Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
File: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json)
Hash identifier: ckm68pa/QqgbaYOi/2OBGF8CrGyuplvwAsdyjiA1yek=
Subject key identifier: E9:8E:BC:AA:90:F9:9C:09:EF:B1:53:8A:38:FE:93:24:24:B4:87:CE
Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
Certificate issuer: /CN=d291741252bb9c4cda80047dfb01ce98c219d180
Certificate serial: 019E1D90C2F8457488A684981E0A128ACE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
Manifest number: 17BA
Signing time: Tue 12 May 2026 19:01:26 +0000
Manifest this update: Tue 12 May 2026 19:01:26 +0000
Manifest next update: Wed 13 May 2026 19:01:26 +0000
Files and hashes: 1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: 0cL4kL+UspmGIgX6YE4xS76o0tiZ3gz96SFxW3c3vFg=)
2: DmoDqDPowCrVpCCkIKS4Nf6g_kI.roa (hash: 7od5f7R8DSJPoJQHbrlbRFv+w64a+rw+WvHvRvhjbSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c2:f8:45:74:88:a6:84:98:1e:0a:12:8a:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180
Validity
Not Before: May 12 19:01:26 2026 GMT
Not After : May 13 19:01:26 2026 GMT
Subject: CN=e98ebcaa90f99c09efb1538a38fe932424b487ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:4a:72:65:cb:63:95:84:da:d2:ca:d0:84:
e9:77:fc:06:ab:3b:5c:16:fe:a0:5c:6c:47:14:a9:
c6:85:9e:97:e4:e0:68:b8:20:7e:c2:20:7d:7b:d3:
47:0b:73:b9:21:99:3d:a9:11:b3:25:6c:b0:fe:a5:
a8:38:a1:ce:93:9f:f0:d3:d0:90:42:4f:e6:c9:aa:
7e:df:b4:18:ea:bb:39:61:72:6f:21:38:96:61:fa:
34:1c:6b:3b:ce:6d:61:ca:aa:bf:99:7b:4f:55:ae:
e0:51:74:03:32:5c:8d:d8:6a:94:34:45:ad:b6:6e:
62:07:71:52:63:19:0c:28:aa:85:27:a9:2b:48:d0:
ea:f9:37:73:29:3c:1e:6b:4e:d6:78:63:56:4d:73:
8c:a8:53:66:a9:2a:7a:a5:0d:75:84:85:a0:fe:18:
9d:63:ac:2f:dd:24:fc:dd:90:fc:96:eb:ba:2c:f4:
d6:f1:a8:2b:0d:3d:6f:9e:9e:a1:91:06:61:3e:98:
44:91:f4:bf:d2:36:ef:2f:72:15:f5:fd:df:6e:e4:
58:47:93:29:21:4f:36:bf:76:5a:a9:e6:69:ca:e4:
51:e5:ca:2f:a0:f4:c3:fd:05:4a:3a:ad:be:f7:da:
aa:77:3e:ef:fc:34:67:b2:eb:b6:da:06:99:ff:81:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:BC:AA:90:F9:9C:09:EF:B1:53:8A:38:FE:93:24:24:B4:87:CE
X509v3 Authority Key Identifier:
keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:af:db:d0:be:aa:9d:1f:10:a6:58:04:14:1b:06:3a:1f:73:
75:5f:31:ca:5e:25:ab:dc:75:be:f8:68:6c:75:26:7e:e7:ee:
52:04:4d:1d:3a:2e:e2:17:b5:b3:aa:3a:9d:d4:42:61:a9:26:
b3:1f:fc:52:c8:e7:77:68:ee:c4:9e:33:94:ac:e5:b5:99:63:
3a:3a:52:b6:90:51:91:eb:67:a6:33:a3:0d:2f:d0:95:b0:eb:
36:bb:9c:82:42:32:89:e7:9e:e3:ad:25:11:b2:79:1a:3a:7f:
18:ff:90:9e:e2:44:76:18:f5:88:b8:ba:ef:a0:e9:ed:56:10:
2e:ee:61:d0:64:5f:5c:c9:49:7e:7a:e5:24:9a:c4:2b:44:ff:
48:c8:ff:0b:3f:94:f4:1a:e8:74:75:c6:be:b3:c3:28:3e:57:
ba:56:f6:2d:db:87:7b:85:3e:38:2a:23:81:c3:67:83:1f:43:
c3:aa:75:af:6f:61:c6:c8:d8:2d:7b:2c:b0:0a:b4:1b:75:22:
2e:5b:79:64:e0:17:8a:29:bc:c1:9d:37:0f:41:b2:6c:29:76:
07:2a:eb:08:4b:32:d4:80:22:54:07:5c:63:58:50:19:29:fd:
3a:91:41:4f:ff:39:7b:9c:1c:12:0b:2a:f6:fe:db:7a:80:f6:
b8:e2:12:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkML4RXSIpoSYHgoSis5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOTE3NDEyNTJiYjljNGNkYTgwMDQ3ZGZiMDFjZTk4YzIx
OWQxODAwHhcNMjYwNTEyMTkwMTI2WhcNMjYwNTEzMTkwMTI2WjAzMTEwLwYDVQQD
EyhlOThlYmNhYTkwZjk5YzA5ZWZiMTUzOGEzOGZlOTMyNDI0YjQ4N2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s9KcmXLY5WE2tLK0ITpd/wGqztc
Fv6gXGxHFKnGhZ6X5OBouCB+wiB9e9NHC3O5IZk9qRGzJWyw/qWoOKHOk5/w09CQ
Qk/myap+37QY6rs5YXJvITiWYfo0HGs7zm1hyqq/mXtPVa7gUXQDMlyN2GqUNEWt
tm5iB3FSYxkMKKqFJ6krSNDq+TdzKTwea07WeGNWTXOMqFNmqSp6pQ11hIWg/hid
Y6wv3ST83ZD8luu6LPTW8agrDT1vnp6hkQZhPphEkfS/0jbvL3IV9f3fbuRYR5Mp
IU82v3ZaqeZpyuRR5covoPTD/QVKOq2+99qqdz7v/DRnsuu22gaZ/4Hz0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmOvKqQ+ZwJ77FTijj+kyQktIfOMB8GA1UdIwQY
MBaAFNKRdBJSu5xM2oAEffsBzpjCGdGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHBGMEVsSzduRXphZ0FSOS13SE9tTUlaMFlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zYmE2ZmMtMmQ0OS00YWZmLTkyMjkt
NDhiOTU3MjY0YzI2LzEvMHBGMEVsSzduRXphZ0FSOS13SE9tTUlaMFlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zYmE2ZmMtMmQ0OS00YWZmLTkyMjktNDhiOTU3MjY0YzI2
LzEvMHBGMEVsSzduRXphZ0FSOS13SE9tTUlaMFlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq/b0L6q
nR8QplgEFBsGOh9zdV8xyl4lq9x1vvhobHUmfufuUgRNHTou4he1s6o6ndRCYakm
sx/8Usjnd2juxJ4zlKzltZljOjpStpBRketnpjOjDS/QlbDrNrucgkIyieee460l
EbJ5Gjp/GP+QnuJEdhj1iLi676Dp7VYQLu5h0GRfXMlJfnrlJJrEK0T/SMj/Cz+U
9BrodHXGvrPDKD5Xulb2LduHe4U+OCojgcNngx9Dw6p1r29hxsjYLXsssAq0G3Ui
Llt5ZOAXiim8wZ03D0GybCl2ByrrCEsy1IAiVAdcY1hQGSn9OpFBT/85e5wcEgsq
9v7beoD2uOISzg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:45 2026 by rpki-client