Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: dWgoxae1U5kEPZoNjJY1k2YIuUbkXYUn1rUyGHtfEAo=
Subject key identifier: CB:32:CD:8B:32:1C:71:8F:43:83:B5:DD:F0:C2:B5:4B:7B:EF:6E:73
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 019EBFC8A7805E0767BF3E459DBA3014B62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 07:00:58 +0000
Manifest this update: Sat 13 Jun 2026 07:00:58 +0000
Manifest next update: Sun 14 Jun 2026 07:00:58 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: GwrLkiME4GCFDq81N23PUKPP9MXD3yD5lfF18JvL0jk=)
2: 12mV3ZosY8cTKWpFfBQEfwnx0BM.roa (hash: sqnV6smhnureA54M31ulMVSP8a9WYb/7AIpEIZop+fE=)
3: w-By4YicrBafnG_nw52slsPB7Mo.roa (hash: EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:a7:80:5e:07:67:bf:3e:45:9d:ba:30:14:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Jun 13 07:00:58 2026 GMT
Not After : Jun 14 07:00:58 2026 GMT
Subject: CN=cb32cd8b321c718f4383b5ddf0c2b54b7bef6e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:dd:cc:2c:75:71:66:6e:69:cb:d7:f0:fc:
1d:e0:2d:d1:f2:89:b7:db:93:a9:b7:b8:e7:4d:89:
13:14:58:ad:ae:04:2b:a7:7c:a1:1f:c1:24:77:87:
f1:be:e8:ea:2b:2e:94:34:5d:5c:d7:ee:0c:09:a5:
5e:c9:b0:40:65:24:87:8a:9d:74:12:53:99:d0:6d:
9e:ae:cc:34:51:8c:dd:87:d0:03:0f:96:4a:c6:d0:
c2:b8:fa:55:21:8b:4b:7d:8a:34:ff:6f:d8:38:ac:
4a:75:c8:c8:98:65:74:b4:e4:df:b9:e7:cf:60:b0:
e1:8e:9b:fe:7d:1f:5f:80:c4:1e:f0:6a:14:23:c4:
28:2e:a0:4b:ec:bd:0e:33:19:98:9e:40:fb:46:89:
40:0f:07:76:3d:b5:83:b4:06:dd:73:18:46:70:de:
7d:31:30:41:51:4f:7c:a7:e0:e0:c4:c4:09:14:16:
56:1d:b1:fb:cb:67:cf:3f:d2:70:d0:f2:1a:dc:01:
37:4a:46:3b:0f:54:80:7d:0f:8c:28:64:3b:fa:5d:
84:af:50:c7:ac:bd:bc:43:14:db:6f:9b:e6:f5:0f:
b2:bd:e9:e3:b6:c4:eb:e1:f8:43:f5:05:7d:9e:f7:
1e:74:cc:6e:e0:c2:3b:b7:df:c1:63:d0:34:e2:ac:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:CD:8B:32:1C:71:8F:43:83:B5:DD:F0:C2:B5:4B:7B:EF:6E:73
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e8:44:7d:42:25:6d:90:a2:dd:15:8c:08:c5:7e:bd:2b:87:
66:27:d3:89:a6:6f:76:30:78:c9:5d:c6:ea:c3:e3:79:39:45:
6f:dc:56:36:04:36:72:72:d2:9e:58:ab:63:44:0d:0f:50:76:
6f:67:a9:46:2e:f1:75:97:58:f8:af:ca:07:de:7a:73:e4:f7:
f6:4b:1e:0e:24:65:ad:57:95:ca:93:4a:8b:70:03:81:58:54:
29:50:a7:48:ea:b2:37:1c:5f:16:68:f3:3b:94:a1:76:74:c8:
26:09:c8:6d:26:03:53:28:53:cf:0c:aa:20:e7:e8:ef:fd:39:
e7:5d:c0:da:3e:03:85:47:6b:a4:dd:e4:79:f2:20:1e:00:59:
fb:4b:31:75:42:6e:36:d6:4c:cf:b4:70:7e:f4:e5:10:09:6c:
38:ae:3f:2c:99:53:01:cb:9b:51:b2:b2:68:42:3e:bb:24:b4:
35:c5:e0:63:93:90:1e:96:a8:7c:65:cd:33:1a:f2:8c:1f:c5:
30:ca:57:fe:bf:6f:35:91:2a:29:82:ca:8a:eb:17:32:e4:c2:
4a:4a:ca:18:74:48:a4:f9:af:c5:30:f8:96:9d:6d:d5:7c:db:
ee:7e:f1:3b:72:24:ad:d8:c5:9a:cc:68:5b:93:30:92:67:3f:
5e:79:67:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yKeAXgdnvz5FnbowFLYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTEzOTJjZDdlNmU0MGE0NWMxYjhhNDQ3OTg4MGVlZjk2
MGYzMzAwHhcNMjYwNjEzMDcwMDU4WhcNMjYwNjE0MDcwMDU4WjAzMTEwLwYDVQQD
EyhjYjMyY2Q4YjMyMWM3MThmNDM4M2I1ZGRmMGMyYjU0YjdiZWY2ZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcvdzCx1cWZuacvX8Pwd4C3R8om3
25Opt7jnTYkTFFitrgQrp3yhH8Ekd4fxvujqKy6UNF1c1+4MCaVeybBAZSSHip10
ElOZ0G2ersw0UYzdh9ADD5ZKxtDCuPpVIYtLfYo0/2/YOKxKdcjImGV0tOTfuefP
YLDhjpv+fR9fgMQe8GoUI8QoLqBL7L0OMxmYnkD7RolADwd2PbWDtAbdcxhGcN59
MTBBUU98p+DgxMQJFBZWHbH7y2fPP9Jw0PIa3AE3SkY7D1SAfQ+MKGQ7+l2Er1DH
rL28QxTbb5vm9Q+yvenjtsTr4fhD9QV9nvcedMxu4MI7t9/BY9A04qw0fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsyzYsyHHGPQ4O13fDCtUt7725zMB8GA1UdIwQY
MBaAFNJROSzX5uQKRcG4pEeYgO75YPMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQt
ZGYxZDUyMDVjNWQwLzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQtZGYxZDUyMDVjNWQw
LzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuhEfUIl
bZCi3RWMCMV+vSuHZifTiaZvdjB4yV3G6sPjeTlFb9xWNgQ2cnLSnlirY0QND1B2
b2epRi7xdZdY+K/KB956c+T39kseDiRlrVeVypNKi3ADgVhUKVCnSOqyNxxfFmjz
O5ShdnTIJgnIbSYDUyhTzwyqIOfo7/05513A2j4DhUdrpN3kefIgHgBZ+0sxdUJu
NtZMz7RwfvTlEAlsOK4/LJlTAcubUbKyaEI+uyS0NcXgY5OQHpaofGXNMxryjB/F
MMpX/r9vNZEqKYLKiusXMuTCSkrKGHRIpPmvxTD4lp1t1Xzb7n7xO3IkrdjFmsxo
W5Mwkmc/Xnlnpw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:05 2026 by rpki-client