
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: z9ImI8/JMW+iZsEGUVWccY7HNQ/3J7nop9A5Y0lr8/k=
Subject key identifier: 6F:32:98:4C:EB:49:53:D0:0D:E9:57:E0:E0:28:37:02:CD:A3:6D:12
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019E1D59328D878F19CE31823E13268E93BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 0CB6
Signing time: Tue 12 May 2026 18:00:45 +0000
Manifest this update: Tue 12 May 2026 18:00:45 +0000
Manifest next update: Wed 13 May 2026 18:00:45 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: O8Q2J7lubHb+mJlWaMhXcg+JGaQN6IYN71pMfouyXF0=)
2: A895E3Nb3C65o8ijPlK8Lorwh00.roa (hash: tqCw5dUoNXqxDnqcOXcynHp1qTbqM0KgkUMFlaWbuSQ=)
3: GBY268elKXl97npV4jXZBGsnzcw.roa (hash: puRSSX8DZwtYE+mawU0837aHCzln32Frk5qp7mgeh8Y=)
4: NCC353pQrNx8eGiSxSQfU2T_0X8.roa (hash: x5reXqO96nT5gM2bNozGLs+YENzOaeTSR3ek69LYolg=)
5: XX639XievMdqJ8SDTTjke_CjH90.roa (hash: eFHYg4wIZNajc7SdejcYRKfEHVh83hlLOw8omNGRsMs=)
6: bQ2Z3MpaRAN6Ght6WnEtUcjPZgg.roa (hash: 5jTz/OfVAorDmvszopQ0R2vKYBjIj8qCbrV2KmrXO8I=)
7: gs6phYuCPMyOMTxhcDdZ3qJlA9I.roa (hash: 5oHY1r24RUQH5fxNUDlPxQ1Hw8bNGQ4ZLPSvu4mNt/E=)
8: llhcsYDLkm4Ou2uZaJyDW3EMdA0.roa (hash: v77F3OYndH+vxoqA2hOKsJpKUx5tr3Ki2/ZCUFpENYI=)
9: uGQWNyg5237Zm0UUhjGg8gARmn0.roa (hash: li0m/zbSxgzFDwh2iasmSHBN8irzYLoTvtgSIVNzWfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:32:8d:87:8f:19:ce:31:82:3e:13:26:8e:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: May 12 18:00:45 2026 GMT
Not After : May 13 18:00:45 2026 GMT
Subject: CN=6f32984ceb4953d00de957e0e0283702cda36d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:97:80:71:0d:6b:ba:2b:12:4e:9b:81:a1:b7:
59:14:10:04:b8:45:29:bb:bd:2c:62:1c:aa:92:d5:
95:82:f8:54:2c:cc:05:94:bd:dc:da:c1:37:2a:4c:
ef:9e:f7:e0:9f:10:6e:f3:de:43:3d:10:05:52:fa:
9a:08:f7:28:4b:a9:6b:7f:81:00:da:5f:77:79:51:
10:e9:cb:05:6a:13:5b:62:0b:ed:6d:ae:5b:17:d3:
c7:61:cb:37:91:b0:b9:90:ef:c7:9e:da:6f:28:fa:
50:e9:2c:66:de:7d:bd:52:fa:52:ea:6f:12:72:e8:
e2:c8:9e:7b:92:0a:89:ff:32:e3:ca:de:89:b5:04:
7f:c7:13:73:75:5c:88:51:57:28:c8:35:d9:8f:36:
64:d8:74:2e:af:f9:f4:00:f5:30:f2:da:47:c5:61:
d9:6d:41:e2:67:94:93:59:04:ae:c7:9e:8f:a6:9e:
fa:ce:9f:c7:43:50:34:c3:40:e7:98:ce:d7:f0:87:
c3:ee:50:c4:85:56:03:8a:8d:3b:26:ad:09:26:c2:
08:6d:81:59:87:58:30:89:ec:7c:17:25:84:5a:f0:
