Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File: 0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier: C8qsvSb3UDNP/btmMRetWj761HwPpkO9JLK/3j4HhRA=
Subject key identifier: 5D:FD:33:B2:54:3C:4B:9D:C8:C7:AF:0F:21:F7:EF:6D:3C:A6:8A:9B
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer: /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial: 01A0CF368AC2530910D2AF597096506CF0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number: 0A2B
Signing time: Wed 23 Sep 2026 17:00:53 +0000
Manifest this update: Wed 23 Sep 2026 17:00:53 +0000
Manifest next update: Thu 24 Sep 2026 17:00:53 +0000
Files and hashes: 1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: l8HRh9XempIqDG6MIBBvfe2FcZvKt4Qt6oiBpeni2Tw=)
2: JNb8qAOe82PBo3QGsaNX-y91s-c.roa (hash: N4b3iRyhTXcqX/rj0VSG64RSyTYz/SivUVU9/ij649s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:8a:c2:53:09:10:d2:af:59:70:96:50:6c:f0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Validity
Not Before: Sep 23 17:00:53 2026 GMT
Not After : Sep 24 17:00:53 2026 GMT
Subject: CN=5dfd33b2543c4b9dc8c7af0f21f7ef6d3ca68a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:d7:67:fb:32:c5:3b:6d:ad:49:90:0e:0a:
e7:c6:84:66:55:27:55:89:cc:9c:e1:a4:fd:e4:01:
1f:84:41:b3:01:7e:b1:da:dc:40:75:6c:42:b8:8f:
24:95:fa:73:d2:be:6c:b1:b9:ba:fa:f6:2a:b6:b9:
9c:37:53:c8:60:95:dd:ed:ed:d5:25:ab:37:0b:ae:
11:61:26:71:3f:5f:d3:96:85:11:8c:43:16:55:a4:
bd:cd:8b:c2:11:1e:40:d9:b5:e7:28:00:99:e0:26:
9f:ed:61:67:ce:92:82:c3:24:af:33:1e:ba:c0:49:
7f:91:e0:22:06:27:7b:07:4b:87:79:ae:21:bb:03:
96:5f:a6:54:e6:6a:64:c4:3a:e6:e4:56:18:57:91:
d9:e4:26:bd:77:42:45:f2:02:a5:37:b8:8b:ed:4f:
6a:51:5d:b1:c1:42:d1:ea:0d:67:fd:3e:61:cb:2d:
b9:62:5a:1b:79:3e:02:b4:9c:ba:ae:16:d7:37:4b:
e0:69:66:f9:cf:14:46:44:74:d7:ea:ad:04:1e:f2:
bd:47:43:de:d8:2f:49:bf:ca:03:f9:7a:3c:6d:57:
cf:bb:1e:bd:87:27:46:5a:dc:49:a7:05:9a:de:1a:
c2:58:58:d7:e5:79:78:fb:ab:39:4c:c3:c9:05:99:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:33:B2:54:3C:4B:9D:C8:C7:AF:0F:21:F7:EF:6D:3C:A6:8A:9B
X509v3 Authority Key Identifier:
keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:1b:a0:f4:03:5c:41:50:9c:5c:6d:35:89:93:28:c9:c3:7f:
04:08:61:b4:ee:19:30:1f:c7:4d:71:73:ef:0d:2f:a3:00:6f:
a4:23:bf:fa:24:0d:45:97:ff:37:68:01:b6:95:95:9f:9c:dd:
9a:54:a9:83:c3:c8:01:ed:b2:b6:22:23:a5:72:b0:68:de:80:
7c:d8:10:5e:06:01:7e:87:65:73:c8:17:30:91:65:42:68:f4:
7e:23:1e:03:29:35:7c:3c:92:64:f6:35:02:e2:77:5a:da:8d:
5c:30:60:3d:ce:41:5a:df:70:44:4d:92:94:63:fc:aa:07:8b:
3e:d0:a5:90:29:15:59:96:ff:54:ad:e7:5c:5c:d1:34:88:f8:
1e:76:f2:03:62:bc:7f:ea:79:76:fd:28:c5:14:f7:55:94:6e:
74:24:0a:45:7f:af:67:a7:be:d8:ca:ad:66:a8:2f:35:0b:e2:
d4:9f:f0:a6:14:ba:06:12:d6:e4:f6:6e:9c:dc:5f:be:ca:76:
90:ab:69:54:0c:40:07:00:70:4d:8a:1a:46:7a:f4:7c:83:91:
54:cd:e2:7c:2f:81:a5:6d:77:85:49:cf:7a:2c:56:d7:1a:e7:
db:6c:0a:6a:10:96:40:47:9c:fe:cc:5b:ff:88:4d:e8:28:82:
89:c8:62:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNorCUwkQ0q9ZcJZQbPDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWE5ZTJjNGFjOGJjMDJiYzNmZjg5MjVhYzEzMTc0ZDJk
NDc4YzQwHhcNMjYwOTIzMTcwMDUzWhcNMjYwOTI0MTcwMDUzWjAzMTEwLwYDVQQD
Eyg1ZGZkMzNiMjU0M2M0YjlkYzhjN2FmMGYyMWY3ZWY2ZDNjYTY4YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8zXZ/syxTttrUmQDgrnxoRmVSdV
icyc4aT95AEfhEGzAX6x2txAdWxCuI8klfpz0r5ssbm6+vYqtrmcN1PIYJXd7e3V
Jas3C64RYSZxP1/TloURjEMWVaS9zYvCER5A2bXnKACZ4Caf7WFnzpKCwySvMx66
wEl/keAiBid7B0uHea4huwOWX6ZU5mpkxDrm5FYYV5HZ5Ca9d0JF8gKlN7iL7U9q
UV2xwULR6g1n/T5hyy25YlobeT4CtJy6rhbXN0vgaWb5zxRGRHTX6q0EHvK9R0Pe
2C9Jv8oD+Xo8bVfPux69hydGWtxJpwWa3hrCWFjX5Xl4+6s5TMPJBZkFtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF39M7JUPEudyMevDyH37208poqbMB8GA1UdIwQY
MBaAFNJanixKyLwCvD/4klrBMXTS1HjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iMjU4MmYtNTg2Yi00MzZhLWE2ZTMt
ZTA2OWVlMTA3YWRkLzEvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iMjU4MmYtNTg2Yi00MzZhLWE2ZTMtZTA2OWVlMTA3YWRk
LzEvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRug9ANc
QVCcXG01iZMoycN/BAhhtO4ZMB/HTXFz7w0vowBvpCO/+iQNRZf/N2gBtpWVn5zd
mlSpg8PIAe2ytiIjpXKwaN6AfNgQXgYBfodlc8gXMJFlQmj0fiMeAyk1fDySZPY1
AuJ3WtqNXDBgPc5BWt9wRE2SlGP8qgeLPtClkCkVWZb/VK3nXFzRNIj4HnbyA2K8
f+p5dv0oxRT3VZRudCQKRX+vZ6e+2MqtZqgvNQvi1J/wphS6BhLW5PZunNxfvsp2
kKtpVAxABwBwTYoaRnr0fIORVM3ifC+BpW13hUnPeixW1xrn22wKahCWQEec/sxb
/4hN6CiCichirA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:37:35 2026 by rpki-client