Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier: bnjnmEXNX2tm8rWm6AYS+MgS6RGo1imbrpLkB+sDz34=
Subject key identifier: 65:55:B3:A0:D9:69:80:0B:63:29:B5:2E:D2:F6:D8:88:4E:A2:37:39
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 019E1E3557AE2B6D957E211AE3883383AB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number: 0D5E
Signing time: Tue 12 May 2026 22:01:12 +0000
Manifest this update: Tue 12 May 2026 22:01:12 +0000
Manifest next update: Wed 13 May 2026 22:01:12 +0000
Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: V7Xqnc6IVnz8lg3Z21s7+eaWvgfD1r8q4EowG/wyn2s=)
2: ThzwdKdKn1Xy5a4JKmMojrXgu40.roa (hash: lIi2RxL8LrPV+57y38KO3DW0z4++WwpkT83uTb32e/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:57:ae:2b:6d:95:7e:21:1a:e3:88:33:83:ab:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: May 12 22:01:12 2026 GMT
Not After : May 13 22:01:12 2026 GMT
Subject: CN=6555b3a0d969800b6329b52ed2f6d8884ea23739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:19:b4:fc:9f:c0:24:10:55:84:0c:13:57:
68:4e:b9:0a:19:16:3d:d1:33:37:0f:b1:5e:41:3a:
44:be:af:83:07:26:3a:5e:b7:88:2b:60:f4:ca:b9:
8b:33:02:c5:b6:a8:81:62:a8:53:09:fe:bf:49:c2:
28:26:c7:56:55:e2:fb:9c:f3:e6:9b:e5:7c:86:d0:
a1:c4:5a:8d:f1:cd:6d:8a:59:5a:86:85:a3:d9:08:
af:f5:90:15:b2:42:19:dc:f0:68:80:6a:0c:32:f4:
da:c1:e2:8d:4d:5c:95:31:bb:09:04:27:79:0a:1a:
87:be:9b:32:e0:e1:7f:81:ea:ea:e6:ca:2d:b9:62:
8a:44:41:0c:81:59:e8:5e:c1:7a:87:52:84:fd:46:
d7:fe:9d:64:42:d6:07:c5:43:01:eb:39:7d:a0:69:
06:f0:32:19:c4:1b:8f:c3:6f:85:27:70:13:a8:9b:
6e:6c:71:b6:4f:65:f2:16:bd:69:34:cf:f9:35:61:
c4:9e:b5:13:8b:af:f5:4e:78:c7:2c:67:f7:08:81:
88:86:69:25:5f:1d:df:c5:60:f6:69:5d:47:cf:75:
df:6f:dd:38:c6:f5:d2:34:3a:f4:31:3d:db:c2:8a:
38:f8:41:31:30:1e:38:f2:80:87:fc:aa:2c:ca:1c:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:B3:A0:D9:69:80:0B:63:29:B5:2E:D2:F6:D8:88:4E:A2:37:39
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f5:7c:7f:d9:cb:c5:f4:37:4e:e1:e0:71:e0:5e:03:0b:d7:
18:3a:70:e9:70:45:44:86:08:14:b4:ab:ea:28:b6:05:5c:a1:
bf:81:59:1b:e6:64:cf:d9:9d:ec:1a:a6:cb:ce:5e:8d:29:7a:
27:c8:b3:58:bc:6b:d3:94:ad:8d:7a:79:41:2c:ee:34:11:b3:
ab:41:43:a1:27:ca:44:2c:02:4d:2a:f5:5e:53:32:6e:05:a6:
b0:0c:8b:b4:5a:d4:49:ab:7d:20:76:ca:87:f0:df:d2:8e:03:
15:ac:08:0a:db:1f:4f:50:e3:77:4f:31:f5:18:62:bf:66:35:
21:a2:97:54:22:81:d6:19:ca:6a:11:49:ef:e3:8f:80:5b:01:
ec:69:19:de:4d:dd:f3:49:a3:d0:e9:5e:70:e6:11:0c:7b:6d:
bf:61:f6:19:80:eb:b3:52:23:b5:05:45:52:36:49:3a:a2:e6:
fb:4b:9d:d9:ed:b1:79:be:ce:dd:9d:98:26:ad:cc:3d:54:97:
9f:e4:90:e0:55:33:4e:e1:9d:c5:65:e6:61:df:57:e7:b1:c8:
6f:ee:92:93:93:db:f3:5f:10:0a:a2:77:41:dc:3b:1b:77:d9:
7a:01:d0:74:13:e3:0d:c6:1a:4e:44:ea:43:6e:04:e7:2d:b5:
98:ce:3d:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNVeuK22VfiEa44gzg6scMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZGNlODcwZTQ3M2MzNTQyNzNlODljNWU0ZTJlZDNlMGMw
NjkzNTYwHhcNMjYwNTEyMjIwMTEyWhcNMjYwNTEzMjIwMTEyWjAzMTEwLwYDVQQD
Eyg2NTU1YjNhMGQ5Njk4MDBiNjMyOWI1MmVkMmY2ZDg4ODRlYTIzNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIoZtPyfwCQQVYQME1doTrkKGRY9
0TM3D7FeQTpEvq+DByY6XreIK2D0yrmLMwLFtqiBYqhTCf6/ScIoJsdWVeL7nPPm
m+V8htChxFqN8c1tillahoWj2Qiv9ZAVskIZ3PBogGoMMvTaweKNTVyVMbsJBCd5
ChqHvpsy4OF/gerq5sotuWKKREEMgVnoXsF6h1KE/UbX/p1kQtYHxUMB6zl9oGkG
8DIZxBuPw2+FJ3ATqJtubHG2T2XyFr1pNM/5NWHEnrUTi6/1TnjHLGf3CIGIhmkl
Xx3fxWD2aV1Hz3Xfb904xvXSNDr0MT3bwoo4+EExMB448oCH/KosyhywaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVVs6DZaYALYym1LtL22IhOojc5MB8GA1UdIwQY
MBaAFNLc6HDkc8NUJz6JxeTi7T4MBpNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAt
MzJkODBkOGQxNjE1LzEvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAtMzJkODBkOGQxNjE1
LzEvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPV8f9nL
xfQ3TuHgceBeAwvXGDpw6XBFRIYIFLSr6ii2BVyhv4FZG+Zkz9md7Bqmy85ejSl6
J8izWLxr05StjXp5QSzuNBGzq0FDoSfKRCwCTSr1XlMybgWmsAyLtFrUSat9IHbK
h/Df0o4DFawICtsfT1Djd08x9Rhiv2Y1IaKXVCKB1hnKahFJ7+OPgFsB7GkZ3k3d
80mj0OlecOYRDHttv2H2GYDrs1IjtQVFUjZJOqLm+0ud2e2xeb7O3Z2YJq3MPVSX
n+SQ4FUzTuGdxWXmYd9X57HIb+6Sk5Pb818QCqJ3Qdw7G3fZegHQdBPjDcYaTkTq
Q24E5y21mM49KA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:20:14 2026 by rpki-client