Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: K/AZ5CvESyst4G79x20ii+zJXPn1FUmyVYq68A0kLWs=
Subject key identifier: 9A:63:6B:E2:45:6C:73:85:A8:FA:16:E5:69:5C:FC:99:65:BC:66:D8
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 019E1D90BA23A2D41C4268F1B2B3415AAC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 19:01:24 +0000
Manifest this update: Tue 12 May 2026 19:01:24 +0000
Manifest next update: Wed 13 May 2026 19:01:24 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: wvZvb8Sc/xRzsx8c6fTXseLnSGnHKCCjY36wDZPAK0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ba:23:a2:d4:1c:42:68:f1:b2:b3:41:5a:ac:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: May 12 19:01:24 2026 GMT
Not After : May 13 19:01:24 2026 GMT
Subject: CN=9a636be2456c7385a8fa16e5695cfc9965bc66d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:36:01:9d:90:4d:be:db:0a:7a:ad:53:a2:
4e:5b:9a:5a:b7:2c:ac:e4:34:58:53:7f:c2:6c:78:
14:20:29:9a:9a:3d:61:88:4f:81:fb:ae:06:cf:4b:
f7:f7:9a:5b:ec:8c:44:cd:df:49:f3:8e:a1:60:15:
da:93:d2:91:51:15:72:a6:30:d1:30:6b:0c:1c:c5:
98:d2:ab:d0:3c:df:06:6c:14:8a:a0:78:91:7d:bb:
30:22:97:66:56:8d:01:6b:8d:9a:52:83:f6:d1:b5:
05:1e:57:b8:93:4d:fa:b3:f1:d7:81:e0:f2:a9:67:
62:78:7b:2f:e2:ca:16:62:e6:4a:97:b6:78:d5:7d:
33:48:77:48:7a:d5:81:70:2d:70:1b:0f:c9:b9:c9:
b5:a4:76:ce:a5:4f:2c:e7:23:60:13:fe:69:a1:bf:
34:1c:66:89:18:1d:3a:fd:86:d9:e2:b6:dd:34:f6:
9a:11:0b:da:93:d8:10:ae:24:b9:f6:ef:53:b2:9f:
87:b6:e4:74:a7:ab:64:3a:6c:e7:71:27:ae:f2:fb:
5d:e8:04:88:64:e6:6a:2f:a3:68:85:f1:fe:fb:a1:
e8:76:c3:f5:10:9a:07:a0:f3:75:e5:72:95:52:5a:
61:b4:8a:db:95:48:ac:eb:d6:4f:cb:42:4f:ba:a7:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:63:6B:E2:45:6C:73:85:A8:FA:16:E5:69:5C:FC:99:65:BC:66:D8
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:9d:87:a1:3e:b7:0e:f1:49:a4:9a:49:78:a5:38:7c:74:
03:4a:e7:32:63:6e:d5:43:93:7c:c7:fa:e0:be:0b:9a:6d:4b:
d5:2e:60:0f:47:c1:9a:a0:f2:b8:44:f5:39:39:e4:09:f6:1f:
36:d7:88:88:61:dc:9d:95:73:d8:84:d8:56:0c:e0:38:22:b3:
6e:bc:99:6b:f9:7e:32:77:09:3a:a6:f1:40:11:c6:16:83:a0:
43:aa:74:b9:2f:d0:db:f0:48:9f:b2:bc:8e:ec:cd:67:15:6d:
94:ff:da:38:21:8e:fa:50:90:a1:43:43:93:c2:16:1b:85:14:
65:de:4b:b5:80:79:9b:25:6c:a6:52:9b:84:a8:94:b5:1b:fc:
c6:f9:ec:46:83:8d:9d:b8:97:be:d5:d3:0c:99:83:56:2e:89:
32:76:6f:a4:e4:ff:94:bc:f2:45:76:9b:11:72:1b:ce:51:7f:
b5:f9:4b:87:8e:f1:4e:d6:e0:36:a2:b1:c7:6e:0a:04:ee:d9:
4a:8f:ce:dc:c4:fc:ba:10:64:8c:62:7a:74:58:68:31:2e:59:
ef:98:f1:68:bc:85:46:c1:e8:e2:20:0c:70:99:79:c1:7c:a4:
47:d2:44:5d:9b:82:02:37:1f:af:71:a2:44:ed:52:11:d8:8d:
f4:e3:6f:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkLojotQcQmjxsrNBWqxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGE0ZDdhZjMzOWJmNTI1NTcyMzkzNzU1ZDFjZmIzM2Nk
ZGI1YWQwHhcNMjYwNTEyMTkwMTI0WhcNMjYwNTEzMTkwMTI0WjAzMTEwLwYDVQQD
Eyg5YTYzNmJlMjQ1NmM3Mzg1YThmYTE2ZTU2OTVjZmM5OTY1YmM2NmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsk2AZ2QTb7bCnqtU6JOW5patyys
5DRYU3/CbHgUICmamj1hiE+B+64Gz0v395pb7IxEzd9J846hYBXak9KRURVypjDR
MGsMHMWY0qvQPN8GbBSKoHiRfbswIpdmVo0Ba42aUoP20bUFHle4k036s/HXgeDy
qWdieHsv4soWYuZKl7Z41X0zSHdIetWBcC1wGw/Jucm1pHbOpU8s5yNgE/5pob80
HGaJGB06/YbZ4rbdNPaaEQvak9gQriS59u9Tsp+HtuR0p6tkOmzncSeu8vtd6ASI
ZOZqL6NohfH++6HodsP1EJoHoPN15XKVUlphtIrblUis69ZPy0JPuqctLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpja+JFbHOFqPoW5Wlc/JllvGbYMB8GA1UdIwQY
MBaAFNCKTXrzOb9SVXI5N1XRz7M83bWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMt
ZDVhMWVhOWVkYjA4LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMtZDVhMWVhOWVkYjA4
LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+mdh6E+
tw7xSaSaSXilOHx0A0rnMmNu1UOTfMf64L4Lmm1L1S5gD0fBmqDyuET1OTnkCfYf
NteIiGHcnZVz2ITYVgzgOCKzbryZa/l+MncJOqbxQBHGFoOgQ6p0uS/Q2/BIn7K8
juzNZxVtlP/aOCGO+lCQoUNDk8IWG4UUZd5LtYB5myVsplKbhKiUtRv8xvnsRoON
nbiXvtXTDJmDVi6JMnZvpOT/lLzyRXabEXIbzlF/tflLh47xTtbgNqKxx24KBO7Z
So/O3MT8uhBkjGJ6dFhoMS5Z75jxaLyFRsHo4iAMcJl5wXykR9JEXZuCAjcfr3Gi
RO1SEdiN9ONv5A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:29 2026 by rpki-client