Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: W7xfROf9miQvjPlaYmKGbPUH57i6bHM9V5itMmG7QK0=
Subject key identifier: 81:2E:C8:E8:85:CE:51:43:B3:C8:9E:E9:1D:CD:70:1C:90:B5:25:84
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019CAA592DE51E01AFFBA94D7C8DA20C5283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0E33
Signing time: Sun 01 Mar 2026 17:01:37 +0000
Manifest this update: Sun 01 Mar 2026 17:01:37 +0000
Manifest next update: Mon 02 Mar 2026 17:01:37 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: xoLlpmWD3+UCWMc4Sdc3zidwLkLw6NRMCAx+g+feaxc=)
2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:2d:e5:1e:01:af:fb:a9:4d:7c:8d:a2:0c:52:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Mar 1 17:01:37 2026 GMT
Not After : Mar 2 17:01:37 2026 GMT
Subject: CN=812ec8e885ce5143b3c89ee91dcd701c90b52584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:3a:a6:29:ec:08:3e:7b:1d:d3:39:40:eb:
c4:31:24:34:03:95:df:7f:d5:fc:c8:74:55:61:08:
17:c4:ed:9b:09:59:43:c5:20:92:9e:f1:09:65:36:
2a:fb:f2:96:25:e7:df:19:b1:a1:a0:d3:fd:3b:63:
a4:8a:a2:82:f2:76:e4:33:ab:66:8c:c8:26:c9:59:
bf:2c:a9:a6:74:dd:27:d1:d9:5c:0f:b1:a8:7f:a5:
98:56:06:55:9f:86:16:f1:87:d0:8e:19:74:fa:fd:
ba:cd:f5:24:98:7c:16:35:d5:59:2d:21:8f:76:c4:
5a:cd:fe:fc:27:9d:7e:0b:cb:96:83:c5:66:b4:e1:
b3:2a:31:5d:4b:6f:d9:db:d0:85:1b:fe:ec:20:8c:
94:49:cf:f5:9c:19:07:71:64:29:dc:a5:92:6e:d5:
e5:28:44:54:43:06:f3:e8:a9:63:ad:75:30:9b:70:
9e:e2:03:19:ae:58:38:ef:05:54:4b:d0:5c:59:42:
5e:0d:c0:54:fc:a7:d7:89:97:f6:b2:f5:95:09:f5:
b7:d2:0e:4a:d6:f1:ee:82:70:e0:87:4f:a1:d8:79:
ad:61:81:48:42:98:3b:68:fc:36:72:c2:a2:e8:d0:
ab:38:60:fa:41:94:49:67:29:ba:9c:a0:78:10:a7:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2E:C8:E8:85:CE:51:43:B3:C8:9E:E9:1D:CD:70:1C:90:B5:25:84
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4e:f2:15:99:4c:e3:ea:cb:8b:fc:b7:d0:df:3f:70:b9:f2:
45:44:ae:15:f4:b4:68:9b:85:8e:e0:a4:28:af:ff:23:96:9e:
b4:5f:32:c6:7c:33:67:c1:eb:16:f8:3b:79:fa:d9:7a:60:42:
22:15:3e:6b:f7:17:fd:f0:a2:12:43:3f:71:d2:d2:d5:c9:02:
a9:27:65:3c:3f:8c:66:8e:49:a5:f5:96:61:1d:b8:7c:ff:9a:
8d:ed:53:51:8b:c5:d7:57:90:16:00:e3:50:14:da:f7:09:de:
df:24:dc:01:7b:a9:ba:d0:08:ec:fa:d5:3d:e8:1f:e0:de:85:
4e:93:2d:24:c2:fb:bc:27:17:33:b8:f5:90:1e:cc:ad:ef:48:
03:ce:f3:87:0c:b5:f9:c9:79:1d:9a:28:0f:9b:2b:04:cb:f4:
6c:f9:e1:0c:95:3b:d5:75:67:70:85:7a:a9:2c:a2:9e:ba:d2:
fc:6f:d6:92:86:6e:ad:76:ea:80:b1:e3:45:9b:59:0b:4f:29:
ac:71:81:44:7d:d6:a2:ec:c2:b5:4b:47:fe:0e:74:37:65:c7:
77:1a:73:3b:16:9a:c1:6c:53:0e:4e:44:98:da:43:a5:f8:19:
71:4b:74:78:32:dc:6c:8c:95:21:c5:98:22:5c:92:7a:83:9a:
12:ed:bd:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWS3lHgGv+6lNfI2iDFKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjdmYzhiMDU4ZDFmNDk5OTAxYThjMmY4NmU2MmFlOTUx
MzY3OTcwHhcNMjYwMzAxMTcwMTM3WhcNMjYwMzAyMTcwMTM3WjAzMTEwLwYDVQQD
Eyg4MTJlYzhlODg1Y2U1MTQzYjNjODllZTkxZGNkNzAxYzkwYjUyNTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvQ6pinsCD57HdM5QOvEMSQ0A5Xf
f9X8yHRVYQgXxO2bCVlDxSCSnvEJZTYq+/KWJeffGbGhoNP9O2OkiqKC8nbkM6tm
jMgmyVm/LKmmdN0n0dlcD7Gof6WYVgZVn4YW8YfQjhl0+v26zfUkmHwWNdVZLSGP
dsRazf78J51+C8uWg8VmtOGzKjFdS2/Z29CFG/7sIIyUSc/1nBkHcWQp3KWSbtXl
KERUQwbz6KljrXUwm3Ce4gMZrlg47wVUS9BcWUJeDcBU/KfXiZf2svWVCfW30g5K
1vHugnDgh0+h2HmtYYFIQpg7aPw2csKi6NCrOGD6QZRJZym6nKB4EKd5RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEuyOiFzlFDs8ie6R3NcByQtSWEMB8GA1UdIwQY
MBaAFNC3/IsFjR9JmQGowvhuYq6VE2eXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85Y2IzNGEtYzM3Mi00ODJlLTgxY2Et
OGY2MzljNWExYTcyLzEvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85Y2IzNGEtYzM3Mi00ODJlLTgxY2EtOGY2MzljNWExYTcy
LzEvMExmOGl3V05IMG1aQWFqQy1HNWlycFVUWjVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl07yFZlM
4+rLi/y30N8/cLnyRUSuFfS0aJuFjuCkKK//I5aetF8yxnwzZ8HrFvg7efrZemBC
IhU+a/cX/fCiEkM/cdLS1ckCqSdlPD+MZo5JpfWWYR24fP+aje1TUYvF11eQFgDj
UBTa9wne3yTcAXuputAI7PrVPegf4N6FTpMtJML7vCcXM7j1kB7Mre9IA87zhwy1
+cl5HZooD5srBMv0bPnhDJU71XVncIV6qSyinrrS/G/WkoZurXbqgLHjRZtZC08p
rHGBRH3WouzCtUtH/g50N2XHdxpzOxaawWxTDk5EmNpDpfgZcUt0eDLcbIyVIcWY
IlySeoOaEu29Ow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:33 2026 by rpki-client