Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: 609MCPNNC3zxG76hVFpXKZWeJ1LTRGDxQy+lwEWIa0E=
Subject key identifier: 5B:10:EC:C3:49:41:50:60:C0:17:DE:F3:30:34:24:92:C4:80:4B:27
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 01A0C2C48E22EBDC8596CE46C5C7351A7ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0EC6
Signing time: Mon 21 Sep 2026 07:00:56 +0000
Manifest this update: Mon 21 Sep 2026 07:00:56 +0000
Manifest next update: Tue 22 Sep 2026 07:00:56 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: GyJBeKfrCWrkMCKO/7TEy8pII8xyWbZSIwrtwtIi08U=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:8e:22:eb:dc:85:96:ce:46:c5:c7:35:1a:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Sep 21 07:00:56 2026 GMT
Not After : Sep 22 07:00:56 2026 GMT
Subject: CN=5b10ecc349415060c017def330342492c4804b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:26:33:4f:26:44:40:31:15:45:6b:86:47:
09:87:a2:fb:a2:dd:f0:54:9e:af:81:27:42:d4:01:
62:2b:4a:6d:a4:51:84:66:55:e5:0a:e7:44:61:95:
ce:c0:2d:16:45:e1:21:ee:51:71:b1:a7:08:23:f1:
7c:0d:20:a6:9d:e7:a5:82:9c:5d:5e:71:6c:7a:1e:
6f:fa:4c:5a:7e:06:15:0f:3e:64:cb:1d:60:2a:e4:
1b:c3:ee:de:1b:7c:39:69:43:48:7c:0c:4b:04:5f:
43:9d:de:26:74:b6:24:d4:6c:4a:7f:ff:c9:e0:56:
e3:f9:1d:f2:a7:71:26:d2:16:b4:8f:e1:3a:33:3b:
67:31:e8:ca:47:df:1e:24:90:25:5b:8f:f1:75:71:
06:c6:a8:fd:32:f2:fc:f6:db:67:04:76:c6:97:cd:
12:08:e5:58:da:60:c3:7a:ee:d2:04:36:c8:3a:ac:
e4:fb:1e:0a:ed:51:ca:3a:a4:ff:04:aa:4d:5d:8b:
80:a4:01:bd:5b:a7:5c:87:a3:90:b7:20:a5:fa:27:
37:71:f0:01:33:67:c5:59:b9:af:f6:24:ea:8e:d3:
3d:56:76:bb:ae:8b:72:c8:37:81:be:a3:87:39:1d:
77:5b:00:48:a0:b5:3f:90:8b:d7:16:31:7c:8c:03:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:EC:C3:49:41:50:60:C0:17:DE:F3:30:34:24:92:C4:80:4B:27
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f3:9a:bd:a0:dd:00:44:77:0a:0a:75:8f:8d:e0:d7:de:de:
40:ec:6c:58:d6:03:d0:7d:83:3a:b4:05:e0:b0:45:97:74:e4:
0b:ee:e7:72:49:71:52:cd:df:26:97:be:e5:e6:1b:e1:15:44:
08:0b:ee:a7:31:44:f6:a8:f2:38:b7:37:f7:89:6a:45:06:ac:
a0:2b:18:3f:91:49:6d:05:ed:01:88:3e:95:24:32:fa:c4:7b:
e6:f7:d1:90:8f:28:c9:c7:ff:df:81:04:fa:96:a4:f2:96:ab:
09:c8:68:17:00:e5:7c:24:c7:5a:27:c5:d7:cf:f7:81:4a:c4:
d3:f6:8c:56:46:56:e2:d9:72:a8:e5:99:41:dc:0d:bc:e7:d8:
e2:93:f2:e7:51:bd:e3:b0:66:74:a3:01:bb:c0:9e:10:d5:f2:
6b:80:e6:ce:76:d0:30:82:0a:87:7f:16:8f:67:0f:bf:ee:b4:
31:b1:39:25:bd:a9:d2:19:fe:d5:61:49:b9:6c:3c:28:9c:d2:
81:eb:33:5a:68:c1:5c:d3:78:57:62:a9:8a:be:2e:c2:15:5f:
3c:24:39:7b:a1:ca:d3:37:20:19:8d:68:e5:4c:33:d7:14:83:
73:c7:f3:0f:7c:2e:8a:10:c5:ed:4c:63:6d:81:0b:e2:5d:d0:
ff:6d:b5:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxI4i69yFls5Gxcc1Gnq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1
YmJjZGQwHhcNMjYwOTIxMDcwMDU2WhcNMjYwOTIyMDcwMDU2WjAzMTEwLwYDVQQD
Eyg1YjEwZWNjMzQ5NDE1MDYwYzAxN2RlZjMzMDM0MjQ5MmM0ODA0YjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8UmM08mREAxFUVrhkcJh6L7ot3w
VJ6vgSdC1AFiK0ptpFGEZlXlCudEYZXOwC0WReEh7lFxsacII/F8DSCmneelgpxd
XnFseh5v+kxafgYVDz5kyx1gKuQbw+7eG3w5aUNIfAxLBF9Dnd4mdLYk1GxKf//J
4Fbj+R3yp3Em0ha0j+E6MztnMejKR98eJJAlW4/xdXEGxqj9MvL89ttnBHbGl80S
COVY2mDDeu7SBDbIOqzk+x4K7VHKOqT/BKpNXYuApAG9W6dch6OQtyCl+ic3cfAB
M2fFWbmv9iTqjtM9Vna7rotyyDeBvqOHOR13WwBIoLU/kIvXFjF8jAMoMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsQ7MNJQVBgwBfe8zA0JJLEgEsnMB8GA1UdIwQY
MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt
YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw
LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyvOavaDd
AER3Cgp1j43g197eQOxsWNYD0H2DOrQF4LBFl3TkC+7ncklxUs3fJpe+5eYb4RVE
CAvupzFE9qjyOLc394lqRQasoCsYP5FJbQXtAYg+lSQy+sR75vfRkI8oycf/34EE
+pak8parCchoFwDlfCTHWifF18/3gUrE0/aMVkZW4tlyqOWZQdwNvOfY4pPy51G9
47BmdKMBu8CeENXya4DmznbQMIIKh38Wj2cPv+60MbE5Jb2p0hn+1WFJuWw8KJzS
geszWmjBXNN4V2Kpir4uwhVfPCQ5e6HK0zcgGY1o5Uwz1xSDc8fzD3wuihDF7Uxj
bYEL4l3Q/221tg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:22:31 2026 by rpki-client