Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: 1Hqr8toFImyeRe5QEeKnEFyAKjIfiqT33kd92S89+To=
Subject key identifier: AE:4E:1C:DF:7A:3B:0B:95:9F:D3:D2:CA:45:BE:97:AB:BF:A5:DF:7B
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 019CACB54E1EF7D3DE8A0AC89645F4ACAB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:28 +0000
Manifest this update: Mon 02 Mar 2026 04:01:28 +0000
Manifest next update: Tue 03 Mar 2026 04:01:28 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: hpddQjS/Sl1kZLEGIQmU83Zf42ljIfqrIcbjMTGSCa0=)
2: 12mV3ZosY8cTKWpFfBQEfwnx0BM.roa (hash: sqnV6smhnureA54M31ulMVSP8a9WYb/7AIpEIZop+fE=)
3: w-By4YicrBafnG_nw52slsPB7Mo.roa (hash: EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4e:1e:f7:d3:de:8a:0a:c8:96:45:f4:ac:ab:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Mar 2 04:01:28 2026 GMT
Not After : Mar 3 04:01:28 2026 GMT
Subject: CN=ae4e1cdf7a3b0b959fd3d2ca45be97abbfa5df7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:d7:c5:3a:90:5c:85:10:2f:29:a6:da:cc:
50:01:cb:6f:8d:74:02:23:c8:6f:f2:67:0b:e6:1e:
4f:4c:46:ca:5d:aa:4c:a8:52:28:47:da:c0:ed:26:
5b:53:73:67:3f:ed:72:b5:3a:b5:d2:d3:ed:41:1a:
cc:11:9f:8b:ba:43:e4:6e:e0:aa:bd:c5:29:0c:93:
37:fb:57:4d:01:5a:81:42:fc:70:97:25:e1:bb:7f:
c6:0d:1b:8b:92:e5:63:64:07:3c:c9:a4:df:d0:46:
d0:51:d3:17:77:6f:af:42:77:da:81:f1:8c:df:58:
fb:92:d0:7b:04:43:20:82:8c:53:a0:a7:f4:7e:22:
09:37:86:9a:8e:df:e7:77:5b:80:48:9f:dc:b3:ae:
bd:50:4d:50:09:f1:3d:f9:d0:9c:0c:b2:f9:8b:83:
dd:ec:fe:67:2e:b2:ad:3e:8c:e1:fc:2d:44:a6:e0:
25:b5:81:32:35:7d:1b:34:48:f4:11:f8:4a:c3:80:
6d:1c:81:77:3a:40:fe:05:31:d6:d5:03:8a:8c:5e:
de:ef:e7:32:6e:b0:01:8c:56:b5:04:fd:86:b5:b5:
bd:79:38:43:2d:e9:ee:7f:bf:80:23:9a:a0:f6:07:
a2:1d:97:37:e3:10:d5:69:5e:ee:54:50:3d:b2:a4:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:1C:DF:7A:3B:0B:95:9F:D3:D2:CA:45:BE:97:AB:BF:A5:DF:7B
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ba:4e:56:67:3e:6c:14:f3:01:cc:43:eb:3b:25:52:72:4e:
96:7e:c3:32:25:de:24:48:98:4e:8b:08:0d:4e:0c:69:2b:a1:
3a:47:32:a6:23:05:c9:a1:c0:dc:a9:d5:c5:92:b3:80:2e:96:
8a:dd:d0:ba:f9:8d:9d:d3:8e:ac:dc:a3:36:49:d9:07:6f:32:
ab:ce:93:36:ff:1b:29:e4:45:5b:e4:d0:08:2b:6a:40:be:a2:
37:ef:f6:d0:89:51:59:43:7a:66:e9:65:16:6f:fc:fb:de:92:
81:48:91:76:08:b7:d4:bd:20:4e:9d:86:71:91:08:66:8c:5f:
ae:a5:bc:40:48:b5:13:a0:a5:a5:dc:62:8d:34:c6:5f:e4:70:
a4:31:d6:44:8d:6e:3a:05:69:ab:ba:cc:8f:cc:a4:43:72:bf:
1b:e0:0e:07:8a:4d:28:e3:58:73:68:c8:f2:65:ca:94:15:18:
0c:a3:30:56:c4:7f:00:cc:69:0f:31:f9:ba:6a:5d:7a:57:46:
0c:49:e1:c8:c7:f1:54:22:8e:f4:fe:a3:1b:09:1e:8a:81:93:
5f:fd:b6:de:e1:67:85:e3:6b:4a:a6:d7:15:8d:93:05:ac:46:
1a:27:90:92:8d:d5:37:64:5c:0b:3d:b3:17:9b:81:de:b8:b1:
f0:00:3a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystU4e99PeigrIlkX0rKstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTEzOTJjZDdlNmU0MGE0NWMxYjhhNDQ3OTg4MGVlZjk2
MGYzMzAwHhcNMjYwMzAyMDQwMTI4WhcNMjYwMzAzMDQwMTI4WjAzMTEwLwYDVQQD
EyhhZTRlMWNkZjdhM2IwYjk1OWZkM2QyY2E0NWJlOTdhYmJmYTVkZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLvXxTqQXIUQLymm2sxQActvjXQC
I8hv8mcL5h5PTEbKXapMqFIoR9rA7SZbU3NnP+1ytTq10tPtQRrMEZ+LukPkbuCq
vcUpDJM3+1dNAVqBQvxwlyXhu3/GDRuLkuVjZAc8yaTf0EbQUdMXd2+vQnfagfGM
31j7ktB7BEMggoxToKf0fiIJN4aajt/nd1uASJ/cs669UE1QCfE9+dCcDLL5i4Pd
7P5nLrKtPozh/C1EpuAltYEyNX0bNEj0EfhKw4BtHIF3OkD+BTHW1QOKjF7e7+cy
brABjFa1BP2GtbW9eThDLenuf7+AI5qg9geiHZc34xDVaV7uVFA9sqSA6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5OHN96OwuVn9PSykW+l6u/pd97MB8GA1UdIwQY
MBaAFNJROSzX5uQKRcG4pEeYgO75YPMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQt
ZGYxZDUyMDVjNWQwLzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQtZGYxZDUyMDVjNWQw
LzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7pOVmc+
bBTzAcxD6zslUnJOln7DMiXeJEiYTosIDU4MaSuhOkcypiMFyaHA3KnVxZKzgC6W
it3QuvmNndOOrNyjNknZB28yq86TNv8bKeRFW+TQCCtqQL6iN+/20IlRWUN6Zull
Fm/8+96SgUiRdgi31L0gTp2GcZEIZoxfrqW8QEi1E6ClpdxijTTGX+RwpDHWRI1u
OgVpq7rMj8ykQ3K/G+AOB4pNKONYc2jI8mXKlBUYDKMwVsR/AMxpDzH5umpdeldG
DEnhyMfxVCKO9P6jGwkeioGTX/223uFnheNrSqbXFY2TBaxGGieQko3VN2RcCz2z
F5uB3rix8AA63w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:00 2026 by rpki-client