Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: shOgdpgzSkg2fRXHUpUZ0aJlhhzX44HOSSMd2LZIS+M=
Subject key identifier: C3:92:7C:48:93:A6:D5:B9:37:C9:07:21:80:E6:BB:4E:91:1D:CD:31
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019D9A06AB887BB1A32DC6CDD26943DC3ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 128A
Signing time: Fri 17 Apr 2026 06:00:21 +0000
Manifest this update: Fri 17 Apr 2026 06:00:21 +0000
Manifest next update: Sat 18 Apr 2026 06:00:21 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: 0lpZz4Prlj7GefFvWMfcgpe140JEA6E2BQTmhy4u4sE=)
2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ab:88:7b:b1:a3:2d:c6:cd:d2:69:43:dc:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Apr 17 06:00:21 2026 GMT
Not After : Apr 18 06:00:21 2026 GMT
Subject: CN=c3927c4893a6d5b937c9072180e6bb4e911dcd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:30:d6:cc:6a:19:b3:39:bf:12:a7:e3:a8:
60:80:56:56:23:f8:39:33:fa:ab:66:84:05:1b:e8:
8f:d3:a6:69:97:4e:7e:c6:18:d8:df:6d:be:2a:66:
7f:ee:38:4b:0a:52:74:1b:ed:f3:e1:a8:ec:b9:a5:
7e:29:e8:1f:d0:47:25:b1:fa:2c:d7:4d:2a:7a:59:
46:1e:4c:a4:29:7c:27:e7:17:ca:46:ac:a3:50:b1:
e3:48:ca:31:5f:3e:a0:ff:94:95:55:1e:be:2d:36:
04:b6:a3:38:c9:d0:17:8d:e0:cc:16:ea:df:27:0e:
e8:03:5a:de:4a:03:8d:c7:c0:02:db:0f:18:f4:c2:
42:63:9e:33:df:f7:43:80:14:cd:68:5c:03:70:d5:
1d:3d:5a:6e:b8:98:31:96:3b:9c:ae:02:ee:17:5e:
d8:45:19:08:75:e3:2c:b8:d6:45:b6:4b:9a:cb:de:
e1:c6:27:3e:2e:87:12:18:89:eb:ea:a9:02:03:53:
8f:9f:84:e0:00:85:e2:b4:bc:6e:64:46:c0:92:e5:
5c:84:3d:e0:c8:db:82:8c:da:1a:45:ec:1b:ed:68:
f8:10:35:6d:f4:14:10:d7:ab:7a:01:1e:72:4a:21:
d8:c0:94:1e:39:62:68:c2:bf:ad:40:88:11:4c:7c:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:7C:48:93:A6:D5:B9:37:C9:07:21:80:E6:BB:4E:91:1D:CD:31
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:02:6a:98:cc:6c:76:81:79:d0:7f:68:25:1f:1d:4d:af:63:
2d:29:ae:da:92:b8:6e:18:75:db:c0:dc:39:1c:e9:1c:a8:6a:
ee:9d:e6:a0:c0:4e:b5:45:cd:94:c7:b1:11:66:64:15:3c:74:
ea:28:0b:22:0f:75:dd:1d:d1:2a:b0:69:5a:34:82:ed:c9:c4:
f3:69:68:c6:f4:d6:81:8f:97:1d:93:10:c2:91:e9:d9:73:89:
bc:bd:91:86:8d:5d:ae:cf:a6:1c:1b:06:d4:03:e5:c0:a9:68:
ee:c8:82:4d:03:cd:1f:83:83:04:77:ce:77:ab:2b:c4:67:45:
75:7d:4c:3a:2e:ed:2f:c7:27:1c:a1:91:55:c7:86:3c:d2:4e:
0a:18:8e:02:17:aa:de:3d:17:50:36:ff:41:e5:60:92:bb:93:
0a:7f:7d:ac:17:f8:e7:fa:36:8e:1a:23:19:ce:6c:53:ee:d0:
e7:2c:ad:7b:6e:45:56:ba:4a:3b:b5:6f:1b:02:5b:80:25:ac:
7c:68:d0:35:04:a4:dc:f8:be:7c:a3:7a:32:b6:75:99:9d:01:
f1:3b:47:10:30:76:86:89:65:c5:48:85:64:b7:d5:ff:42:54:
90:7c:6f:87:18:a0:35:ed:d3:55:2b:4d:2b:33:55:c6:3d:d7:
ca:96:d6:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBquIe7GjLcbN0mlD3DrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYTNjOGNjNjNkMGU3ZTA2OWNhNTIzZjM0ZWZiMzk1M2Vl
MjFiNjUwHhcNMjYwNDE3MDYwMDIxWhcNMjYwNDE4MDYwMDIxWjAzMTEwLwYDVQQD
EyhjMzkyN2M0ODkzYTZkNWI5MzdjOTA3MjE4MGU2YmI0ZTkxMWRjZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx0w1sxqGbM5vxKn46hggFZWI/g5
M/qrZoQFG+iP06Zpl05+xhjY322+KmZ/7jhLClJ0G+3z4ajsuaV+Kegf0Eclsfos
100qellGHkykKXwn5xfKRqyjULHjSMoxXz6g/5SVVR6+LTYEtqM4ydAXjeDMFurf
Jw7oA1reSgONx8AC2w8Y9MJCY54z3/dDgBTNaFwDcNUdPVpuuJgxljucrgLuF17Y
RRkIdeMsuNZFtkuay97hxic+LocSGInr6qkCA1OPn4TgAIXitLxuZEbAkuVchD3g
yNuCjNoaRewb7Wj4EDVt9BQQ16t6AR5ySiHYwJQeOWJowr+tQIgRTHwJ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOSfEiTptW5N8kHIYDmu06RHc0xMB8GA1UdIwQY
MBaAFNKjyMxj0OfgacpSPzTvs5U+4htlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kMGExZmUtMGI2NS00ZDUwLWFlMmYt
MTI4OTg2OTdhODYyLzEvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kMGExZmUtMGI2NS00ZDUwLWFlMmYtMTI4OTg2OTdhODYy
LzEvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgJqmMxs
doF50H9oJR8dTa9jLSmu2pK4bhh128DcORzpHKhq7p3moMBOtUXNlMexEWZkFTx0
6igLIg913R3RKrBpWjSC7cnE82loxvTWgY+XHZMQwpHp2XOJvL2Rho1drs+mHBsG
1APlwKlo7siCTQPNH4ODBHfOd6srxGdFdX1MOi7tL8cnHKGRVceGPNJOChiOAheq
3j0XUDb/QeVgkruTCn99rBf45/o2jhojGc5sU+7Q5yyte25FVrpKO7VvGwJbgCWs
fGjQNQSk3Pi+fKN6MrZ1mZ0B8TtHEDB2hollxUiFZLfV/0JUkHxvhxigNe3TVStN
KzNVxj3XypbWRw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:41 2026 by rpki-client