3RtL4HNCHE5gVvPAsouO5BJ4nmbKJfnIS+UaGcpJj1Ndprkfepcwo
SpPWSYIGP2fMow==
-----END CERTIFICATE-----
Generated at Wed May 13 05:26:57 2026 by rpki-client