Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: +oq6QiGLKku9mpdCSPDZtBm3DDSz+xyq/DzDtonLG2o=
Subject key identifier: 3F:52:A9:AC:0A:FD:98:E1:F0:CE:67:03:F9:66:9B:9E:0F:8F:A0:2C
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 01A0D6B9C2EA4D71A870D8084E180A52E07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0B7C
Signing time: Fri 25 Sep 2026 04:01:33 +0000
Manifest this update: Fri 25 Sep 2026 04:01:33 +0000
Manifest next update: Sat 26 Sep 2026 04:01:33 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: q1b2Sfb2/GKEA/NOIHSVkXKYhEq0aVSQegJhT+tJq/A=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:c2:ea:4d:71:a8:70:d8:08:4e:18:0a:52:e0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Sep 25 04:01:33 2026 GMT
Not After : Sep 26 04:01:33 2026 GMT
Subject: CN=3f52a9ac0afd98e1f0ce6703f9669b9e0f8fa02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:fd:3e:18:97:6d:bf:a9:ac:a8:6c:20:5d:
5d:57:3b:f1:ef:a4:9f:72:26:a9:42:66:7f:20:7b:
90:79:1d:62:42:b3:ab:84:e0:69:71:95:e3:dd:43:
85:db:42:e0:25:c7:0e:d3:6e:b1:7e:21:2e:9c:42:
0a:4d:7d:31:21:4b:bd:71:d8:5c:95:d0:98:37:7e:
35:66:38:80:08:86:00:99:37:87:74:87:1b:58:99:
c4:31:a3:3e:b8:1e:54:ec:e7:84:53:27:38:6f:9b:
f6:1f:d7:cf:2a:73:7b:30:09:8a:7f:16:f2:4c:c7:
8f:ed:81:8b:d7:19:e3:09:d2:71:ba:96:15:c9:10:
f5:fb:0c:aa:91:dd:06:ae:93:65:23:8d:41:f9:ef:
3c:a4:fd:0f:9e:86:e3:9f:9b:3a:7c:34:be:ee:b8:
d5:e2:15:9b:c5:e8:a1:dd:3d:d9:23:01:8b:12:94:
29:1f:80:6b:e5:42:0d:fc:4a:ff:ac:db:85:8d:2a:
d3:95:2d:3f:26:f8:3e:63:4e:75:6d:3c:39:7b:30:
c6:c7:b5:15:df:34:84:97:c1:a8:53:cb:78:fe:8c:
40:c1:1f:eb:4d:ac:3f:3c:31:5b:e7:d6:3b:52:22:
19:3a:34:92:94:f9:c6:38:27:f3:ce:e7:08:84:aa:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:52:A9:AC:0A:FD:98:E1:F0:CE:67:03:F9:66:9B:9E:0F:8F:A0:2C
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:71:50:f1:38:57:86:48:7c:68:b8:b5:65:d8:fe:61:30:81:
75:f5:50:4e:71:5c:71:e9:e3:4a:0e:37:a9:9a:03:38:7b:02:
f8:ca:8d:58:72:45:9b:53:18:4f:31:9b:12:4d:4f:08:3f:3d:
24:b3:bd:72:b9:72:77:75:8a:4d:43:20:e1:a0:1f:b5:ac:01:
21:3b:04:21:bb:7b:be:6a:d7:30:9e:e4:f7:ac:03:cc:87:cb:
5b:58:73:dd:22:8b:51:05:17:f9:1c:13:88:99:d9:30:90:8e:
3f:4b:7b:51:73:7c:18:22:1f:99:eb:2d:55:c5:95:74:72:05:
b3:fb:b9:30:26:4b:74:e6:db:c9:9b:dc:08:06:24:51:f4:3c:
f5:81:04:20:ba:21:43:7e:d0:7f:24:5e:93:26:a2:f9:74:4e:
4f:75:e6:c2:2f:f7:46:7e:f9:07:59:68:34:bd:cf:98:9f:db:
08:47:6d:2f:f7:b3:9e:bc:30:3a:d8:d0:54:08:79:2e:c1:de:
ca:40:78:e8:f9:31:80:fb:50:8d:ad:f5:b2:17:72:49:ee:c8:
ce:92:87:61:00:b5:61:5e:33:b6:fc:33:9b:dd:4f:36:d6:e1:
b3:27:dc:11:6e:65:cc:a5:b8:02:ec:49:c3:8c:d2:8a:ff:eb:
f0:9e:ad:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWucLqTXGocNgIThgKUuB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0
MDRjMDcwHhcNMjYwOTI1MDQwMTMzWhcNMjYwOTI2MDQwMTMzWjAzMTEwLwYDVQQD
EygzZjUyYTlhYzBhZmQ5OGUxZjBjZTY3MDNmOTY2OWI5ZTBmOGZhMDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJP9PhiXbb+prKhsIF1dVzvx76Sf
ciapQmZ/IHuQeR1iQrOrhOBpcZXj3UOF20LgJccO026xfiEunEIKTX0xIUu9cdhc
ldCYN341ZjiACIYAmTeHdIcbWJnEMaM+uB5U7OeEUyc4b5v2H9fPKnN7MAmKfxby
TMeP7YGL1xnjCdJxupYVyRD1+wyqkd0GrpNlI41B+e88pP0Pnobjn5s6fDS+7rjV
4hWbxeih3T3ZIwGLEpQpH4Br5UIN/Er/rNuFjSrTlS0/Jvg+Y051bTw5ezDGx7UV
3zSEl8GoU8t4/oxAwR/rTaw/PDFb59Y7UiIZOjSSlPnGOCfzzucIhKoATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9SqawK/Zjh8M5nA/lmm54Pj6AsMB8GA1UdIwQY
MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt
NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx
LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3FQ8ThX
hkh8aLi1Zdj+YTCBdfVQTnFccenjSg43qZoDOHsC+MqNWHJFm1MYTzGbEk1PCD89
JLO9crlyd3WKTUMg4aAftawBITsEIbt7vmrXMJ7k96wDzIfLW1hz3SKLUQUX+RwT
iJnZMJCOP0t7UXN8GCIfmestVcWVdHIFs/u5MCZLdObbyZvcCAYkUfQ89YEEILoh
Q37QfyRekyai+XROT3Xmwi/3Rn75B1loNL3PmJ/bCEdtL/eznrwwOtjQVAh5LsHe
ykB46PkxgPtQja31shdySe7IzpKHYQC1YV4ztvwzm91PNtbhsyfcEW5lzKW4AuxJ
w4zSiv/r8J6t3A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:31:16 2026 by rpki-client