Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
File: 01VdufbNy92wUqRTSO8Nam1bwcE.mft (raw, json)
Hash identifier: y2itW6V2L9VknzliUx5B8OzNtmw4v2JIwFEJURe/FNw=
Subject key identifier: AE:A5:89:BB:74:5D:AD:01:C5:BB:4A:D0:F1:3E:9B:89:3E:C7:CB:44
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Certificate issuer: /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial: 019FAA87A4BEB3FFD138949339FDB6D60D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
Manifest number: 012B
Signing time: Tue 28 Jul 2026 21:00:43 +0000
Manifest this update: Tue 28 Jul 2026 21:00:43 +0000
Manifest next update: Wed 29 Jul 2026 21:00:43 +0000
Files and hashes: 1: 01VdufbNy92wUqRTSO8Nam1bwcE.crl (hash: WyoZ0qTkzNg52acIXnpvlqz7hTHO6WluLvPPZ7hJPp0=)
2: szLd58h9ss7j2xagBuMXF5WP0yk.roa (hash: 8ob8pb7Gxq2C51p/RiIuL1KyizGRkOlyyDDvo7AtTm0=)
3: uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (hash: 5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:a4:be:b3:ff:d1:38:94:93:39:fd:b6:d6:0d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Validity
Not Before: Jul 28 21:00:43 2026 GMT
Not After : Jul 29 21:00:43 2026 GMT
Subject: CN=aea589bb745dad01c5bb4ad0f13e9b893ec7cb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:ea:04:be:6b:2b:41:ec:21:bc:39:4a:be:
83:2a:84:00:8e:16:e9:58:db:87:98:e3:e6:ba:1d:
be:18:ff:59:b0:bf:af:a1:b1:94:5c:0f:a3:e3:c6:
ce:4f:ca:22:1a:f7:65:a5:1c:7a:27:4b:72:c0:06:
52:40:d5:b1:02:d4:fc:33:0a:2b:46:a2:22:34:ca:
7c:e8:a9:bd:a6:c8:f7:89:17:d9:2f:3c:76:65:f9:
b7:4c:34:6d:da:fb:bd:bc:c7:f1:80:4e:8d:a2:ed:
75:2a:c8:8d:b7:fb:b5:87:7f:0d:d9:ba:40:93:33:
9a:8d:7e:f9:eb:23:5a:b7:4f:93:06:66:bf:7e:55:
31:6c:08:d2:4a:0d:b4:78:49:d4:91:00:2b:14:d7:
e7:62:e1:5c:da:c9:b6:e7:0f:84:58:cd:45:89:32:
63:48:57:94:9b:c0:3f:db:59:24:5f:b5:17:9a:9a:
7f:6e:d9:94:aa:b7:c9:5e:e5:c8:c8:e6:02:a6:d8:
d2:11:7a:dd:cc:55:fc:10:71:53:d6:93:15:2b:4f:
c3:7c:67:de:ac:c8:a2:16:3f:46:88:9f:05:60:0a:
13:1d:2e:3f:ae:b0:26:76:a8:46:4d:17:3f:74:54:
9d:de:dc:6c:c6:01:0a:6a:4f:9a:7a:00:8c:23:41:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A5:89:BB:74:5D:AD:01:C5:BB:4A:D0:F1:3E:9B:89:3E:C7:CB:44
X509v3 Authority Key Identifier:
keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3c:49:77:a4:58:35:b4:0e:05:4c:ed:6b:5d:c6:d8:77:e7:
8d:9c:35:51:4d:f7:5a:7e:dc:16:83:03:bb:54:02:be:d0:83:
