Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: As1cmnc9bHYTFhnplX5f2QmiuwVmFdlTqlFeKrJtmeM=
Subject key identifier: 38:FB:07:56:97:A1:69:46:3A:A8:98:E1:56:65:58:39:4F:F7:93:DD
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019FAC3ECD22CA943C10D491574E82419F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 03EF
Signing time: Wed 29 Jul 2026 05:00:24 +0000
Manifest this update: Wed 29 Jul 2026 05:00:24 +0000
Manifest next update: Thu 30 Jul 2026 05:00:24 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: 58FOrjSYLH+KQY49Of5asT+hcQrMzAk+4JhZFm4naHo=)
2: IjCH-sqDG187PVVmJq9UXUG58Q8.roa (hash: ZeryMWfiqlc876G1je4RBD22AenRdJNuu5lhGxbMfeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:cd:22:ca:94:3c:10:d4:91:57:4e:82:41:9f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Jul 29 05:00:24 2026 GMT
Not After : Jul 30 05:00:24 2026 GMT
Subject: CN=38fb075697a169463aa898e1566558394ff793dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:b4:fd:59:23:6f:a0:6a:ff:96:36:2c:e8:
87:48:44:18:2e:b2:fc:6f:ea:11:fb:ee:8f:a3:60:
fd:45:02:8f:0f:53:f5:76:e0:28:0d:ec:be:52:d1:
42:86:c9:27:31:90:81:67:36:b2:e9:4f:79:7f:47:
0a:fb:39:86:e9:72:6e:7d:4c:68:34:58:51:80:b8:
46:b8:ed:9d:18:ee:3e:4e:b6:b8:1e:d7:59:06:f9:
0e:71:fb:c4:e7:65:c9:76:48:38:72:21:63:ca:d3:
fb:4d:9d:91:e9:e3:42:7f:ea:ba:7e:ff:a3:d5:db:
d0:a7:02:29:f8:84:1e:52:3b:99:e6:f2:53:a8:93:
55:aa:1c:da:ed:7d:de:85:ea:63:37:e9:02:2a:75:
3f:13:88:61:1a:c8:7b:d5:f6:25:14:c6:bb:29:c2:
8f:04:43:ed:2e:42:77:89:f2:4c:67:07:f0:d6:30:
12:0c:74:c0:ac:e5:da:28:49:6f:0b:d1:e7:a2:8f:
ee:fa:ec:c7:fb:8e:3a:8e:d5:2a:97:1c:62:df:97:
55:35:1c:fc:b7:54:ae:9a:95:58:49:9a:bf:45:e8:
ac:b4:b6:3f:c1:b8:8b:7b:21:e1:82:7d:60:b9:1a:
af:f1:e2:25:b9:d9:2d:41:48:c4:2b:77:f3:d9:0c:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:07:56:97:A1:69:46:3A:A8:98:E1:56:65:58:39:4F:F7:93:DD
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9d:ce:76:ab:68:23:b2:a6:56:53:4a:9b:c5:c1:50:72:3b:
7d:02:3f:ce:e6:cd:bd:ad:b8:5b:6b:0b:48:e8:43:01:1f:5c:
82:36:13:46:4e:0a:b2:d4:50:0d:8d:74:38:48:82:49:e2:47:
18:e1:9f:5d:b1:96:ff:08:f1:b4:56:90:f1:e7:6f:5c:20:13:
9f:ff:12:b3:42:f3:45:8c:fb:8d:a1:b3:eb:f8:56:66:f0:5c:
47:9a:01:c2:66:35:ee:bf:30:6c:77:48:e1:d0:90:4b:ad:f6:
20:f3:53:70:49:6c:73:04:6d:f4:4b:68:e1:75:39:05:97:e8:
f7:3a:c3:4d:45:67:f5:15:f0:3b:25:98:d1:e2:40:f4:bd:3a:
a5:db:6f:34:94:24:56:6b:b6:b6:ae:45:69:35:ad:b5:e7:d1:
1d:18:f4:46:be:28:ec:68:6b:25:e1:b7:3c:06:99:6c:68:e9:
56:bb:be:75:32:7b:e1:16:d5:1b:ef:51:a8:69:b2:2f:da:60:
9f:dc:41:7c:86:27:7b:c3:da:95:5a:bb:24:aa:e2:29:5f:41:
d2:52:a4:dd:f0:5a:94:e2:ab:e6:5f:81:7d:13:3a:77:a0:32:
47:9e:3f:ec:60:9c:cf:2b:86:95:35:63:fd:01:a5:69:98:fb:
22:6e:79:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPs0iypQ8ENSRV06CQZ8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmM1MmQ5NGU2MmVmYTNlYmYyY2NhMTZmNDJkMmU1NjA3
Mzg4ZjAwHhcNMjYwNzI5MDUwMDI0WhcNMjYwNzMwMDUwMDI0WjAzMTEwLwYDVQQD
EygzOGZiMDc1Njk3YTE2OTQ2M2FhODk4ZTE1NjY1NTgzOTRmZjc5M2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhu0/Vkjb6Bq/5Y2LOiHSEQYLrL8
b+oR++6Po2D9RQKPD1P1duAoDey+UtFChsknMZCBZzay6U95f0cK+zmG6XJufUxo
NFhRgLhGuO2dGO4+Tra4HtdZBvkOcfvE52XJdkg4ciFjytP7TZ2R6eNCf+q6fv+j
1dvQpwIp+IQeUjuZ5vJTqJNVqhza7X3ehepjN+kCKnU/E4hhGsh71fYlFMa7KcKP
BEPtLkJ3ifJMZwfw1jASDHTArOXaKElvC9Hnoo/u+uzH+446jtUqlxxi35dVNRz8
t1SumpVYSZq/ReistLY/wbiLeyHhgn1guRqv8eIludktQUjEK3fz2Qz3mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj7B1aXoWlGOqiY4VZlWDlP95PdMB8GA1UdIwQY
MBaAFNC8UtlOYu+j6/LMoW9C0uVgc4jwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zMGQzY2YtOTU1Ny00YmJhLWFiNDIt
YzI2YzE3NTYzMTc0LzEvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zMGQzY2YtOTU1Ny00YmJhLWFiNDItYzI2YzE3NTYzMTc0
LzEvMEx4UzJVNWk3NlByOHN5aGIwTFM1V0J6aVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZ3Odqto
I7KmVlNKm8XBUHI7fQI/zubNva24W2sLSOhDAR9cgjYTRk4KstRQDY10OEiCSeJH
GOGfXbGW/wjxtFaQ8edvXCATn/8Ss0LzRYz7jaGz6/hWZvBcR5oBwmY17r8wbHdI
4dCQS632IPNTcElscwRt9Eto4XU5BZfo9zrDTUVn9RXwOyWY0eJA9L06pdtvNJQk
Vmu2tq5FaTWttefRHRj0Rr4o7GhrJeG3PAaZbGjpVru+dTJ74RbVG+9RqGmyL9pg
n9xBfIYne8PalVq7JKriKV9B0lKk3fBalOKr5l+BfRM6d6AyR54/7GCczyuGlTVj
/QGlaZj7Im55vw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:16 2026 by rpki-client