Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
File: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json)
Hash identifier: dWVXq33hpSjwYLu3aHLBUDkAbvRyX+j8s/HfBh2+O20=
Subject key identifier: BA:B8:B0:67:ED:6B:26:5E:64:37:9B:8E:DB:69:1D:37:7F:8B:F4:82
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 019CAD907DBC206F38CD1E95B95A82E56D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
Manifest number: 135B
Signing time: Mon 02 Mar 2026 08:00:53 +0000
Manifest this update: Mon 02 Mar 2026 08:00:53 +0000
Manifest next update: Tue 03 Mar 2026 08:00:53 +0000
Files and hashes: 1: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: +CgximN+t/vWwsR3/3jjX4lJiQJY5evGEigKyytVqwc=)
2: qc7Q2TrAD7-oyN-rXryRK-RP0Zo.roa (hash: +pjqzmokR2G2qc24N9ur5O1FIrpMiWBJ/MAwmqbWH98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:7d:bc:20:6f:38:cd:1e:95:b9:5a:82:e5:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Mar 2 08:00:53 2026 GMT
Not After : Mar 3 08:00:53 2026 GMT
Subject: CN=bab8b067ed6b265e64379b8edb691d377f8bf482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:6b:92:d5:13:85:fb:0d:33:7a:91:87:3a:
e1:0f:8c:06:ce:cf:b7:93:64:6b:40:82:fd:9c:c6:
b9:20:bc:ea:ed:47:4b:24:08:d3:d3:c2:96:01:5f:
27:3d:45:3b:e9:12:0a:bf:43:b7:15:0f:f7:cf:be:
d6:05:a9:f2:3b:af:69:bd:22:98:15:a0:14:b7:6c:
d7:69:54:79:62:6b:c7:b6:49:3c:ff:6b:ae:b7:da:
48:64:ea:0b:01:37:00:f9:ef:d6:40:fd:e7:75:48:
81:bc:73:63:62:be:63:ff:0e:41:27:8c:1e:03:c9:
a9:bd:27:4b:53:db:3e:38:60:d0:d7:48:f7:67:28:
49:40:1e:24:b3:0e:60:bd:9f:61:67:a8:eb:a0:8d:
4d:31:f1:77:62:1c:57:d3:0b:a5:72:b8:a7:1d:84:
7d:12:4f:22:39:91:a0:a8:3a:8b:2d:d5:a0:b8:2c:
b0:fc:b0:ef:d5:1d:b1:32:bb:4d:4c:f4:73:c7:74:
71:e3:d1:41:11:b6:c8:52:e1:61:aa:dc:f6:a3:3d:
79:b2:73:3d:49:16:4c:db:89:3f:5d:e7:76:8a:2b:
08:31:5b:8f:ea:b4:bf:0d:98:5d:a4:6f:f6:85:4c:
94:f8:84:a3:40:73:a2:62:6c:c6:f2:be:22:7d:40:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:B0:67:ED:6B:26:5E:64:37:9B:8E:DB:69:1D:37:7F:8B:F4:82
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:a2:c0:ec:28:f4:a1:4d:2f:0b:cc:63:08:58:91:0a:41:10:
03:e7:37:c6:46:a3:91:80:f3:10:07:4c:7e:11:d0:75:9b:3f:
99:9d:2e:43:8c:b1:cf:74:f5:d2:09:04:3c:03:e1:d0:3e:05:
90:57:50:b7:b9:e3:ad:01:ed:40:b1:16:91:88:2f:57:72:c8:
67:cc:8d:64:b5:6d:e6:79:eb:1e:5b:f6:a0:ea:86:7a:fb:50:
6a:c6:40:d7:19:cd:98:2c:2d:ef:98:09:5e:a1:83:3a:c1:2c:
54:de:cf:62:ab:bc:17:52:6d:0a:35:23:3b:4b:fb:4b:45:95:
cf:75:7f:55:d4:e1:15:02:dc:18:ae:91:cb:b6:11:8f:eb:33:
59:ab:93:d5:8a:ba:b8:1e:d5:07:9d:6c:33:14:01:9b:ef:a2:
f9:be:86:1a:8c:7e:7a:9d:f5:dc:30:45:15:94:43:cf:75:34:
6d:0f:53:bc:0f:6e:e4:f4:9a:63:98:d8:f3:87:00:6e:49:c7:
f2:54:30:20:7c:44:49:15:47:7d:1f:c4:21:fe:f9:ea:9f:37:
94:71:d4:e4:f7:bc:7c:b2:90:ae:93:02:31:8c:1a:70:77:50:
41:9e:74:da:a6:78:04:66:a8:07:03:a9:d7:13:30:60:3b:bd:
34:af:5f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkH28IG84zR6VuVqC5W1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZGQwZWJmZjViYTM4YTg3NThiNzk0ZDA0ZDYyOTA1MTk0
YTMyNjYwHhcNMjYwMzAyMDgwMDUzWhcNMjYwMzAzMDgwMDUzWjAzMTEwLwYDVQQD
EyhiYWI4YjA2N2VkNmIyNjVlNjQzNzliOGVkYjY5MWQzNzdmOGJmNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/9rktUThfsNM3qRhzrhD4wGzs+3
k2RrQIL9nMa5ILzq7UdLJAjT08KWAV8nPUU76RIKv0O3FQ/3z77WBanyO69pvSKY
FaAUt2zXaVR5YmvHtkk8/2uut9pIZOoLATcA+e/WQP3ndUiBvHNjYr5j/w5BJ4we
A8mpvSdLU9s+OGDQ10j3ZyhJQB4ksw5gvZ9hZ6jroI1NMfF3YhxX0wulcrinHYR9
Ek8iOZGgqDqLLdWguCyw/LDv1R2xMrtNTPRzx3Rx49FBEbbIUuFhqtz2oz15snM9
SRZM24k/Xed2iisIMVuP6rS/DZhdpG/2hUyU+ISjQHOiYmzG8r4ifUDLBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLq4sGftayZeZDebjttpHTd/i/SCMB8GA1UdIwQY
MBaAFBHdDr/1ujiodYt5TQTWKQUZSjJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYt
ZjE3NjEzZWE0OWU3LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYtZjE3NjEzZWE0OWU3
LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzqLA7Cj0
oU0vC8xjCFiRCkEQA+c3xkajkYDzEAdMfhHQdZs/mZ0uQ4yxz3T10gkEPAPh0D4F
kFdQt7njrQHtQLEWkYgvV3LIZ8yNZLVt5nnrHlv2oOqGevtQasZA1xnNmCwt75gJ
XqGDOsEsVN7PYqu8F1JtCjUjO0v7S0WVz3V/VdThFQLcGK6Ry7YRj+szWauT1Yq6
uB7VB51sMxQBm++i+b6GGox+ep313DBFFZRDz3U0bQ9TvA9u5PSaY5jY84cAbknH
8lQwIHxESRVHfR/EIf756p83lHHU5Pe8fLKQrpMCMYwacHdQQZ502qZ4BGaoBwOp
1xMwYDu9NK9frQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:36:34 2026 by rpki-client