Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: NBwWVdzVXy35khvYi4ma3Owo+UEtmcz2XEoI6QMq3aE=
Subject key identifier: A7:93:4D:EA:BA:13:B2:B7:47:C1:53:5C:E0:09:80:E3:AD:6E:B2:99
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 019CAA21A082A228854B0AFDCA5A6FFE02CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 1345
Signing time: Sun 01 Mar 2026 16:00:56 +0000
Manifest this update: Sun 01 Mar 2026 16:00:56 +0000
Manifest next update: Mon 02 Mar 2026 16:00:56 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: u4Az7x1fmore25K61Di4Epz0gnue6Av+e0hau0h9Azs=)
2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a0:82:a2:28:85:4b:0a:fd:ca:5a:6f:fe:02:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Mar 1 16:00:56 2026 GMT
Not After : Mar 2 16:00:56 2026 GMT
Subject: CN=a7934deaba13b2b747c1535ce00980e3ad6eb299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:fa:ff:79:4a:a0:19:9c:76:79:fc:e3:0b:
84:ca:0b:04:1d:60:fc:5f:80:f6:12:0a:1c:1d:1d:
bf:b4:3c:cc:a5:cd:d4:f7:d6:71:ba:35:13:b1:a8:
69:17:df:ee:3c:c1:f3:4f:b0:75:3e:73:42:28:70:
7b:7d:cf:00:b7:e4:fc:e4:c7:76:41:43:d5:fd:6d:
0b:7d:4e:6c:33:8e:29:b9:9e:fd:38:e4:1a:e3:43:
bd:86:cd:03:c9:12:20:fa:51:8a:c4:f9:5c:24:e6:
85:1d:41:94:19:11:a4:3c:5a:e4:f0:6b:56:5f:ec:
f2:ec:5e:ca:41:46:09:ac:6f:aa:1a:87:52:8a:8e:
04:a1:7a:02:ad:da:bc:71:19:be:91:36:1f:4f:88:
f5:53:f1:c2:da:13:87:50:11:92:18:de:49:31:64:
80:7e:5d:72:82:3c:aa:dd:c7:d9:25:d1:b6:16:14:
ca:40:fa:db:6e:91:0f:60:9b:2a:61:93:39:7c:3f:
12:df:86:fd:97:4e:c1:dd:80:bd:cb:1f:6f:f9:b8:
5c:9b:38:92:fb:36:ae:3f:1f:80:e0:8a:17:92:4d:
ce:81:27:2e:ae:18:93:79:a5:6b:be:c1:31:db:22:
39:41:ff:b1:d1:b6:54:ef:0d:9c:b5:d4:89:d4:e1:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:93:4D:EA:BA:13:B2:B7:47:C1:53:5C:E0:09:80:E3:AD:6E:B2:99
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:85:5b:6f:22:05:aa:30:34:e9:5b:c6:f4:6c:1a:c2:2b:a8:
d8:d1:89:49:37:8b:1a:7f:01:78:16:56:d4:2e:36:a0:c8:ff:
41:c5:b5:e8:fb:ac:d7:15:9c:56:f3:1d:4f:4b:72:1a:eb:a3:
42:3a:96:1f:75:41:54:2b:5b:3e:1e:bd:d3:cf:e7:ff:3b:82:
4a:fd:8b:d1:5d:5b:2f:82:5a:24:2b:fb:79:71:ff:d7:1c:39:
87:d0:55:bd:30:d2:63:55:14:66:a1:d9:17:f7:c9:b8:17:10:
62:e8:8f:0d:24:8a:2a:11:b7:f6:35:af:62:a9:74:d7:93:fe:
ce:d4:b3:59:8e:df:54:02:a0:7a:38:4d:e6:a7:28:f8:18:fc:
aa:ca:99:dc:ee:93:2d:a2:d1:47:5c:68:e5:c7:a9:78:93:b1:
4c:5b:d9:0d:9c:9d:b0:dc:d8:b0:00:c5:71:ec:74:91:e9:ac:
f7:01:52:c7:b3:12:e4:cd:d9:72:16:43:b9:3b:eb:96:c1:e8:
71:d6:d1:13:f5:a4:6f:e9:42:8c:fc:9b:3c:06:c5:45:e4:f7:
97:3c:8f:d2:e5:29:e6:9a:40:e7:aa:26:47:eb:4f:dc:77:8d:
aa:4c:3d:33:99:35:76:cc:09:72:2c:78:bf:1e:3e:3d:98:92:
13:54:23:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIaCCoiiFSwr9ylpv/gLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxM2JiYzkyYTJmYTkwYTBhMTEyMmI4MzMwMzQ2ZjlhNjE3
MWQ5NzYwHhcNMjYwMzAxMTYwMDU2WhcNMjYwMzAyMTYwMDU2WjAzMTEwLwYDVQQD
EyhhNzkzNGRlYWJhMTNiMmI3NDdjMTUzNWNlMDA5ODBlM2FkNmViMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw/6/3lKoBmcdnn84wuEygsEHWD8
X4D2EgocHR2/tDzMpc3U99ZxujUTsahpF9/uPMHzT7B1PnNCKHB7fc8At+T85Md2
QUPV/W0LfU5sM44puZ79OOQa40O9hs0DyRIg+lGKxPlcJOaFHUGUGRGkPFrk8GtW
X+zy7F7KQUYJrG+qGodSio4EoXoCrdq8cRm+kTYfT4j1U/HC2hOHUBGSGN5JMWSA
fl1ygjyq3cfZJdG2FhTKQPrbbpEPYJsqYZM5fD8S34b9l07B3YC9yx9v+bhcmziS
+zauPx+A4IoXkk3OgScurhiTeaVrvsEx2yI5Qf+x0bZU7w2ctdSJ1OENzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeTTeq6E7K3R8FTXOAJgOOtbrKZMB8GA1UdIwQY
MBaAFNE7vJKi+pCgoRIrgzA0b5phcdl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMt
Y2MzMzg0YWQ4MWExLzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMtY2MzMzg0YWQ4MWEx
LzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4VbbyIF
qjA06VvG9Gwawiuo2NGJSTeLGn8BeBZW1C42oMj/QcW16Pus1xWcVvMdT0tyGuuj
QjqWH3VBVCtbPh6908/n/zuCSv2L0V1bL4JaJCv7eXH/1xw5h9BVvTDSY1UUZqHZ
F/fJuBcQYuiPDSSKKhG39jWvYql015P+ztSzWY7fVAKgejhN5qco+Bj8qsqZ3O6T
LaLRR1xo5cepeJOxTFvZDZydsNzYsADFcex0kems9wFSx7MS5M3ZchZDuTvrlsHo
cdbRE/Wkb+lCjPybPAbFReT3lzyP0uUp5ppA56omR+tP3HeNqkw9M5k1dswJcix4
vx4+PZiSE1QjkQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:51 2026 by rpki-client