Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
File: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json)
Hash identifier: yi2LgliuAHGsLdEWpYAmgmBFWiYCoPeXaIjPJ+smNTM=
Subject key identifier: 3B:11:E4:C5:53:96:3A:1E:3D:A9:EF:D4:31:1E:03:42:99:7C:9F:1C
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Certificate issuer: /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial: 01A0C7EB301EAB97B033C3F4AB54F8E19744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
Manifest number: 178D
Signing time: Tue 22 Sep 2026 07:01:14 +0000
Manifest this update: Tue 22 Sep 2026 07:01:14 +0000
Manifest next update: Wed 23 Sep 2026 07:01:14 +0000
Files and hashes: 1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: pkekfuFj2wG/HDkSdKwcvnT+Y5Or4NyrFjYYXcGlxEU=)
2: g6AUdtBKbxSolGFU2rOSyRaiZMc.roa (hash: coGf1wAtr5fsslkJ4IB/mKoERpi+xwxfE7T7e7sR0vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:eb:30:1e:ab:97:b0:33:c3:f4:ab:54:f8:e1:97:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Validity
Not Before: Sep 22 07:01:14 2026 GMT
Not After : Sep 23 07:01:14 2026 GMT
Subject: CN=3b11e4c553963a1e3da9efd4311e0342997c9f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:49:ee:58:59:e8:86:0e:77:09:1f:13:fa:
80:33:2d:62:13:19:91:9c:1d:67:f9:70:61:af:da:
ee:20:46:8c:85:0f:dc:de:ed:cc:31:37:b2:32:c9:
17:61:64:9c:19:26:e3:fb:22:f4:f3:bc:22:48:43:
e2:6a:1e:c2:78:b6:5a:d2:cf:ab:38:cd:9b:29:7f:
0b:0c:72:1b:c4:95:c6:a8:4a:f8:22:9a:2f:fc:56:
2d:3d:b6:49:3f:68:dc:04:55:63:8f:c0:3f:95:e2:
66:81:7a:88:90:20:0e:e8:61:65:a6:58:83:62:be:
09:a8:96:bc:7b:eb:a2:25:27:d7:d0:11:57:3d:52:
55:ac:64:d3:77:f5:2f:d1:7d:0b:db:cd:a7:26:df:
be:a2:87:fd:e5:b7:8d:70:9b:1f:79:d8:62:58:fd:
f4:70:6d:64:16:e0:b2:64:4f:f7:d4:45:de:4d:1a:
8c:77:c1:95:e9:98:7d:32:1f:4c:c0:ea:4a:a4:e1:
ee:c0:82:08:2a:bc:00:83:2f:6c:5f:84:62:4f:bb:
f4:c0:71:b0:b3:e9:f3:8c:e5:37:80:52:b7:ec:97:
e7:7c:c3:7f:c5:6e:72:c1:08:d0:d3:0a:9a:6c:93:
cd:79:58:22:a6:21:bf:cc:3c:0b:12:f3:36:e4:73:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:11:E4:C5:53:96:3A:1E:3D:A9:EF:D4:31:1E:03:42:99:7C:9F:1C
X509v3 Authority Key Identifier:
keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:23:01:56:fb:a3:3e:9e:31:a0:e8:54:52:c6:01:2a:55:a8:
3c:e9:ab:75:84:c7:e2:20:89:8e:0e:a5:0e:2b:c2:d9:17:ec:
49:f1:a3:39:0a:66:fc:48:2d:7e:3b:b9:c6:9b:09:d3:52:75:
23:dc:a5:89:9b:6a:05:b4:9e:01:08:d5:88:12:9a:e6:1c:c9:
f6:fa:ea:64:d6:5e:f1:50:e2:4d:4b:dc:5e:f5:e0:8c:84:b0:
2c:bb:db:1b:71:1f:62:8c:0e:6d:db:a5:fa:b4:1b:ae:1e:5e:
84:32:d1:1e:68:35:be:74:10:2a:60:88:93:af:a0:70:41:a2:
08:39:ac:12:bb:e3:79:4f:6e:fb:a7:4c:a4:06:48:a3:09:36:
63:56:78:84:6e:bb:7b:e9:a0:2f:84:d3:0c:0a:c8:5f:f1:43:
c9:13:cd:ad:bd:85:63:7b:83:b9:b2:d2:ea:cb:67:4f:5a:aa:
55:a5:ef:f3:0c:36:f5:b6:c8:5c:4a:89:cb:78:ff:c3:f6:64:
48:cc:fd:f4:9d:05:ec:8b:c2:4e:eb:a1:6d:51:28:d8:76:9e:
33:1d:df:71:30:79:1b:94:0b:e1:64:87:f9:18:c8:10:ba:71:
61:8b:5a:53:99:9c:2e:e7:e0:d6:8a:69:85:ef:0f:a7:62:8b:
11:4a:64:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6zAeq5ewM8P0q1T44ZdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmQ2NGNjOTRhNGE4NTE4YTcxZjk2ZWY4Yjc3NjI1YWZh
NTI3ZDEwHhcNMjYwOTIyMDcwMTE0WhcNMjYwOTIzMDcwMTE0WjAzMTEwLwYDVQQD
EygzYjExZTRjNTUzOTYzYTFlM2RhOWVmZDQzMTFlMDM0Mjk5N2M5ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1NJ7lhZ6IYOdwkfE/qAMy1iExmR
nB1n+XBhr9ruIEaMhQ/c3u3MMTeyMskXYWScGSbj+yL087wiSEPiah7CeLZa0s+r
OM2bKX8LDHIbxJXGqEr4Ipov/FYtPbZJP2jcBFVjj8A/leJmgXqIkCAO6GFlpliD
Yr4JqJa8e+uiJSfX0BFXPVJVrGTTd/Uv0X0L282nJt++oof95beNcJsfedhiWP30
cG1kFuCyZE/31EXeTRqMd8GV6Zh9Mh9MwOpKpOHuwIIIKrwAgy9sX4RiT7v0wHGw
s+nzjOU3gFK37JfnfMN/xW5ywQjQ0wqabJPNeVgipiG/zDwLEvM25HOsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsR5MVTljoePanv1DEeA0KZfJ8cMB8GA1UdIwQY
MBaAFNG9ZMyUpKhRinH5bvi3diWvpSfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTct
MDgyNmYzNmZmMjhmLzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTctMDgyNmYzNmZmMjhm
LzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiMBVvuj
Pp4xoOhUUsYBKlWoPOmrdYTH4iCJjg6lDivC2RfsSfGjOQpm/Egtfju5xpsJ01J1
I9yliZtqBbSeAQjViBKa5hzJ9vrqZNZe8VDiTUvcXvXgjISwLLvbG3EfYowObdul
+rQbrh5ehDLRHmg1vnQQKmCIk6+gcEGiCDmsErvjeU9u+6dMpAZIowk2Y1Z4hG67
e+mgL4TTDArIX/FDyRPNrb2FY3uDubLS6stnT1qqVaXv8ww29bbIXEqJy3j/w/Zk
SMz99J0F7IvCTuuhbVEo2HaeMx3fcTB5G5QL4WSH+RjIELpxYYtaU5mcLufg1opp
he8Pp2KLEUpkCQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:51:15 2026 by rpki-client