Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
File: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft (raw, json)
Hash identifier: XU5O+PP5R1iAzGqCTJpT9z62tzmV3W41y+vt0oWXafs=
Subject key identifier: 82:ED:11:96:3F:99:C5:0C:6F:CD:C9:31:D2:46:46:98:8D:31:71:2A
Authority key identifier: D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F
Certificate issuer: /CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f
Certificate serial: 019D28841ECAF826B00DCA37984A365AAF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
Manifest number: 0202
Signing time: Thu 26 Mar 2026 05:00:40 +0000
Manifest this update: Thu 26 Mar 2026 05:00:40 +0000
Manifest next update: Fri 27 Mar 2026 05:00:40 +0000
Files and hashes: 1: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl (hash: xXKDiEXORNukUdNtvo3t/ZLuZTPzGM6vYd3wqCpmrz8=)
2: 7y2-JyJSBLPzJ1F-GfRB9L2A1lc.roa (hash: Je64415GY9BUK++a0MLtgLPvf9KrlsWdU946uIXLKos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1e:ca:f8:26:b0:0d:ca:37:98:4a:36:5a:af:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f
Validity
Not Before: Mar 26 05:00:40 2026 GMT
Not After : Mar 27 05:00:40 2026 GMT
Subject: CN=82ed11963f99c50c6fcdc931d24646988d31712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a7:d7:4d:d7:5e:04:4e:08:95:26:51:78:38:
19:50:38:b3:a5:7b:f7:4f:f9:3f:04:8a:0d:32:de:
5b:6a:bc:8e:33:8f:42:33:f0:95:6d:bb:3e:5f:1e:
a8:a5:1b:e7:40:c6:d9:cf:f7:6a:8e:8e:55:1a:50:
cd:9b:98:f8:8b:03:a7:1d:af:af:63:b1:58:55:93:
7d:bb:ce:ed:f5:8f:75:d9:48:1d:c7:ce:1c:fa:e3:
9d:48:c4:3a:5d:e7:b3:42:cb:09:c5:3e:5b:96:b9:
68:0e:d9:b7:f1:48:bc:89:63:96:77:ec:75:6e:09:
e3:84:84:66:30:f2:c5:bb:95:6d:19:50:cd:3d:6b:
c8:7d:96:dd:5f:f5:83:4f:33:db:26:e1:fb:0c:4f:
24:22:fc:b5:f2:07:a2:f6:09:e7:92:85:97:8d:e0:
49:9c:05:dc:5b:e1:57:7a:cc:70:29:f3:23:5f:f0:
d4:15:34:c8:93:d4:5d:95:16:9f:e5:fb:da:1f:f2:
8b:63:39:f4:7a:1a:66:54:63:71:26:44:1d:06:59:
5c:f3:2f:45:08:fd:06:49:ec:49:08:9c:e2:92:67:
df:d8:f3:b2:f6:2a:a8:5d:2a:32:fa:b4:78:37:e6:
e7:d9:23:b6:29:e0:53:31:e7:6d:5f:b9:20:15:25:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:11:96:3F:99:C5:0C:6F:CD:C9:31:D2:46:46:98:8D:31:71:2A
X509v3 Authority Key Identifier:
keyid:D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:40:f6:4d:3a:3b:3e:5a:84:12:35:ae:cb:db:15:19:a4:
ae:29:36:2d:13:e5:c8:cf:ee:c1:d2:c5:41:ca:8e:63:23:53:
5d:1c:f7:af:d1:b9:22:00:42:e9:0c:c0:08:6f:8c:29:b6:30:
45:97:22:d9:3c:ce:f6:3b:28:ef:23:32:e6:2c:f8:1e:d4:53:
d7:e8:18:63:45:57:70:23:40:d6:d5:8d:ae:5c:37:89:e6:e3:
98:23:82:dc:17:ac:3f:9f:78:3f:f2:cc:cc:f5:1d:6b:00:cc:
9f:66:24:8e:43:1c:bc:cb:fd:d0:dd:69:1f:8f:51:80:5f:65:
c2:f7:b8:d0:e9:be:8d:7e:33:36:31:0b:ab:33:18:be:f2:28:
74:bc:39:10:98:20:9a:30:ea:9f:df:9b:3d:7d:fe:40:bc:12:
9f:07:85:1d:11:ae:3d:d9:90:7f:c2:e6:a2:60:4f:53:28:55:
ca:87:d8:54:27:7a:a2:d5:0c:2e:3e:af:d0:7d:2f:b0:92:a4:
a8:11:12:5c:a9:dc:72:ee:be:06:84:1c:87:b5:9f:a1:6a:f8:
bc:00:21:95:81:fa:d9:dd:d6:ef:70:f5:ca:07:85:45:e9:7f:
94:66:4d:09:b2:b7:e2:e9:14:26:31:aa:e3:75:41:40:1f:e8:
88:50:8a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohB7K+CawDco3mEo2Wq8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZDRiZDcxYTQzZDhjZGQ0NjJhNjFlZWUwZDk0NzAwYzdl
NjQyNWYwHhcNMjYwMzI2MDUwMDQwWhcNMjYwMzI3MDUwMDQwWjAzMTEwLwYDVQQD
Eyg4MmVkMTE5NjNmOTljNTBjNmZjZGM5MzFkMjQ2NDY5ODhkMzE3MTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66fXTddeBE4IlSZReDgZUDizpXv3
T/k/BIoNMt5baryOM49CM/CVbbs+Xx6opRvnQMbZz/dqjo5VGlDNm5j4iwOnHa+v
Y7FYVZN9u87t9Y912Ugdx84c+uOdSMQ6XeezQssJxT5blrloDtm38Ui8iWOWd+x1
bgnjhIRmMPLFu5VtGVDNPWvIfZbdX/WDTzPbJuH7DE8kIvy18gei9gnnkoWXjeBJ
nAXcW+FXesxwKfMjX/DUFTTIk9RdlRaf5fvaH/KLYzn0ehpmVGNxJkQdBllc8y9F
CP0GSexJCJzikmff2POy9iqoXSoy+rR4N+bn2SO2KeBTMedtX7kgFSVtYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILtEZY/mcUMb83JMdJGRpiNMXEqMB8GA1UdIwQY
MBaAFNLUvXGkPYzdRiph7uDZRwDH5kJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHRTOWNhUTlqTjFHS21IdTRObEhBTWZtUWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MWRkMDAtYjU3Yi00NjM4LWEwOGIt
Njg1M2M0MWNhMDNlLzEvMHRTOWNhUTlqTjFHS21IdTRObEhBTWZtUWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80MWRkMDAtYjU3Yi00NjM4LWEwOGItNjg1M2M0MWNhMDNl
LzEvMHRTOWNhUTlqTjFHS21IdTRObEhBTWZtUWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg9A9k06
Oz5ahBI1rsvbFRmkrik2LRPlyM/uwdLFQcqOYyNTXRz3r9G5IgBC6QzACG+MKbYw
RZci2TzO9jso7yMy5iz4HtRT1+gYY0VXcCNA1tWNrlw3iebjmCOC3BesP594P/LM
zPUdawDMn2YkjkMcvMv90N1pH49RgF9lwve40Om+jX4zNjELqzMYvvIodLw5EJgg
mjDqn9+bPX3+QLwSnweFHRGuPdmQf8LmomBPUyhVyofYVCd6otUMLj6v0H0vsJKk
qBESXKnccu6+BoQch7WfoWr4vAAhlYH62d3W73D1ygeFRel/lGZNCbK34ukUJjGq
43VBQB/oiFCK9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:15 2026 by rpki-client