Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: DLdDqKMPEEBPyYS803cyVuDStX50Xg0IEB79nKMBOew=
Subject key identifier: F4:66:25:CD:FA:80:10:87:90:58:97:AC:4F:B5:3E:7B:94:84:54:2A
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 01A0D4CBB244453E1D684BEAF1C6128364E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 1948
Signing time: Thu 24 Sep 2026 19:01:54 +0000
Manifest this update: Thu 24 Sep 2026 19:01:54 +0000
Manifest next update: Fri 25 Sep 2026 19:01:54 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: hzy8sdcpN3R8Dg3y8JoFtfgDXNK73WlgS7ZZ+X3HNQM=)
2: PzBJvCvuKoLcfTByzdz7KrKT9g0.roa (hash: 3oZ6E/qyPFCkNxJX9IOFDQ5m/aqdqH2CkJ/hq3ptHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:b2:44:45:3e:1d:68:4b:ea:f1:c6:12:83:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Sep 24 19:01:54 2026 GMT
Not After : Sep 25 19:01:54 2026 GMT
Subject: CN=f46625cdfa801087905897ac4fb53e7b9484542a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:bb:51:b2:9d:9a:14:df:6b:3b:13:67:ed:
81:27:71:58:3a:a0:5a:e5:70:8d:a3:6f:eb:bd:d7:
f9:4c:49:4c:a9:17:11:f0:f1:a6:c3:92:a7:5a:0c:
5a:63:07:df:3e:09:5d:8f:e6:5e:03:5a:08:9b:ae:
92:24:99:7e:81:e2:0f:50:f5:42:2d:e3:22:36:38:
c9:73:c3:92:d7:8d:f7:29:50:4b:d3:74:f2:69:d7:
3a:52:e0:b3:51:3b:81:74:7e:62:ba:d3:27:3a:9e:
81:d4:f1:da:18:99:70:c8:8e:80:1e:6e:4e:2e:a4:
8f:16:8d:71:66:4e:fc:44:84:ca:ce:a7:ba:c8:66:
02:9f:61:8d:4b:de:18:8b:d9:3a:83:06:2f:9e:68:
c1:46:c3:fd:9e:75:a3:25:ed:79:04:2f:84:d0:38:
b4:4a:c7:bd:5a:c7:47:f2:33:6e:85:dc:1a:d5:39:
7a:fd:8d:dd:4e:a7:1c:49:22:3a:7e:a4:6c:40:66:
ba:3c:94:67:6b:a0:9f:98:63:93:c7:7c:58:f7:75:
9a:35:1e:56:4c:fc:64:55:f6:5b:ab:38:5a:cf:85:
8e:bd:0a:0f:b0:a2:1f:75:f2:f4:dd:2c:ea:66:f9:
5f:61:8f:b1:21:f2:27:a1:a1:a3:9b:a1:f1:ab:05:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:66:25:CD:FA:80:10:87:90:58:97:AC:4F:B5:3E:7B:94:84:54:2A
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a1:f8:1f:7e:e9:77:df:97:e3:8a:5e:c2:5e:dd:9a:d3:31:
e6:f2:76:30:1c:49:fa:de:ec:d1:de:49:98:6e:c4:3e:76:c7:
f0:56:8d:aa:0f:69:43:33:f6:f2:12:e0:d4:45:4f:8c:de:be:
fa:74:b2:6c:0f:fc:7f:bd:0b:92:4e:90:77:a6:83:b9:6c:68:
44:61:fc:53:7f:46:85:09:9a:98:bd:3c:54:c5:61:c6:05:55:
2f:d0:5c:33:4b:f9:78:4b:71:b5:9d:3e:e9:d2:61:1f:32:04:
b0:e9:f1:25:1b:6c:97:59:7b:de:f6:1a:47:76:48:2b:32:ba:
86:c5:6a:29:9c:87:4a:15:d7:98:7e:56:1a:c0:92:b2:35:08:
15:ee:07:b9:77:13:db:df:e4:e6:05:c2:92:79:ee:2f:d7:20:
76:5d:c4:f6:68:90:3b:b9:54:d3:52:e2:7a:27:bf:34:f0:eb:
9b:a1:41:bf:49:d4:a2:70:3e:93:07:3e:3f:71:37:2f:19:d5:
68:6e:22:80:ed:98:28:2a:4c:85:aa:83:11:11:e1:38:94:10:
eb:00:6c:1e:95:08:ee:bb:3b:d7:b9:5d:cb:5d:1f:5a:36:f9:
5f:a2:ea:8d:a8:d6:45:77:c4:ff:d6:ac:8d:38:0e:62:d3:8d:
79:96:f1:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy7JERT4daEvq8cYSg2TjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWI5MGI4OTgxYjU5MWQ3NWE3ZTkzNWUxMzA0YTc0MDc1
NjAyZmQwHhcNMjYwOTI0MTkwMTU0WhcNMjYwOTI1MTkwMTU0WjAzMTEwLwYDVQQD
EyhmNDY2MjVjZGZhODAxMDg3OTA1ODk3YWM0ZmI1M2U3Yjk0ODQ1NDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXO7UbKdmhTfazsTZ+2BJ3FYOqBa
5XCNo2/rvdf5TElMqRcR8PGmw5KnWgxaYwffPgldj+ZeA1oIm66SJJl+geIPUPVC
LeMiNjjJc8OS1433KVBL03Tyadc6UuCzUTuBdH5iutMnOp6B1PHaGJlwyI6AHm5O
LqSPFo1xZk78RITKzqe6yGYCn2GNS94Yi9k6gwYvnmjBRsP9nnWjJe15BC+E0Di0
Sse9WsdH8jNuhdwa1Tl6/Y3dTqccSSI6fqRsQGa6PJRna6CfmGOTx3xY93WaNR5W
TPxkVfZbqzhaz4WOvQoPsKIfdfL03SzqZvlfYY+xIfInoaGjm6HxqwVWbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRmJc36gBCHkFiXrE+1PnuUhFQqMB8GA1UdIwQY
MBaAFNJbkLiYG1kddafpNeEwSnQHVgL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yY2U1MjAtZWMwNy00NWVmLWI1ODct
YTJhYmRhZGY1ZjkwLzEvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yY2U1MjAtZWMwNy00NWVmLWI1ODctYTJhYmRhZGY1Zjkw
LzEvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaH4H37p
d9+X44pewl7dmtMx5vJ2MBxJ+t7s0d5JmG7EPnbH8FaNqg9pQzP28hLg1EVPjN6+
+nSybA/8f70Lkk6Qd6aDuWxoRGH8U39GhQmamL08VMVhxgVVL9BcM0v5eEtxtZ0+
6dJhHzIEsOnxJRtsl1l73vYaR3ZIKzK6hsVqKZyHShXXmH5WGsCSsjUIFe4HuXcT
29/k5gXCknnuL9cgdl3E9miQO7lU01Lieie/NPDrm6FBv0nUonA+kwc+P3E3LxnV
aG4igO2YKCpMhaqDERHhOJQQ6wBsHpUI7rs717ldy10fWjb5X6LqjajWRXfE/9as
jTgOYtONeZbxdw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:47:44 2026 by rpki-client