
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: mptuPuBtqMWkOH/VCpmWPK9b2pqQIVo1b4PJEV8xVvM=
Subject key identifier: 2D:F0:4F:D6:C1:94:D6:BE:67:1F:78:84:C7:C2:E8:34:7D:66:E2:13
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 01A0C21F7C8EAEB71C7CE946F7B15CCE1C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1550
Signing time: Mon 21 Sep 2026 04:00:38 +0000
Manifest this update: Mon 21 Sep 2026 04:00:38 +0000
Manifest next update: Tue 22 Sep 2026 04:00:38 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: PtsWP7AOLBWPetINRLV2JTw9jG1Scj1gm9EjIDWGdHg=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:7c:8e:ae:b7:1c:7c:e9:46:f7:b1:5c:ce:1c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Sep 21 04:00:38 2026 GMT
Not After : Sep 22 04:00:38 2026 GMT
Subject: CN=2df04fd6c194d6be671f7884c7c2e8347d66e213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:56:86:67:aa:3c:eb:a8:67:d2:90:c1:f8:
66:4c:fc:6e:96:e8:14:e6:eb:2a:35:cb:25:e5:9c:
96:cf:85:16:f0:88:04:92:1f:d6:74:c6:c2:11:6a:
52:ae:b0:6d:b0:ae:03:a2:99:e5:54:e1:28:b1:48:
25:00:a3:34:2d:ef:d2:fb:5f:3a:d4:1c:ed:a0:8e:
4c:70:c0:f8:e6:44:dd:e0:d5:b3:41:93:0a:a1:ec:
d5:56:0a:b8:ce:0a:11:23:3f:d2:44:cc:94:18:a1:
42:e6:3f:87:2a:08:7c:34:f7:89:a8:6a:89:3b:92:
9e:4a:bc:5a:48:19:23:75:61:1d:70:23:48:b5:e7:
31:2c:09:32:32:e8:69:e4:f3:59:4f:ea:ea:87:a6:
30:3d:b8:ff:d6:17:aa:0b:9b:b0:be:c3:e0:a7:95:
53:d5:b8:a6:f9:ec:03:94:6a:70:0b:57:01:96:e9:
ac:ff:5c:e9:38:67:82:40:ee:eb:17:cc:f3:c6:49:
2c:0a:66:a6:8d:73:af:30:65:54:21:01:25:dc:01:
6a:61:f9:7f:07:c9:4b:2a:b6:39:45:93:03:23:d7:
e4:63:16:9d:38:34:43:a4:ab:70:4a:0b:ab:de:21:
25:80:a1:06:5f:ce:27:b1:b3:b1:2e:63:18:cc:51:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:4F:D6:C1:94:D6:BE:67:1F:78:84:C7:C2:E8:34:7D:66:E2:13
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:49:29:92:67:f5:22:55:e1:62:04:d4:5d:2e:aa:fd:da:45:
83:f0:14:91:52:c1:57:f1:fc:61:63:7f:40:74:c1:70:73:49:
59:78:d4:8e:d7:01:23:9f:59:8a:23:a7:fe:d2:30:0f:c6:d2:
11:ba:4d:94:b1:c7:42:22:94:8f:14:15:27:dd:d3:70:30:70:
0e:e5:91:69:14:3f:3b:9d:46:50:9c:f2:09:fc:a6:15:d9:9b:
f0:b4:dc:dc:72:bd:63:67:5a:b3:e3:99:e5:19:b0:4a:ca:00:
68:a6:52:97:bb:40:23:54:2c:1a:7f:27:4b:c2:d6:d5:0f:dd:
8e:59:1b:f3:6e:1b:4c:2d:38:b1:1f:a8:b8:c7:29:8c:e4:ea:
7b:6a:c3:e5:ac:72:a7:10:32:d7:ca:a9:9f:53:4a:41:8a:23:
a6:67:ce:76:82:b7:00:06:f4:49:ca:9e:fe:b4:10:c1:9b:67:
65:28:44:b3:59:e7:7f:f8:2e:38:92:d1:ae:55:16:35:d6:fa:
eb:e8:a2:cb:26:4a:d5:2e:46:05:6a:98:fe:8f:39:b7:58:41:
80:42:10:77:f5:b2:28:71:54:fe:2b:23:f9:ac:f0:db:c4:11:
13:38:33:43:fa:96:bd:5b:b9:d6:4e:0a:6c:84:1f:c4:0b:c3:
79:c3:97:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCH3yOrrccfOlG97FczhxvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjRmYTgwNzU4NzUzYjI0M2EyMTY1ZWRkZWE3NWRiZWVl
ODI2YzQwHhcNMjYwOTIxMDQwMDM4WhcNMjYwOTIyMDQwMDM4WjAzMTEwLwYDVQQD
EygyZGYwNGZkNmMxOTRkNmJlNjcxZjc4ODRjN2MyZTgzNDdkNjZlMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlRWhmeqPOuoZ9KQwfhmTPxulugU
5usqNcsl5ZyWz4UW8IgEkh/WdMbCEWpSrrBtsK4DopnlVOEosUglAKM0Le/S+186
1BztoI5McMD45kTd4NWzQZMKoezVVgq4zgoRIz/SRMyUGKFC5j+HKgh8NPeJqGqJ
O5KeSrxaSBkjdWEdcCNItecxLAkyMuhp5PNZT+rqh6YwPbj/1heqC5uwvsPgp5VT
1bim+ewDlGpwC1cBlums/1zpOGeCQO7rF8zzxkksCmamjXOvMGVUIQEl3AFqYfl/
B8lLKrY5RZMDI9fkYxadODRDpKtwSgur3iElgKEGX84nsbOxLmMYzFHvlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3wT9bBlNa+Zx94hMfC6DR9ZuITMB8GA1UdIwQY
MBaAFND0+oB1h1OyQ6IWXt3qddvu6CbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMt
NzJhMWYzNzcxOWJiLzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMtNzJhMWYzNzcxOWJi
LzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUkpkmf1
IlXhYgTUXS6q/dpFg/AUkVLBV/H8YWN/QHTBcHNJWXjUjtcBI59ZiiOn/tIwD8bS
EbpNlLHHQiKUjxQVJ93TcDBwDuWRaRQ/O51GUJzyCfymFdmb8LTc3HK9Y2das+OZ
5RmwSsoAaKZSl7tAI1QsGn8nS8LW1Q/djlkb824bTC04sR+ouMcpjOTqe2rD5axy
pxAy18qpn1NKQYojpmfOdoK3AAb0Scqe/rQQwZtnZShEs1nnf/guOJLRrlUWNdb6
6+iiyyZK1S5GBWqY/o85t1hBgEIQd/WyKHFU/isj+azw28QREzgzQ/qWvVu51k4K
bIQfxAvDecOXpw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:25:30 2026 by rpki-client