Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
File: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft (raw, json)
Hash identifier: +QNCEs+tix8uNIf+j0sJiMd7M3RBsj4yGO1kwUxtjv0=
Subject key identifier: BD:85:BB:2F:8B:0B:FB:5C:C5:4B:3E:6C:59:56:6F:8A:99:8A:31:AA
Authority key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
Certificate issuer: /CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Certificate serial: 019E1EA3492C3D617E645447C634CEE4CA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
Manifest number: 0B50
Signing time: Wed 13 May 2026 00:01:17 +0000
Manifest this update: Wed 13 May 2026 00:01:17 +0000
Manifest next update: Thu 14 May 2026 00:01:17 +0000
Files and hashes: 1: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl (hash: s2kNXSL3tUSVNrtKa6RmNWTVt1HJPwObah4kdFbCklg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:49:2c:3d:61:7e:64:54:47:c6:34:ce:e4:ca:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Validity
Not Before: May 13 00:01:17 2026 GMT
Not After : May 14 00:01:17 2026 GMT
Subject: CN=bd85bb2f8b0bfb5cc54b3e6c59566f8a998a31aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:09:6f:79:66:74:25:da:a1:69:25:cf:99:
7c:61:24:3e:2e:b7:7f:42:17:be:d9:15:a4:dd:cd:
27:61:a7:7e:57:dd:49:26:b2:06:01:c3:c3:a5:3c:
a6:8f:5e:a6:ce:8a:7a:b9:69:22:89:21:83:0e:85:
8b:82:d5:61:69:5a:86:d0:56:e2:da:41:31:4d:dd:
b3:cf:09:65:18:75:73:84:95:c1:a9:4a:29:8d:e7:
bd:14:05:eb:49:2c:be:e5:b2:39:6e:8b:23:95:c6:
3c:0d:33:50:e3:e5:74:ce:f1:a8:d1:ea:47:32:9e:
ca:f2:f6:f4:91:c8:75:b5:aa:b8:64:4e:12:ea:04:
a2:3b:c9:96:87:92:58:1c:0f:77:88:80:41:cf:6d:
e2:9c:2b:36:5d:88:36:52:d6:36:6e:0e:81:00:9a:
60:94:09:90:b9:58:25:fa:10:7e:2d:99:8e:12:16:
b7:99:71:31:aa:be:e7:b6:f3:07:da:2f:de:96:bd:
db:75:14:8f:44:13:1a:75:14:57:95:19:e9:e6:77:
e4:20:e6:cb:d6:91:99:ed:12:9b:79:9a:0c:53:ee:
a5:d0:4b:8b:5c:8c:fd:76:02:57:e3:be:8f:36:28:
02:5e:70:f7:3e:45:ae:d6:17:7f:d1:a2:2d:d6:75:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:BB:2F:8B:0B:FB:5C:C5:4B:3E:6C:59:56:6F:8A:99:8A:31:AA
X509v3 Authority Key Identifier:
keyid:D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:06:20:31:28:34:ff:74:c0:49:c6:6a:7b:81:e6:ea:42:35:
3a:e3:ef:19:48:f9:79:8b:84:6f:7d:60:8f:0d:c8:f7:b8:37:
ec:bb:d2:0d:4b:9a:70:e3:f7:d8:f6:8b:75:cd:6b:37:d3:74:
bd:ca:36:46:c0:5b:96:76:e2:2a:a4:e4:c9:0d:89:48:33:70:
d1:73:d5:fa:cf:28:60:2f:70:1b:95:91:37:65:20:2f:9c:2a:
3b:5e:1a:98:34:bc:84:b5:71:ac:28:28:7f:f8:bb:4f:02:35:
68:99:ad:f3:23:d0:4d:ef:41:b1:b8:3c:36:00:7e:90:36:1e:
1a:f1:7c:83:93:fa:44:e3:c5:33:7f:93:7b:c7:aa:b3:55:ca:
33:4c:43:d1:c9:7f:07:bb:c1:f7:ab:fd:e7:8a:55:f3:4f:6b:
e9:14:24:0e:83:d4:3a:93:13:b9:c6:d1:61:1e:86:c0:e8:93:
14:4e:01:6f:d4:d7:30:48:8a:81:3c:86:b1:6d:10:5e:ad:ff:
83:30:1e:b1:ef:e5:de:32:de:46:cd:30:25:5c:fb:27:63:59:
31:56:0f:a6:7e:36:5a:c7:df:cb:91:de:6e:6c:09:d9:67:dc:
50:8c:84:6b:e1:6b:58:b0:6f:bf:1e:b2:9f:6a:16:3a:f4:37:
cc:c6:0f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo0ksPWF+ZFRHxjTO5MpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzc3M2MyMGFjOGU0MDkzZGY2MmJiYjg3MmNhZmNkYjY4
YjU1ZGMwHhcNMjYwNTEzMDAwMTE3WhcNMjYwNTE0MDAwMTE3WjAzMTEwLwYDVQQD
EyhiZDg1YmIyZjhiMGJmYjVjYzU0YjNlNmM1OTU2NmY4YTk5OGEzMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j4Jb3lmdCXaoWklz5l8YSQ+Lrd/
Qhe+2RWk3c0nYad+V91JJrIGAcPDpTymj16mzop6uWkiiSGDDoWLgtVhaVqG0Fbi
2kExTd2zzwllGHVzhJXBqUopjee9FAXrSSy+5bI5bosjlcY8DTNQ4+V0zvGo0epH
Mp7K8vb0kch1taq4ZE4S6gSiO8mWh5JYHA93iIBBz23inCs2XYg2UtY2bg6BAJpg
lAmQuVgl+hB+LZmOEha3mXExqr7ntvMH2i/elr3bdRSPRBMadRRXlRnp5nfkIObL
1pGZ7RKbeZoMU+6l0EuLXIz9dgJX476PNigCXnD3PkWu1hd/0aIt1nV+bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2Fuy+LC/tcxUs+bFlWb4qZijGqMB8GA1UdIwQY
MBaAFNHHc8IKyOQJPfYru4csr822i1XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lZTM4MjItYWJlYS00OGQ5LTkzYTkt
ODg1NmM2NWZlMTgyLzEvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lZTM4MjItYWJlYS00OGQ5LTkzYTktODg1NmM2NWZlMTgy
LzEvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwYgMSg0
/3TAScZqe4Hm6kI1OuPvGUj5eYuEb31gjw3I97g37LvSDUuacOP32PaLdc1rN9N0
vco2RsBblnbiKqTkyQ2JSDNw0XPV+s8oYC9wG5WRN2UgL5wqO14amDS8hLVxrCgo
f/i7TwI1aJmt8yPQTe9Bsbg8NgB+kDYeGvF8g5P6ROPFM3+Te8eqs1XKM0xD0cl/
B7vB96v954pV809r6RQkDoPUOpMTucbRYR6GwOiTFE4Bb9TXMEiKgTyGsW0QXq3/
gzAese/l3jLeRs0wJVz7J2NZMVYPpn42Wsffy5HebmwJ2WfcUIyEa+FrWLBvvx6y
n2oWOvQ3zMYPrg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:38:39 2026 by rpki-client