Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier: oCM+CLwMYmwHZSY5m7z5WKV3YXw4xN4wdosv7F20p1s=
Subject key identifier: DE:02:68:B4:24:F4:D7:FE:23:6A:14:93:CA:28:D0:10:86:F2:65:6D
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer: /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial: 01A120534635FBF07FD4517DF92269A99CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number: 0213
Signing time: Fri 09 Oct 2026 11:01:30 +0000
Manifest this update: Fri 09 Oct 2026 11:01:30 +0000
Manifest next update: Sat 10 Oct 2026 11:01:30 +0000
Files and hashes: 1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: 6lbRI+mcbot6ueRiDhCT6qWOFHtzn5IJQ8lJnTnKXmQ=)
2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:53:46:35:fb:f0:7f:d4:51:7d:f9:22:69:a9:9c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Validity
Not Before: Oct 9 11:01:30 2026 GMT
Not After : Oct 10 11:01:30 2026 GMT
Subject: CN=de0268b424f4d7fe236a1493ca28d01086f2656d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:14:98:89:e1:6f:d2:a8:92:a1:46:95:f7:
6a:b1:76:fc:8f:a9:07:ee:63:f3:78:9e:fd:11:6f:
d5:14:1a:86:01:49:13:fc:72:0b:8b:ba:eb:3c:ec:
c8:f6:50:9c:45:30:80:75:bd:16:bf:80:ad:90:e3:
f9:08:14:38:dc:a1:c8:8c:9c:ca:f9:56:2b:14:78:
45:b6:99:b2:e8:19:74:61:52:23:58:c8:ff:43:47:
95:13:c0:1f:57:b9:65:24:8f:f7:b4:72:1b:fc:ca:
44:9b:54:4b:9a:67:cd:1c:ea:b8:a4:08:fd:a2:4b:
70:49:9a:a0:7b:fa:d0:14:f2:71:cd:94:9a:d1:d5:
ce:0a:4d:fd:b4:d0:95:2e:62:fa:58:1b:da:0a:26:
29:f5:1b:fb:c0:80:5b:de:5a:f1:03:0d:ac:0c:97:
32:7e:83:e3:4a:f1:0a:6d:80:44:ec:e5:92:21:70:
47:bf:a2:09:d5:47:e1:b0:72:5f:0f:de:15:97:ab:
cc:4b:af:c4:f9:69:89:94:27:41:a8:b0:ec:91:24:
b7:45:31:6d:4f:f9:b0:57:0d:e7:dc:6e:74:14:16:
0e:0a:0e:eb:42:1e:55:93:6b:3c:63:d1:d6:f3:b1:
fa:09:a5:56:47:75:76:5b:25:c4:fc:2e:ba:22:ec:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:02:68:B4:24:F4:D7:FE:23:6A:14:93:CA:28:D0:10:86:F2:65:6D
X509v3 Authority Key Identifier:
keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cd:47:7f:61:e0:4d:aa:2a:5a:15:1b:f7:7d:d5:9c:51:e6:
2b:c3:18:fb:5a:5c:b4:a4:e7:f2:a6:68:3d:40:8b:4b:aa:7f:
52:cb:50:d6:c6:52:7a:22:c7:09:0c:a2:40:1c:76:96:ca:e0:
ca:6d:41:fe:a7:10:e4:ca:88:e0:bc:50:cb:6b:d5:55:ca:fe:
c3:0d:cb:b7:88:98:ac:d7:cf:a4:8b:2d:be:55:da:28:93:eb:
40:95:8f:80:45:ee:92:ca:15:6c:fa:a1:36:04:57:c0:46:52:
b3:0d:9c:25:d8:ac:19:5f:e9:68:21:d1:22:5a:cb:45:db:92:
de:e3:03:07:2a:27:2e:48:86:ff:81:b4:50:dc:c5:14:58:02:
30:76:51:bc:31:8f:02:d7:40:78:89:61:2a:09:c9:3a:9a:98:
a1:40:c2:c3:dd:59:80:14:9f:29:e0:d5:e6:94:76:f8:d5:9b:
50:b8:27:3f:bc:31:c2:88:74:b2:05:bd:2e:fd:16:97:f1:0c:
a3:9d:bc:33:fa:2c:d7:31:b2:df:31:01:58:0a:9e:cb:43:79:
6f:c6:7c:46:af:08:58:7c:4e:dd:b2:dc:0e:a0:22:7b:e8:8a:
44:6e:32:78:29:90:09:82:28:8d:8c:92:eb:9c:17:73:13:5c:
a7:9e:1f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgU0Y1+/B/1FF9+SJpqZyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmUxZjU4MWNkMTFlMWQwYTJiNjkzYTUzZDNhNWI2ZmRl
ZDRkZmEwHhcNMjYxMDA5MTEwMTMwWhcNMjYxMDEwMTEwMTMwWjAzMTEwLwYDVQQD
EyhkZTAyNjhiNDI0ZjRkN2ZlMjM2YTE0OTNjYTI4ZDAxMDg2ZjI2NTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojEUmInhb9KokqFGlfdqsXb8j6kH
7mPzeJ79EW/VFBqGAUkT/HILi7rrPOzI9lCcRTCAdb0Wv4CtkOP5CBQ43KHIjJzK
+VYrFHhFtpmy6Bl0YVIjWMj/Q0eVE8AfV7llJI/3tHIb/MpEm1RLmmfNHOq4pAj9
oktwSZqge/rQFPJxzZSa0dXOCk39tNCVLmL6WBvaCiYp9Rv7wIBb3lrxAw2sDJcy
foPjSvEKbYBE7OWSIXBHv6IJ1UfhsHJfD94Vl6vMS6/E+WmJlCdBqLDskSS3RTFt
T/mwVw3n3G50FBYOCg7rQh5Vk2s8Y9HW87H6CaVWR3V2WyXE/C66IuwRaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4CaLQk9Nf+I2oUk8oo0BCG8mVtMB8GA1UdIwQY
MBaAFNIuH1gc0R4dCitpOlPTpbb97U36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk0ZldCelJIaDBLSzJrNlU5T2x0djN0VGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNWI0M2EtY2JlNi00YWM1LTk3NTgt
M2ZhMTk0NjIzMTNjLzEvMGk0ZldCelJIaDBLSzJrNlU5T2x0djN0VGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mNWI0M2EtY2JlNi00YWM1LTk3NTgtM2ZhMTk0NjIzMTNj
LzEvMGk0ZldCelJIaDBLSzJrNlU5T2x0djN0VGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABc1Hf2Hg
TaoqWhUb933VnFHmK8MY+1pctKTn8qZoPUCLS6p/UstQ1sZSeiLHCQyiQBx2lsrg
ym1B/qcQ5MqI4LxQy2vVVcr+ww3Lt4iYrNfPpIstvlXaKJPrQJWPgEXuksoVbPqh
NgRXwEZSsw2cJdisGV/paCHRIlrLRduS3uMDByonLkiG/4G0UNzFFFgCMHZRvDGP
AtdAeIlhKgnJOpqYoUDCw91ZgBSfKeDV5pR2+NWbULgnP7wxwoh0sgW9Lv0Wl/EM
o528M/os1zGy3zEBWAqey0N5b8Z8Rq8IWHxO3bLcDqAie+iKRG4yeCmQCYIojYyS
65wXcxNcp54fOQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 19:25:00 2026 by rpki-client