Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: YnkoFGN/nKy6OYZ76GsWj5/8Oi5hPdhFz5H/cm3aNYM=
Subject key identifier: 7C:C4:F5:FB:98:80:FE:6C:30:D5:F7:F2:AA:60:3E:87:3B:58:73:05
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019DA566E7DCB1040396E8D51CE9EA1D3F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 02E2
Signing time: Sun 19 Apr 2026 11:01:17 +0000
Manifest this update: Sun 19 Apr 2026 11:01:17 +0000
Manifest next update: Mon 20 Apr 2026 11:01:17 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: fMTjAHFS7sgrv35C0HMjAuAMleCnYwbXP9tp1U5wkco=)
2: cSeWyBS9AzYXBpViYHa1BylGQ6s.roa (hash: PrBtaBiVH3j3v9lcfh2nnshhHKh443GU9s9mrNx3uY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:e7:dc:b1:04:03:96:e8:d5:1c:e9:ea:1d:3f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Apr 19 11:01:17 2026 GMT
Not After : Apr 20 11:01:17 2026 GMT
Subject: CN=7cc4f5fb9880fe6c30d5f7f2aa603e873b587305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:23:14:cb:9b:4d:67:b4:37:10:5b:8d:04:
76:7d:a9:85:a1:0a:cc:dc:20:ac:ce:9b:c9:62:2e:
1f:09:72:2f:20:49:b0:cc:ec:88:ac:56:eb:83:a0:
b5:30:e4:73:99:0f:23:96:de:99:2e:25:c0:54:29:
41:ee:62:52:74:38:07:2c:bc:a0:80:8c:81:14:01:
56:f9:79:2e:e0:f6:e7:07:51:4f:59:e2:ea:1b:42:
79:c5:20:ee:53:02:eb:1f:3d:d5:21:f2:8d:94:96:
ec:d6:f4:dc:19:c8:cd:c3:76:84:9f:ea:8e:90:9d:
70:e9:41:36:d3:da:49:6a:3b:c1:95:15:f2:a4:9e:
f8:76:15:07:c5:19:61:14:25:f5:e6:1a:fc:91:bf:
35:6a:2f:27:42:96:9d:2b:bd:42:1a:a9:38:c4:4f:
81:80:0e:cf:76:76:d9:35:7e:f0:11:b1:08:6c:c2:
47:e2:47:3f:43:ac:29:05:cd:53:be:cf:c5:62:64:
2c:41:8d:13:0b:1f:4e:04:0f:e7:75:ef:84:b1:1b:
b0:a1:5e:ea:ec:4c:cc:c4:ab:58:0e:82:aa:ac:a5:
1a:36:04:d2:49:2b:e6:d3:14:fb:e0:db:c1:31:55:
c3:df:50:16:95:ae:49:a0:c7:f8:59:cf:d8:8f:7f:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C4:F5:FB:98:80:FE:6C:30:D5:F7:F2:AA:60:3E:87:3B:58:73:05
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d1:04:0d:46:e1:4c:66:0a:ef:57:a9:70:08:78:cf:8d:51:
92:ab:e6:c9:de:a8:e5:4b:eb:e5:0a:5f:24:ae:d6:c4:22:f0:
10:e8:90:8a:62:9a:84:b9:63:3b:f5:7f:6a:87:91:3f:c2:5c:
1f:e2:7b:34:99:5e:08:c3:9e:32:1b:37:2f:14:36:95:2d:c6:
d6:d9:56:2e:5c:20:03:70:c6:ae:f3:b9:54:08:e9:79:56:3b:
76:63:06:13:bf:f9:82:d8:77:99:5e:e9:f8:aa:a4:fd:74:9c:
09:69:91:2e:9c:f6:bf:c9:c3:77:f0:64:9b:07:e6:6d:03:2c:
db:6e:c9:ee:1e:47:79:9a:0a:ac:db:87:aa:56:f6:57:44:66:
86:71:4f:49:88:60:79:b1:47:ee:b3:fe:83:af:5a:2c:ed:52:
1a:43:eb:a0:67:0a:eb:cf:b4:55:b6:fb:2d:a4:2a:72:50:71:
c1:2a:06:bb:ed:51:ea:a4:e1:53:6d:3b:7f:15:17:1b:78:6e:
d9:65:18:ac:27:c6:d8:c0:43:bb:75:e1:05:be:8d:23:74:d2:
d4:0d:65:1a:a0:a4:e7:53:29:2a:db:13:ff:c7:8a:67:6e:d5:
34:32:21:b4:b5:4c:97:f5:a9:3d:cb:e9:a2:ce:fa:32:64:ce:
c3:a5:b9:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lZufcsQQDlujVHOnqHT+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmM1MmQ5NGU2MmVmYTNlYmYyY2NhMTZmNDJkMmU1NjA3
Mzg4ZjAwHhcNMjYwNDE5MTEwMTE3WhcNMjYwNDIwMTEwMTE3WjAzMTEwLwYDVQQD
Eyg3Y2M0ZjVmYjk4ODBmZTZjMzBkNWY3ZjJhYTYwM2U4NzNiNTg3MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNEjFMubTWe0NxBbjQR2famFoQrM
3CCszpvJYi4fCXIvIEmwzOyIrFbrg6C1MORzmQ8jlt6ZLiXAVClB7mJSdDgHLLyg
gIyBFAFW+Xku4PbnB1FPWeLqG0J5xSDuUwLrHz3VIfKNlJbs1vTcGcjNw3aEn+qO
kJ1w6UE209pJajvBlRXypJ74dhUHxRlhFCX15hr8kb81ai8nQpadK71CGqk4xE+B
gA7PdnbZNX7wEbEIbMJH4kc/Q6wpBc1Tvs/FYmQsQY0TCx9OBA/nde+EsRuwoV7q
7EzMxKtYDoKqrKUaNgTSSSvm0xT74NvBMVXD31AWla5JoMf4Wc/Yj3/V2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzE9fuYgP5sMNX38qpgPoc7WHMFMB8GA1UdIwQY
MBaAFNC8UtlOYu+j6/LMoW9C0uVgc4jwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zMGQzY2YtOTU1Ny00YmJhLWFiNDIt
YzI2YzE3NTYzMTc0LzEvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zMGQzY2YtOTU1Ny00YmJhLWFiNDItYzI2YzE3NTYzMTc0
LzEvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9EEDUbh
TGYK71epcAh4z41Rkqvmyd6o5Uvr5QpfJK7WxCLwEOiQimKahLljO/V/aoeRP8Jc
H+J7NJleCMOeMhs3LxQ2lS3G1tlWLlwgA3DGrvO5VAjpeVY7dmMGE7/5gth3mV7p
+Kqk/XScCWmRLpz2v8nDd/BkmwfmbQMs227J7h5HeZoKrNuHqlb2V0RmhnFPSYhg
ebFH7rP+g69aLO1SGkProGcK68+0Vbb7LaQqclBxwSoGu+1R6qThU207fxUXG3hu
2WUYrCfG2MBDu3XhBb6NI3TS1A1lGqCk51MpKtsT/8eKZ27VNDIhtLVMl/WpPcvp
os76MmTOw6W5RA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:14 2026 by rpki-client