Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: +rxMUsiwSD0RO7UF4rmeI9fk154B2QrhF/6peHWGgsg=
Subject key identifier: 78:59:12:03:1D:F4:1E:6B:93:65:E3:BE:1B:58:71:F8:77:14:01:5A
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019D28F329E64AD79DF04AA13440BD3842E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 0202
Signing time: Thu 26 Mar 2026 07:01:57 +0000
Manifest this update: Thu 26 Mar 2026 07:01:57 +0000
Manifest next update: Fri 27 Mar 2026 07:01:57 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: QTJuAY2oDu4AYXJvJc9LTnm68V+7UTRoGVPqlR7DzBY=)
2: 0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa (hash: NCRRT15Nw1RlGwpm/ytoJz8CpfLxBA4RH0mKpwLqRd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:29:e6:4a:d7:9d:f0:4a:a1:34:40:bd:38:42:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Mar 26 07:01:57 2026 GMT
Not After : Mar 27 07:01:57 2026 GMT
Subject: CN=785912031df41e6b9365e3be1b5871f87714015a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:fe:17:73:f8:8a:80:b2:67:9a:df:d1:08:
b2:d2:29:2e:42:06:1e:f3:16:6c:84:98:20:a4:f1:
f6:3f:8a:43:d4:8a:28:fc:81:93:1c:3e:5b:65:dc:
b9:1e:58:13:37:96:a8:77:6b:4d:c1:e4:47:b8:70:
a9:d1:12:65:dc:d9:24:29:fb:ff:20:ab:2f:74:33:
a7:14:1c:f4:48:70:59:23:16:af:8f:00:50:ef:d7:
1a:a9:f6:64:a3:33:97:d9:65:fa:fb:7b:d3:f8:8b:
ec:ca:b5:fd:4f:0a:ec:da:f8:fa:6b:9b:f5:a9:4c:
ed:46:94:97:92:30:c5:01:08:90:14:d0:e9:5d:c1:
36:09:30:31:28:c7:93:08:77:1c:83:72:4b:ab:0a:
e3:2b:19:f4:d8:82:84:4d:ff:ed:e4:ec:b5:97:d4:
b5:35:db:2d:bf:70:8f:46:ab:dc:66:e6:8c:e3:64:
8d:81:dd:cb:6c:eb:38:bb:1b:69:72:2b:93:53:b4:
9f:68:1d:b8:04:01:c6:ff:7f:31:2f:3f:b8:60:33:
83:dc:bf:34:66:df:3d:1b:5f:df:6d:b2:55:67:f8:
a2:76:c2:d9:53:f1:53:c9:ba:83:e3:08:8f:c6:99:
b7:6d:99:ce:4b:c0:cd:c0:8e:b2:64:47:de:40:c6:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:59:12:03:1D:F4:1E:6B:93:65:E3:BE:1B:58:71:F8:77:14:01:5A
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3e:95:91:92:24:8b:ce:08:22:dc:74:e9:c8:34:69:83:a0:
da:23:75:fd:56:87:50:ee:bc:74:e5:0b:80:65:15:51:1c:f3:
21:94:bc:8f:e2:c8:92:02:8b:bb:ea:25:49:16:fd:38:3e:38:
e5:53:5b:6c:ed:0e:81:c4:2f:ee:c1:dc:b0:23:85:46:3a:96:
59:9f:c3:b6:54:cb:c2:7c:93:6a:35:7c:d3:6e:2a:04:8d:e1:
76:9e:bd:74:7d:a0:ce:e7:d8:55:4c:3e:b4:6e:4d:c1:1e:b6:
e4:74:c6:8c:f0:c5:bc:30:e0:ec:ba:70:01:ec:1b:8a:ac:b9:
a7:15:5e:0e:1c:a3:5b:be:e2:9c:42:eb:76:81:81:75:77:32:
de:07:4d:cc:4b:1d:df:a9:2c:37:30:58:3e:aa:db:7a:cf:08:
68:31:77:41:f5:04:70:83:1f:f4:56:19:48:38:56:4d:e8:c4:
78:75:3f:b0:9c:e8:e5:ce:61:0f:f0:32:9b:9d:f7:ba:e3:12:
f9:19:2d:ad:ee:1d:e3:f9:f4:3e:b9:f9:d7:89:25:b4:33:4c:
86:57:30:18:03:8d:68:ee:3b:33:17:81:4b:47:09:72:03:87:
fb:54:c1:f4:a1:ee:e5:f0:eb:dd:a8:ef:c7:ea:ac:41:2b:d3:
bc:72:1a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8ynmSted8EqhNEC9OELkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDVlYWUxMzFjM2IxMDg4ZmZiMDIzNzk4MGQ2ZWUxODg5
NjY4YzYwHhcNMjYwMzI2MDcwMTU3WhcNMjYwMzI3MDcwMTU3WjAzMTEwLwYDVQQD
Eyg3ODU5MTIwMzFkZjQxZTZiOTM2NWUzYmUxYjU4NzFmODc3MTQwMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgT+F3P4ioCyZ5rf0Qiy0ikuQgYe
8xZshJggpPH2P4pD1Ioo/IGTHD5bZdy5HlgTN5aod2tNweRHuHCp0RJl3NkkKfv/
IKsvdDOnFBz0SHBZIxavjwBQ79caqfZkozOX2WX6+3vT+IvsyrX9Twrs2vj6a5v1
qUztRpSXkjDFAQiQFNDpXcE2CTAxKMeTCHccg3JLqwrjKxn02IKETf/t5Oy1l9S1
Ndstv3CPRqvcZuaM42SNgd3LbOs4uxtpciuTU7SfaB24BAHG/38xLz+4YDOD3L80
Zt89G1/fbbJVZ/iidsLZU/FTybqD4wiPxpm3bZnOS8DNwI6yZEfeQMaTkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhZEgMd9B5rk2XjvhtYcfh3FAFaMB8GA1UdIwQY
MBaAFNHV6uExw7EIj/sCN5gNbuGIlmjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQt
OWRhMmNmNGU2MDY1LzEvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQtOWRhMmNmNGU2MDY1
LzEvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAT6VkZIk
i84IItx06cg0aYOg2iN1/VaHUO68dOULgGUVURzzIZS8j+LIkgKLu+olSRb9OD44
5VNbbO0OgcQv7sHcsCOFRjqWWZ/DtlTLwnyTajV8024qBI3hdp69dH2gzufYVUw+
tG5NwR625HTGjPDFvDDg7LpwAewbiqy5pxVeDhyjW77inELrdoGBdXcy3gdNzEsd
36ksNzBYPqrbes8IaDF3QfUEcIMf9FYZSDhWTejEeHU/sJzo5c5hD/Aym533uuMS
+Rktre4d4/n0Prn514kltDNMhlcwGAONaO47MxeBS0cJcgOH+1TB9KHu5fDr3ajv
x+qsQSvTvHIaqw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:21:10 2026 by rpki-client