Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier: K+PeR4As7zLaYEKySj2yRLU8thbp5zdjtgSaJgebqXc=
Subject key identifier: C4:FA:00:A2:4B:16:6B:43:FC:DF:F1:6A:25:61:1F:F2:21:CD:14:3E
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial: 01A0CB59462DC12C03A4B35CB280C7760B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number: 19FE
Signing time: Tue 22 Sep 2026 23:00:20 +0000
Manifest this update: Tue 22 Sep 2026 23:00:20 +0000
Manifest next update: Wed 23 Sep 2026 23:00:20 +0000
Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: wcP8lpI6a7K6Vfr195UZJg65sf09IzxPejGTVU8a2Uo=)
2: 1-BUCojs1oWaXAaxy03s5Db9MiJk.roa (hash: tiMBJlRoBCDWpjG2YxYym9l9MTTcSiD5be7NjPI5OEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:46:2d:c1:2c:03:a4:b3:5c:b2:80:c7:76:0b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Validity
Not Before: Sep 22 23:00:20 2026 GMT
Not After : Sep 23 23:00:20 2026 GMT
Subject: CN=c4fa00a24b166b43fcdff16a25611ff221cd143e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:bb:e5:f5:73:be:a9:88:f0:44:29:f2:2a:
11:be:2d:be:18:cf:b1:bf:a7:c1:51:70:28:dd:6e:
e1:8d:a6:a7:fd:19:33:24:54:1d:b3:e5:dc:a2:c5:
ea:bc:49:f7:6e:51:8c:4c:65:a9:45:2f:6b:36:39:
b3:7c:01:a0:f2:9b:c9:de:47:6b:6f:79:78:14:2d:
fe:69:b9:86:dc:93:c8:1b:29:60:ce:ff:da:07:a3:
a9:4d:49:6d:13:1e:dc:b0:9c:eb:f1:91:05:7a:09:
e8:bb:2e:5a:75:bc:ea:a8:e4:fa:58:d0:16:fc:0f:
2c:9d:ef:0a:75:e3:06:5a:98:57:0f:c9:60:f9:66:
1d:5b:48:a2:d2:5d:4f:11:ae:fd:0a:db:4a:a0:b7:
e7:f8:7f:f9:54:2c:42:7b:18:4a:79:52:75:7e:61:
90:3a:f5:45:e4:22:d9:ca:86:bb:37:c6:2a:e1:a0:
0c:26:e7:b5:0f:53:ba:94:75:fd:37:35:fd:a8:13:
3a:5d:5e:53:13:0e:82:08:cb:71:13:8d:d3:db:fd:
43:58:68:b6:8d:62:67:7a:2d:6c:bd:9c:ac:ba:ec:
66:41:c1:8f:46:b5:91:ce:21:1a:25:47:bf:1a:fa:
74:d7:31:cb:02:9a:1e:bc:be:ae:be:5d:e8:38:03:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:00:A2:4B:16:6B:43:FC:DF:F1:6A:25:61:1F:F2:21:CD:14:3E
X509v3 Authority Key Identifier:
keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5d:11:87:80:22:c0:19:d0:3e:98:c7:ea:a8:ee:d8:3a:51:
19:d2:e6:f6:88:c8:69:09:f4:cf:3d:51:19:4d:f9:bd:14:a4:
55:6b:08:5e:f8:b3:e5:4a:1f:31:ac:a5:83:33:51:dc:86:a9:
43:62:dc:bd:c3:33:dc:64:3b:e8:70:4c:58:61:39:0f:b2:20:
4f:34:14:62:58:e0:51:d2:0c:39:78:4c:5f:11:6c:d0:ed:29:
1f:53:60:06:0f:8d:c3:3b:f4:3d:ca:aa:83:77:b9:30:15:e1:
d1:6f:71:6a:d1:4f:98:64:a9:81:a5:7d:59:0b:e8:29:14:d7:
61:c4:03:6c:c8:97:12:25:0b:18:66:00:64:49:a0:38:7f:fb:
fe:7f:b1:ca:c8:e4:98:2e:0a:d8:8e:69:57:b2:f7:aa:c8:1b:
d4:be:de:eb:25:d3:c0:34:23:40:92:97:cb:54:98:66:01:d0:
99:06:fd:85:f0:3d:94:90:d3:e1:e6:78:88:4c:d3:3a:ba:ed:
ac:38:84:b4:38:2c:2b:73:3a:30:1b:a7:ef:16:a7:fc:cf:a6:
55:e2:7f:70:f3:62:e9:1c:c6:71:5f:ff:72:9e:b0:af:30:e3:
75:31:b7:0c:cb:43:14:53:27:0d:ed:18:86:64:ac:24:9c:f8:
66:d7:7f:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWUYtwSwDpLNcsoDHdgteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOGE1NmQ2YTE0ZTY3NjNmYzc3MzNhOGE1Zjk0MzFkYjc1
NjhjYjUwHhcNMjYwOTIyMjMwMDIwWhcNMjYwOTIzMjMwMDIwWjAzMTEwLwYDVQQD
EyhjNGZhMDBhMjRiMTY2YjQzZmNkZmYxNmEyNTYxMWZmMjIxY2QxNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I275fVzvqmI8EQp8ioRvi2+GM+x
v6fBUXAo3W7hjaan/RkzJFQds+XcosXqvEn3blGMTGWpRS9rNjmzfAGg8pvJ3kdr
b3l4FC3+abmG3JPIGylgzv/aB6OpTUltEx7csJzr8ZEFegnouy5adbzqqOT6WNAW
/A8sne8KdeMGWphXD8lg+WYdW0ii0l1PEa79CttKoLfn+H/5VCxCexhKeVJ1fmGQ
OvVF5CLZyoa7N8Yq4aAMJue1D1O6lHX9NzX9qBM6XV5TEw6CCMtxE43T2/1DWGi2
jWJnei1svZysuuxmQcGPRrWRziEaJUe/Gvp01zHLApoevL6uvl3oOAN6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMT6AKJLFmtD/N/xaiVhH/IhzRQ+MB8GA1UdIwQY
MBaAFNGKVtahTmdj/HczqKX5Qx23Voy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAt
Y2VlYzVhNzM5YzcyLzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAtY2VlYzVhNzM5Yzcy
LzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVl0Rh4Ai
wBnQPpjH6qju2DpRGdLm9ojIaQn0zz1RGU35vRSkVWsIXviz5UofMaylgzNR3Iap
Q2LcvcMz3GQ76HBMWGE5D7IgTzQUYljgUdIMOXhMXxFs0O0pH1NgBg+Nwzv0Pcqq
g3e5MBXh0W9xatFPmGSpgaV9WQvoKRTXYcQDbMiXEiULGGYAZEmgOH/7/n+xysjk
mC4K2I5pV7L3qsgb1L7e6yXTwDQjQJKXy1SYZgHQmQb9hfA9lJDT4eZ4iEzTOrrt
rDiEtDgsK3M6MBun7xan/M+mVeJ/cPNi6RzGcV//cp6wrzDjdTG3DMtDFFMnDe0Y
hmSsJJz4Ztd/5A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:33:24 2026 by rpki-client