Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier: gKrlZ0hH1dTzLLncDUrE2XiMMhfMSFZ2qfSnziRZs30=
Subject key identifier: B2:BF:08:97:FB:CA:74:E3:39:7D:55:4B:50:39:05:3B:ED:91:86:3B
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 019D9C2CF23120AE0BC5BC7D8B2CE0AABD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number: 0D23
Signing time: Fri 17 Apr 2026 16:01:24 +0000
Manifest this update: Fri 17 Apr 2026 16:01:24 +0000
Manifest next update: Sat 18 Apr 2026 16:01:24 +0000
Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: fFQtWjW2GEg+atxrQhmSTk9wLXD+d0R4PjYE/Z/sx/E=)
2: cHvhPA5WiP2hlNkTCQAUdFz33aQ.roa (hash: kklG1LK9LOsPTVd1KnUPw3+fJn5429kCodQSEA85c8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:f2:31:20:ae:0b:c5:bc:7d:8b:2c:e0:aa:bd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: Apr 17 16:01:24 2026 GMT
Not After : Apr 18 16:01:24 2026 GMT
Subject: CN=b2bf0897fbca74e3397d554b5039053bed91863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2f:e8:b9:34:b0:64:8a:4c:5d:aa:a6:7e:45:
f1:5e:11:c6:5a:4e:f3:59:59:d5:5c:2d:b6:bb:2f:
01:7e:68:fd:6d:df:bf:62:9a:78:67:32:4c:a8:43:
a7:4b:07:b0:76:4b:32:92:a2:40:35:5e:26:c7:74:
5c:48:c4:30:26:79:86:e6:ba:7d:17:2e:ec:45:92:
e7:67:7b:de:df:e8:ee:a2:8c:25:06:39:f7:fa:b9:
a4:0a:a8:7e:34:20:9c:31:70:a7:19:2c:b2:ca:0d:
15:d5:03:2e:07:8a:e4:33:9d:e9:62:6b:c3:df:d7:
e2:3c:0f:c3:15:9c:99:0e:e1:51:a1:db:6d:51:b0:
fe:3f:93:1c:8e:da:35:93:6a:84:9a:d5:18:69:52:
e6:48:58:24:5a:31:c3:e4:5a:65:b7:f3:e6:8f:ba:
6e:6e:cd:53:e4:40:a8:b6:33:2c:bb:0c:ca:99:3c:
a5:f1:aa:23:a7:a3:73:e0:25:aa:52:40:7f:3c:e9:
cb:53:ba:1c:0d:88:98:71:c8:48:db:0c:e6:f2:25:
40:a4:24:76:15:23:69:2e:29:56:10:d4:59:c7:de:
4c:35:63:31:21:df:ad:18:ad:da:f8:cc:39:e0:20:
10:fa:c4:7d:44:02:fe:24:e1:bd:44:8f:19:33:86:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:08:97:FB:CA:74:E3:39:7D:55:4B:50:39:05:3B:ED:91:86:3B
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:16:f4:f5:4b:90:fb:e9:72:27:81:92:d3:f4:88:c5:f0:47:
a6:f5:12:1c:dd:8b:c3:2b:ac:9a:e7:31:d5:18:8e:91:9b:59:
de:eb:9f:97:0b:80:5f:ff:8d:9d:00:b8:e6:58:be:fd:d1:b2:
72:13:9d:8b:59:3d:72:37:74:be:2d:1d:51:ff:6c:27:ee:ac:
5d:5a:3e:b0:bf:f1:3d:c8:27:bc:0f:fc:fc:d1:08:7f:da:eb:
76:26:9a:75:46:27:2e:1f:e3:66:b5:f0:b2:4b:05:f4:2d:2f:
ce:2e:e6:2f:4a:f9:2c:ab:61:45:e1:3d:87:17:36:67:6f:b9:
71:43:ab:6c:17:8d:a8:3c:b7:c2:83:31:07:e3:0a:d9:c0:d6:
bb:ab:b0:44:22:d0:10:62:ad:9e:b0:6b:6b:3d:1f:34:06:5a:
96:8c:1f:54:17:23:0a:51:d5:30:38:82:df:ba:b6:62:c4:5e:
ce:57:54:73:39:6d:5d:5e:a6:3b:22:86:8e:e9:19:18:b3:a8:
d1:77:17:30:a2:e5:ec:b4:df:fe:09:a0:0e:1a:2e:0b:4a:57:
d7:80:1e:d8:0b:6b:13:b7:01:34:2a:7f:ed:4b:4b:c9:f9:c7:
d8:2e:1a:63:3c:d8:5c:37:d9:cc:45:46:0b:1d:17:90:f1:36:
64:c7:2c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLPIxIK4Lxbx9iyzgqr0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTk2OTYyMTQyNDgwY2JiMWQzODQxMTc3MWViNGZmM2Uz
OTgzOWYwHhcNMjYwNDE3MTYwMTI0WhcNMjYwNDE4MTYwMTI0WjAzMTEwLwYDVQQD
EyhiMmJmMDg5N2ZiY2E3NGUzMzk3ZDU1NGI1MDM5MDUzYmVkOTE4NjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi/ouTSwZIpMXaqmfkXxXhHGWk7z
WVnVXC22uy8Bfmj9bd+/Ypp4ZzJMqEOnSwewdksykqJANV4mx3RcSMQwJnmG5rp9
Fy7sRZLnZ3ve3+juoowlBjn3+rmkCqh+NCCcMXCnGSyyyg0V1QMuB4rkM53pYmvD
39fiPA/DFZyZDuFRodttUbD+P5Mcjto1k2qEmtUYaVLmSFgkWjHD5Fplt/Pmj7pu
bs1T5ECotjMsuwzKmTyl8aojp6Nz4CWqUkB/POnLU7ocDYiYcchI2wzm8iVApCR2
FSNpLilWENRZx95MNWMxId+tGK3a+Mw54CAQ+sR9RAL+JOG9RI8ZM4a7MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK/CJf7ynTjOX1VS1A5BTvtkYY7MB8GA1UdIwQY
MBaAFNHpaWIUJIDLsdOEEXcetP8+OYOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAt
ODhmNjQxNjg4ZTBmLzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAtODhmNjQxNjg4ZTBm
LzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBb09UuQ
++lyJ4GS0/SIxfBHpvUSHN2Lwyusmucx1RiOkZtZ3uuflwuAX/+NnQC45li+/dGy
chOdi1k9cjd0vi0dUf9sJ+6sXVo+sL/xPcgnvA/8/NEIf9rrdiaadUYnLh/jZrXw
sksF9C0vzi7mL0r5LKthReE9hxc2Z2+5cUOrbBeNqDy3woMxB+MK2cDWu6uwRCLQ
EGKtnrBraz0fNAZalowfVBcjClHVMDiC37q2YsRezldUczltXV6mOyKGjukZGLOo
0XcXMKLl7LTf/gmgDhouC0pX14Ae2AtrE7cBNCp/7UtLyfnH2C4aYzzYXDfZzEVG
Cx0XkPE2ZMcscQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:36 2026 by rpki-client