Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: g4WFQMX4lWF8GqHqsbfDBKSMwaGO+0vLx4ZMOYTw+Dg=
Subject key identifier: 15:B7:51:5E:04:F3:94:8A:0C:8F:2B:54:C8:9F:C8:0F:74:61:46:FE
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019E1D90AA1F54875681261CC7C6E5A54F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0A13
Signing time: Tue 12 May 2026 19:01:20 +0000
Manifest this update: Tue 12 May 2026 19:01:20 +0000
Manifest next update: Wed 13 May 2026 19:01:20 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: E9x+fZocMHsDBVt32eVWevqR/FKX0WZFewOvFjZznF0=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:aa:1f:54:87:56:81:26:1c:c7:c6:e5:a5:4f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: May 12 19:01:20 2026 GMT
Not After : May 13 19:01:20 2026 GMT
Subject: CN=15b7515e04f3948a0c8f2b54c89fc80f746146fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:a0:00:8b:55:ad:e7:d8:55:15:bd:6e:89:
0a:cd:a7:3a:13:ad:d6:26:30:77:1b:fa:7a:b6:d1:
41:32:e3:32:5b:12:d7:7a:e5:1b:6b:c0:ac:12:59:
48:17:a5:99:09:b9:aa:4b:59:71:50:93:af:8a:51:
c9:f3:e3:ff:a1:cd:03:38:51:0f:b8:cd:f9:f9:37:
db:b3:80:cf:06:2c:93:a4:ad:be:e5:e9:a9:a5:dc:
5a:50:4b:13:e3:9d:7b:24:b7:01:06:fc:2a:48:16:
a0:67:a5:ae:24:91:73:16:c3:f9:3c:ee:e1:f5:f5:
85:b1:b7:37:5e:34:1e:e4:15:9f:44:39:b9:4e:b2:
96:c6:95:84:66:4f:58:34:13:9c:7c:03:ba:c4:a3:
9f:7e:d4:fd:07:46:38:50:ca:ea:75:e0:11:3a:3f:
4a:eb:d9:58:af:f7:b2:0e:3f:52:ca:29:f3:bf:35:
aa:73:64:3d:b3:99:63:fa:1d:5d:94:92:2d:a9:cb:
b7:43:d2:b4:e1:a2:30:d2:29:62:75:50:ef:b3:30:
db:ca:22:bc:3b:f4:3d:92:57:b7:fe:06:f9:12:0b:
25:a4:5b:4a:ce:e8:65:81:6b:f3:7c:2d:1f:2c:f6:
b1:45:e2:ea:f9:a3:e2:8e:09:01:8b:c1:0e:ec:8c:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B7:51:5E:04:F3:94:8A:0C:8F:2B:54:C8:9F:C8:0F:74:61:46:FE
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7a:db:8b:b3:5f:1f:43:30:a0:ca:d9:91:4a:3c:8c:f5:3c:
05:99:ad:38:89:5f:23:f2:27:71:e5:f2:c3:0f:92:3c:85:c4:
ae:7c:38:09:d6:cb:57:07:d7:3f:8b:7b:79:29:26:12:35:4a:
3e:d9:52:b1:d9:df:47:2a:5e:44:48:52:23:85:0d:7a:08:0b:
ae:4c:4e:f8:bb:98:3d:4b:45:8f:c5:9a:5d:a1:36:3a:fc:a0:
da:49:57:4c:04:d8:66:c4:a9:63:1e:b4:10:22:6c:4f:9b:8b:
c8:0a:08:2e:b7:86:5b:98:7a:9c:62:e6:33:68:68:42:13:5d:
fb:ce:4d:8d:a1:de:a8:25:90:4e:ce:0b:f4:f0:8c:60:c6:12:
5d:b7:c5:10:71:2d:12:18:63:53:17:c7:64:11:62:17:1e:66:
df:bc:c2:10:e2:07:5d:0f:bb:9c:76:a4:01:66:9e:1a:53:00:
8d:73:a0:15:a5:89:96:c9:db:52:b0:2c:49:a9:04:7a:dd:72:
88:69:99:ed:c9:72:d6:7e:73:51:12:78:9e:c3:85:66:00:03:
9b:ef:cf:0b:de:61:b3:52:eb:3d:99:17:bf:88:21:3f:ee:11:
5d:16:c8:ed:1b:b4:6d:08:59:22:08:a1:55:b7:b6:2c:02:4c:
6b:70:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:57 2026 by rpki-client