Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
File: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft (raw, json)
Hash identifier: s1Llc+vvc3gcczNAwOlcz5bvXqgFke5V74w+Rs7t/aY=
Subject key identifier: 65:35:43:F6:2E:28:3F:6D:4D:96:14:96:E6:9E:97:59:5A:F6:2E:F1
Authority key identifier: D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
Certificate issuer: /CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Certificate serial: 01A0D426757D7AD6CB2EFF933822225DDF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
Manifest number: 0228
Signing time: Thu 24 Sep 2026 16:01:25 +0000
Manifest this update: Thu 24 Sep 2026 16:01:25 +0000
Manifest next update: Fri 25 Sep 2026 16:01:25 +0000
Files and hashes: 1: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl (hash: RVSu5YeCgIJWEEkT9amdgn5P+GoY0nNlc+RfuDEPwPk=)
2: vz9xDUONTQdNGh2H7pR1j8DJb4U.roa (hash: wQlmjv0wxtwfgnsZbxR6Yv1Bicu90n9KXilxDJKClFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:75:7d:7a:d6:cb:2e:ff:93:38:22:22:5d:df:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Validity
Not Before: Sep 24 16:01:25 2026 GMT
Not After : Sep 25 16:01:25 2026 GMT
Subject: CN=653543f62e283f6d4d961496e69e97595af62ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:03:01:db:ec:ee:bc:0b:ce:65:cf:3e:52:
ec:34:e1:ba:49:5a:c7:5c:91:78:21:c9:47:9e:6a:
b3:88:43:b1:d2:32:a6:76:c4:ad:01:32:c0:92:e6:
01:a7:c8:5d:8c:44:1d:d1:6a:47:a2:ff:58:ef:40:
aa:94:50:8c:2d:cf:d4:21:48:67:98:77:39:b5:9d:
07:a8:be:fa:0c:72:f9:75:83:b7:f9:40:71:2a:b8:
e8:86:94:84:ef:b7:28:46:a7:ad:3d:7d:54:60:3b:
51:64:60:ed:64:3e:19:16:5c:f9:3b:db:ed:4f:40:
c3:58:1e:9b:d2:f8:c0:02:ab:ae:59:35:3f:0a:ed:
03:10:76:af:13:03:f9:ce:50:58:3b:59:6e:26:a9:
13:2b:37:69:8f:40:62:47:a4:b2:1c:cc:6a:98:a3:
f2:8a:be:25:c7:44:5e:7c:16:f6:f2:18:ee:dd:76:
c5:f0:28:34:c0:53:5b:dd:48:72:07:28:72:d0:f3:
e0:bc:a1:31:21:27:bf:d2:37:e6:05:02:e4:a1:91:
37:98:c7:a8:b5:6d:ab:9f:b7:2b:da:35:e8:a6:af:
35:a2:1a:fa:6d:71:52:a2:03:17:61:e3:cc:39:55:
40:c8:39:09:28:da:ca:46:ac:a2:59:44:15:19:1f:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:35:43:F6:2E:28:3F:6D:4D:96:14:96:E6:9E:97:59:5A:F6:2E:F1
X509v3 Authority Key Identifier:
keyid:D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:39:93:56:07:e9:dd:3b:51:16:38:ea:2e:42:92:d3:e8:8b:
0e:8c:46:f0:68:53:7f:5e:93:1f:68:e7:25:3e:e3:66:e8:08:
0d:2b:0a:de:b4:f8:dd:c2:b6:7a:8e:16:73:f5:e0:33:ab:98:
3c:3b:92:f1:02:15:21:f7:6b:e6:68:dc:21:67:d9:81:3a:a5:
49:9f:ad:5d:69:90:d6:58:c4:ad:f6:2c:78:1f:f3:db:b3:32:
e6:17:23:74:cc:d2:3c:b3:d0:65:55:30:ab:86:bf:ae:c4:44:
62:ae:6c:3a:99:c1:f9:66:92:05:fe:fe:2c:8c:88:0e:a7:35:
01:08:21:38:8e:dc:c8:7c:39:be:ae:b4:a9:a2:bb:37:24:81:
33:1f:37:a7:e0:bc:db:df:dd:7a:50:0f:8f:89:39:fc:66:c4:
d5:cd:aa:d7:0b:30:f6:fb:4d:8b:36:48:36:e1:95:2a:8a:c2:
ac:eb:9f:1a:62:77:5b:eb:1e:fc:fc:54:67:84:b3:22:2f:1a:
a9:7e:75:33:48:0f:c1:09:34:5b:62:ef:b1:48:d8:0c:80:e3:
25:88:68:82:0e:8f:0b:62:a7:77:e4:47:8d:4d:36:59:68:82:
c2:54:53:ad:87:5e:a4:4f:4a:6e:8d:bf:75:c0:0f:86:79:30:
23:50:74:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJnV9etbLLv+TOCIiXd9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjBlMmM4YzE0YTgyNGI1NGUwMGJkOTQ3OWE0ODVkNzFi
ZmU0NzQwHhcNMjYwOTI0MTYwMTI1WhcNMjYwOTI1MTYwMTI1WjAzMTEwLwYDVQQD
Eyg2NTM1NDNmNjJlMjgzZjZkNGQ5NjE0OTZlNjllOTc1OTVhZjYyZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMIDAdvs7rwLzmXPPlLsNOG6SVrH
XJF4IclHnmqziEOx0jKmdsStATLAkuYBp8hdjEQd0WpHov9Y70CqlFCMLc/UIUhn
mHc5tZ0HqL76DHL5dYO3+UBxKrjohpSE77coRqetPX1UYDtRZGDtZD4ZFlz5O9vt
T0DDWB6b0vjAAquuWTU/Cu0DEHavEwP5zlBYO1luJqkTKzdpj0BiR6SyHMxqmKPy
ir4lx0RefBb28hju3XbF8Cg0wFNb3UhyByhy0PPgvKExISe/0jfmBQLkoZE3mMeo
tW2rn7cr2jXopq81ohr6bXFSogMXYePMOVVAyDkJKNrKRqyiWUQVGR91EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU1Q/YuKD9tTZYUluael1la9i7xMB8GA1UdIwQY
MBaAFNDw4sjBSoJLVOAL2UeaSF1xv+R0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBEaXlNRktna3RVNEF2WlI1cElYWEdfNUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMTc3MjYtMmRmMi00N2FmLWEwZWEt
ZDk0MTMxZGE4NjFkLzEvMFBEaXlNRktna3RVNEF2WlI1cElYWEdfNUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yMTc3MjYtMmRmMi00N2FmLWEwZWEtZDk0MTMxZGE4NjFk
LzEvMFBEaXlNRktna3RVNEF2WlI1cElYWEdfNUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizmTVgfp
3TtRFjjqLkKS0+iLDoxG8GhTf16TH2jnJT7jZugIDSsK3rT43cK2eo4Wc/XgM6uY
PDuS8QIVIfdr5mjcIWfZgTqlSZ+tXWmQ1ljErfYseB/z27My5hcjdMzSPLPQZVUw
q4a/rsREYq5sOpnB+WaSBf7+LIyIDqc1AQghOI7cyHw5vq60qaK7NySBMx83p+C8
29/delAPj4k5/GbE1c2q1wsw9vtNizZINuGVKorCrOufGmJ3W+se/PxUZ4SzIi8a
qX51M0gPwQk0W2LvsUjYDIDjJYhogg6PC2Knd+RHjU02WWiCwlRTrYdepE9Kbo2/
dcAPhnkwI1B0UA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:54:25 2026 by rpki-client