9e:51:bb:0d:14:6d:91:dd:45:88:dc:7a:ae:03:d8:78:51:ed:
5b:cf:be:be:71:43:d8:c2:81:9e:fb:de:3c:82:2e:5f:d3:53:
85:d8:48:83:dc:30:d6:32:b7:2e:e4:95:03:c7:b1:0b:ee:14:
92:96:53:21:07:65:26:de:df:bf:a9:e5:b2:b8:b5:45:a3:aa:
9a:83:d6:fe:c0:e5:30:cd:96:79:b8:41:e0:2c:fb:83:9a:38:
0b:f1:c1:6d:ac:3b:88:b1:54:d5:02:13:53:6d:3d:be:50:97:
f1:19:a4:d3:8a:24:2f:3b:20:a1:09:cd:6f:d3:51:1d:07:08:
87:c8:7c:c2:9f:c3:72:15:0e:9a:45:a1:9b:50:4b:ee:27:05:
18:f1:6a:8e:72:92:14:e5:75:c4:7c:5c:2c:d7:dc:f5:8e:4e:
6a:0c:38:3f:8d:f8:23:ea:28:53:88:41:88:e0:01:95:74:65:
b6:9c:d1:52:f0:86:90:a8:71:38:30:f2:12:48:dd:3e:a1:65:
74:56:c7:14:7c:88:03:5e:83:6e:bb:4b:17:c2:f5:fb:33:8d:
1f:56:dd:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh6S+s//ROJSTOf221g1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTU1ZGI5ZjZjZGNiZGRiMDUyYTQ1MzQ4ZWYwZDZhNmQ1
YmMxYzEwHhcNMjYwNzI4MjEwMDQzWhcNMjYwNzI5MjEwMDQzWjAzMTEwLwYDVQQD
EyhhZWE1ODliYjc0NWRhZDAxYzViYjRhZDBmMTNlOWI4OTNlYzdjYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue7qBL5rK0HsIbw5Sr6DKoQAjhbp
WNuHmOPmuh2+GP9ZsL+vobGUXA+j48bOT8oiGvdlpRx6J0tywAZSQNWxAtT8Mwor
RqIiNMp86Km9psj3iRfZLzx2Zfm3TDRt2vu9vMfxgE6Nou11KsiNt/u1h38N2bpA
kzOajX756yNat0+TBma/flUxbAjSSg20eEnUkQArFNfnYuFc2sm25w+EWM1FiTJj
SFeUm8A/21kkX7UXmpp/btmUqrfJXuXIyOYCptjSEXrdzFX8EHFT1pMVK0/DfGfe
rMiiFj9GiJ8FYAoTHS4/rrAmdqhGTRc/dFSd3txsxgEKak+aegCMI0FHeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6libt0Xa0BxbtK0PE+m4k+x8tEMB8GA1UdIwQY
MBaAFNNVXbn2zcvdsFKkU0jvDWptW8HBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFWZHVmYk55OTJ3VXFSVFNPOE5hbTFid2NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zYWRlMzEtNGFjMS00MzVlLWI0ZTUt
M2FkMTNjNjAzZWEyLzEvMDFWZHVmYk55OTJ3VXFSVFNPOE5hbTFid2NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zYWRlMzEtNGFjMS00MzVlLWI0ZTUtM2FkMTNjNjAzZWEy
LzEvMDFWZHVmYk55OTJ3VXFSVFNPOE5hbTFid2NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDxJd6RY
NbQOBUzta13G2HfnjZw1UU33Wn7cFoMDu1QCvtCDnlG7DRRtkd1FiNx6rgPYeFHt
W8++vnFD2MKBnvvePIIuX9NThdhIg9ww1jK3LuSVA8exC+4UkpZTIQdlJt7fv6nl
sri1RaOqmoPW/sDlMM2WebhB4Cz7g5o4C/HBbaw7iLFU1QITU209vlCX8Rmk04ok
LzsgoQnNb9NRHQcIh8h8wp/DchUOmkWhm1BL7icFGPFqjnKSFOV1xHxcLNfc9Y5O
agw4P434I+ooU4hBiOABlXRltpzRUvCGkKhxODDyEkjdPqFldFbHFHyIA16DbrtL
F8L1+zONH1bdBA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:37 2026 by rpki-client