06:68:83:08:8b:e1:85:da:ed:d0:81:e8:84:f1:f1:
fe:2b:b0:19:e5:d0:46:f9:51:49:44:ff:18:24:38:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:32:98:4C:EB:49:53:D0:0D:E9:57:E0:E0:28:37:02:CD:A3:6D:12
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c7:ae:7d:80:a6:c0:a4:76:b8:38:8c:fc:cb:84:8e:c3:c4:
cb:c8:b2:ea:ce:f4:30:7f:e9:ca:de:8e:50:67:95:2b:70:ee:
d8:26:f3:b1:e0:42:58:f6:0d:ef:9b:d7:46:a2:42:ea:a6:03:
dc:13:15:d1:9f:ff:89:1c:bc:2b:b4:2f:ce:c2:98:a7:c7:2b:
3c:47:da:4a:e7:68:b5:8a:b0:e4:2d:f1:43:f3:26:85:7b:6f:
13:19:c3:6b:c6:d3:cf:20:21:1b:38:0b:24:00:ec:af:f9:5d:
a6:87:b1:cd:07:25:81:e3:d6:aa:64:b3:11:af:ea:36:52:d3:
57:32:94:84:5d:e2:6d:0c:8b:33:55:3b:98:1e:28:e8:2d:29:
36:84:55:cd:67:27:ca:98:ef:a0:7f:54:e9:a2:7b:b2:31:48:
6e:ec:87:b5:37:a5:22:b5:40:93:9e:34:84:50:60:6c:2f:64:
f8:8e:30:e7:d8:8e:f4:6f:c6:7d:81:6b:2e:89:e1:fa:9e:4e:
e0:2d:44:62:5a:2c:d9:28:d8:f5:ee:8c:33:e0:63:dc:e9:a6:
0a:a2:7a:3e:4a:93:5c:de:84:4c:7d:26:55:7d:11:d7:07:4f:
89:28:76:6e:11:03:70:64:99:ae:2d:7e:0c:be:12:42:4b:27:
80:a0:14:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWTKNh48ZzjGCPhMmjpO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjYwNTEyMTgwMDQ1WhcNMjYwNTEzMTgwMDQ1WjAzMTEwLwYDVQQD
Eyg2ZjMyOTg0Y2ViNDk1M2QwMGRlOTU3ZTBlMDI4MzcwMmNkYTM2ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZeAcQ1ruisSTpuBobdZFBAEuEUp
u70sYhyqktWVgvhULMwFlL3c2sE3KkzvnvfgnxBu895DPRAFUvqaCPcoS6lrf4EA
2l93eVEQ6csFahNbYgvtba5bF9PHYcs3kbC5kO/HntpvKPpQ6Sxm3n29UvpS6m8S
cujiyJ57kgqJ/zLjyt6JtQR/xxNzdVyIUVcoyDXZjzZk2HQur/n0APUw8tpHxWHZ
bUHiZ5STWQSux56Ppp76zp/HQ1A0w0DnmM7X8IfD7lDEhVYDio07Jq0JJsIIbYFZ
h1gwiex8FyWEWvAGaIMIi+GF2u3QgeiE8fH+K7AZ5dBG+VFJRP8YJDiqxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8ymEzrSVPQDelX4OAoNwLNo20SMB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0
LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8eufYCm
wKR2uDiM/MuEjsPEy8iy6s70MH/pyt6OUGeVK3Du2CbzseBCWPYN75vXRqJC6qYD
3BMV0Z//iRy8K7QvzsKYp8crPEfaSudotYqw5C3xQ/MmhXtvExnDa8bTzyAhGzgL
JADsr/ldpoexzQclgePWqmSzEa/qNlLTVzKUhF3ibQyLM1U7mB4o6C0pNoRVzWcn
ypjvoH9U6aJ7sjFIbuyHtTelIrVAk540hFBgbC9k+I4w59iO9G/GfYFrLonh+p5O
4C1EYlos2SjY9e6MM+Bj3OmmCqJ6PkqTXN6ETH0mVX0R1wdPiSh2bhEDcGSZri1+
DL4SQksngKAU4Q==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:45 2026 by rpki-client