Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: +l2tL0Q/37zJMD+5abhEOzDuineVpNxttwxLj19Zc3g=
Subject key identifier: 45:DD:91:54:F4:C2:77:1B:88:63:23:9B:1D:8D:FE:6B:90:97:36:2C
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019E1E3536F28DC26BAA749B646E4D45CB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 0281
Signing time: Tue 12 May 2026 22:01:04 +0000
Manifest this update: Tue 12 May 2026 22:01:04 +0000
Manifest next update: Wed 13 May 2026 22:01:04 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: pkWbz/cWby3Lf3NUcXU5j53u3cKF3xfEocW6oW/51iY=)
2: 0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa (hash: NCRRT15Nw1RlGwpm/ytoJz8CpfLxBA4RH0mKpwLqRd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:36:f2:8d:c2:6b:aa:74:9b:64:6e:4d:45:cb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: May 12 22:01:04 2026 GMT
Not After : May 13 22:01:04 2026 GMT
Subject: CN=45dd9154f4c2771b8863239b1d8dfe6b9097362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:a5:0a:02:b0:af:64:f7:69:1f:4f:25:9f:
9b:c9:32:18:a5:7b:44:4f:92:1c:8a:68:02:5d:f7:
60:99:cf:26:25:1d:fc:b7:73:d4:9f:ce:97:dd:4e:
68:30:50:05:98:d9:ef:4d:ec:e3:96:66:a9:ce:d1:
2e:3f:6b:d5:e0:ed:ef:19:72:7e:96:75:06:53:4d:
62:44:22:eb:39:67:ca:70:3b:da:52:1e:95:5f:c1:
ca:77:80:60:97:27:25:e6:d3:7e:3c:97:50:d0:e3:
71:c1:60:73:07:32:7e:df:81:54:82:4b:11:a9:32:
f3:85:f9:3e:19:fe:34:03:20:9a:99:5d:5b:11:12:
61:23:d1:4c:c4:48:ca:58:a4:be:ef:29:1a:29:a7:
94:dc:98:41:3f:f7:25:c3:81:ac:e4:d0:55:ee:a7:
fb:ca:c0:2c:ab:15:18:0e:c6:ae:ac:fa:65:a8:47:
72:12:d6:94:f5:6e:68:3b:81:9f:af:eb:57:d5:0e:
38:0f:e0:d3:45:82:4d:09:86:a7:45:76:68:d3:00:
82:33:d4:3e:c0:cb:68:ff:aa:8b:4a:d9:4c:95:3d:
bc:98:e8:29:7b:02:f5:6d:de:8b:0e:9e:64:36:18:
9f:f6:67:f0:af:88:0b:bc:97:3a:e4:49:ac:25:65:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DD:91:54:F4:C2:77:1B:88:63:23:9B:1D:8D:FE:6B:90:97:36:2C
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bc:f1:e7:d0:c8:bd:91:3a:44:53:d9:e6:e3:27:f5:c1:3c:
5f:b5:35:36:94:75:ef:5e:63:42:ac:12:75:08:b5:a6:46:df:
54:54:12:79:e6:5d:e3:3a:e3:f7:24:65:b6:a1:53:db:5c:f7:
26:55:0c:ea:cd:df:db:28:92:cd:90:61:b6:6b:49:ab:f9:e1:
02:c5:6a:a8:19:ea:b1:9f:db:71:4f:8b:0d:ef:96:11:d3:e8:
d7:88:59:d3:4a:da:6f:c7:44:ac:d2:79:ee:f5:8a:bd:78:8f:
49:ed:9a:55:59:58:56:31:38:4c:8e:c7:a5:c5:b2:f1:22:24:
c8:ae:4b:bd:a9:b5:f3:a4:6d:39:48:c0:7c:4e:f5:a2:88:d6:
ff:e4:e6:5b:b8:83:95:42:f6:46:09:f8:d6:1b:f9:fb:39:74:
64:d9:b9:ae:c4:98:40:cd:61:fe:44:77:9f:c5:05:a4:16:2b:
c1:c9:5b:42:93:f5:53:d5:82:0b:48:b4:bb:22:7a:9d:c5:02:
6c:cb:c7:7c:73:7f:fe:04:9f:1c:1e:44:48:39:86:ab:54:d0:
ee:8a:c1:31:22:93:a8:af:d4:08:6d:56:1f:95:8e:e5:6b:76:
2a:43:2e:01:c3:4e:6e:35:c9:56:59:ca:9b:f6:81:ac:4f:1a:
d2:a0:55:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNTbyjcJrqnSbZG5NRcuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDVlYWUxMzFjM2IxMDg4ZmZiMDIzNzk4MGQ2ZWUxODg5
NjY4YzYwHhcNMjYwNTEyMjIwMTA0WhcNMjYwNTEzMjIwMTA0WjAzMTEwLwYDVQQD
Eyg0NWRkOTE1NGY0YzI3NzFiODg2MzIzOWIxZDhkZmU2YjkwOTczNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSqlCgKwr2T3aR9PJZ+byTIYpXtE
T5IcimgCXfdgmc8mJR38t3PUn86X3U5oMFAFmNnvTezjlmapztEuP2vV4O3vGXJ+
lnUGU01iRCLrOWfKcDvaUh6VX8HKd4Bglycl5tN+PJdQ0ONxwWBzBzJ+34FUgksR
qTLzhfk+Gf40AyCamV1bERJhI9FMxEjKWKS+7ykaKaeU3JhBP/clw4Gs5NBV7qf7
ysAsqxUYDsaurPplqEdyEtaU9W5oO4Gfr+tX1Q44D+DTRYJNCYanRXZo0wCCM9Q+
wMto/6qLStlMlT28mOgpewL1bd6LDp5kNhif9mfwr4gLvJc65EmsJWX6TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXdkVT0wncbiGMjmx2N/muQlzYsMB8GA1UdIwQY
MBaAFNHV6uExw7EIj/sCN5gNbuGIlmjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQt
OWRhMmNmNGU2MDY1LzEvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQtOWRhMmNmNGU2MDY1
LzEvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbzx59DI
vZE6RFPZ5uMn9cE8X7U1NpR1715jQqwSdQi1pkbfVFQSeeZd4zrj9yRltqFT21z3
JlUM6s3f2yiSzZBhtmtJq/nhAsVqqBnqsZ/bcU+LDe+WEdPo14hZ00rab8dErNJ5
7vWKvXiPSe2aVVlYVjE4TI7HpcWy8SIkyK5Lvam186RtOUjAfE71oojW/+TmW7iD
lUL2Rgn41hv5+zl0ZNm5rsSYQM1h/kR3n8UFpBYrwclbQpP1U9WCC0i0uyJ6ncUC
bMvHfHN//gSfHB5ESDmGq1TQ7orBMSKTqK/UCG1WH5WO5Wt2KkMuAcNObjXJVlnK
m/aBrE8a0qBVtg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:12:06 2026 by rpki-client