Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File: D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier: 4DMga5O30dtccOOY2vo3a06mmajutqFnk1/MJkP9kWs=
Subject key identifier: 4B:2F:72:BA:4E:10:16:92:BF:A5:1D:A6:B3:BC:7B:67:2E:0F:FC:BD
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer: /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial: 01A0C3D6E64209E45EA7CC45490CBC74BC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number: 052B
Signing time: Mon 21 Sep 2026 12:00:35 +0000
Manifest this update: Mon 21 Sep 2026 12:00:35 +0000
Manifest next update: Tue 22 Sep 2026 12:00:35 +0000
Files and hashes: 1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: 5g7MSbdboMFk0XnN/P6JTMQbvGWAUM67bJEMHU9yx1s=)
2: tZXFhCda9QhyEl0l4dUGgw3-aFI.asa (hash: ojPBN8xQtJDNsaPuMNz7OBORmpao2SEolkZFks4hcs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:e6:42:09:e4:5e:a7:cc:45:49:0c:bc:74:bc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Validity
Not Before: Sep 21 12:00:35 2026 GMT
Not After : Sep 22 12:00:35 2026 GMT
Subject: CN=4b2f72ba4e101692bfa51da6b3bc7b672e0ffcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:f9:c7:8d:82:50:85:d3:74:94:f2:13:71:
02:c1:f1:1a:6e:c9:48:a2:a1:50:8e:91:96:60:2e:
6f:3c:b2:77:c4:48:fc:7e:cc:3d:c6:27:cf:dc:5a:
ee:82:d5:2b:d6:d0:c4:33:05:07:e4:46:c2:64:17:
4d:5c:69:c2:b0:36:6f:ab:dd:9d:55:92:0f:ec:d0:
b6:0d:8a:1c:21:73:08:1e:4a:31:39:80:ba:b7:21:
25:91:28:a1:de:fd:0c:8b:3d:89:6c:34:b5:17:7e:
44:d5:35:ec:4c:17:5b:25:5a:5b:68:f6:ab:2b:78:
57:89:3e:ef:4c:ec:a6:f7:50:b4:5c:cf:f3:be:25:
4d:be:17:ea:e4:2a:73:81:5c:6f:e9:5f:94:4f:9f:
91:ce:de:ed:f1:ed:ee:7f:53:ed:92:e7:c6:0b:5d:
5e:cc:94:40:68:b0:61:73:3c:d5:20:f3:4d:bf:7e:
54:4b:eb:d7:75:07:2b:84:91:cb:26:0d:ec:51:b8:
0a:4f:8b:af:2c:70:14:44:2e:0c:94:c4:6f:4c:b6:
7c:7f:2a:f5:b9:5c:c3:ec:94:aa:af:9b:71:2b:3a:
79:2a:7c:0b:65:54:57:66:65:2f:88:e4:39:ef:9e:
ff:6f:e4:aa:6a:7e:94:65:15:0a:af:2d:7a:ee:5f:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2F:72:BA:4E:10:16:92:BF:A5:1D:A6:B3:BC:7B:67:2E:0F:FC:BD
X509v3 Authority Key Identifier:
keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3c:56:76:0e:44:9e:97:4d:62:71:28:1e:34:ca:67:d5:1a:
72:6f:03:de:fc:b3:38:7a:d6:d5:b5:66:22:89:64:42:0c:ff:
9a:f1:70:8f:6a:82:00:49:e7:14:11:65:f7:ec:8f:a8:55:0b:
9d:13:46:a8:a3:81:2a:8d:1c:ff:9b:d6:00:59:4c:59:d7:d7:
62:9d:fd:b7:ad:bc:b7:bf:a0:37:21:6b:2f:15:4b:4c:68:8f:
66:7a:50:de:48:72:39:68:e9:51:77:26:84:0f:2a:2e:17:bb:
a9:7a:34:d8:d7:e0:e0:95:0a:b1:1a:3d:c8:a9:9f:4a:d3:24:
e9:c2:a9:2b:42:63:be:3e:47:e9:db:c5:33:6e:8c:24:4a:ca:
ad:00:f8:f5:3e:76:ff:ef:56:a3:3f:0a:43:f3:94:88:28:d3:
57:bf:ad:06:c4:20:a3:4b:b2:96:a3:b8:6d:e4:98:33:63:69:
8c:80:10:cc:c7:e9:19:e7:ef:b0:94:df:40:a6:b1:65:82:e6:
5d:58:6b:f1:33:a1:87:c0:b8:10:95:23:45:a8:46:8e:15:cd:
fc:1f:16:46:46:90:9f:eb:77:ae:cd:b8:bc:8f:ea:61:42:16:
47:ac:d1:45:b2:8d:a7:8c:5f:4c:8f:cd:b6:90:a4:4c:d8:ea:
cd:e1:a3:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1uZCCeRep8xFSQy8dLxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNWE0MjNkZGM5N2RkMzBkZWM4Yjg2NzNjMjQ5NjhlMjcz
NzI2NzYwHhcNMjYwOTIxMTIwMDM1WhcNMjYwOTIyMTIwMDM1WjAzMTEwLwYDVQQD
Eyg0YjJmNzJiYTRlMTAxNjkyYmZhNTFkYTZiM2JjN2I2NzJlMGZmY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hf5x42CUIXTdJTyE3ECwfEabslI
oqFQjpGWYC5vPLJ3xEj8fsw9xifP3FrugtUr1tDEMwUH5EbCZBdNXGnCsDZvq92d
VZIP7NC2DYocIXMIHkoxOYC6tyElkSih3v0Miz2JbDS1F35E1TXsTBdbJVpbaPar
K3hXiT7vTOym91C0XM/zviVNvhfq5CpzgVxv6V+UT5+Rzt7t8e3uf1PtkufGC11e
zJRAaLBhczzVIPNNv35US+vXdQcrhJHLJg3sUbgKT4uvLHAURC4MlMRvTLZ8fyr1
uVzD7JSqr5txKzp5KnwLZVRXZmUviOQ5757/b+Sqan6UZRUKry167l9WMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsvcrpOEBaSv6UdprO8e2cuD/y9MB8GA1UdIwQY
MBaAFA9aQj3cl90w3si4Zzwklo4nNyZ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFwQ1BkeVgzVERleUxoblBDU1dqaWMzSm5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zN2NkNTAtNTc2OS00Y2RkLTk1ZWEt
Y2Y4OWJlNWE1ZmVhLzEvRDFwQ1BkeVgzVERleUxoblBDU1dqaWMzSm5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zN2NkNTAtNTc2OS00Y2RkLTk1ZWEtY2Y4OWJlNWE1ZmVh
LzEvRDFwQ1BkeVgzVERleUxoblBDU1dqaWMzSm5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzxWdg5E
npdNYnEoHjTKZ9Uacm8D3vyzOHrW1bVmIolkQgz/mvFwj2qCAEnnFBFl9+yPqFUL
nRNGqKOBKo0c/5vWAFlMWdfXYp39t628t7+gNyFrLxVLTGiPZnpQ3khyOWjpUXcm
hA8qLhe7qXo02Nfg4JUKsRo9yKmfStMk6cKpK0Jjvj5H6dvFM26MJErKrQD49T52
/+9Woz8KQ/OUiCjTV7+tBsQgo0uylqO4beSYM2NpjIAQzMfpGefvsJTfQKaxZYLm
XVhr8TOhh8C4EJUjRahGjhXN/B8WRkaQn+t3rs24vI/qYUIWR6zRRbKNp4xfTI/N
tpCkTNjqzeGjXg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:41:54 2026 by rpki-client