Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
File: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft (raw, json)
Hash identifier: 7ZAh4uuOFlbw3VtXgW4y1iwnE9TciFeLTcRnuJwTL10=
Subject key identifier: 69:3B:3F:15:73:E5:9B:7F:F9:A5:79:12:A4:30:95:5A:1B:79:FA:A4
Authority key identifier: D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
Certificate issuer: /CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Certificate serial: 01A03FA9524E3D95F15F1E0FD3418F5E637E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
Manifest number: 0163
Signing time: Wed 26 Aug 2026 20:00:56 +0000
Manifest this update: Wed 26 Aug 2026 20:00:56 +0000
Manifest next update: Thu 27 Aug 2026 20:00:56 +0000
Files and hashes: 1: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl (hash: hp8kgulXDqwW6IDUQxLP+BGv8lufNG++nrd9PVlrfNY=)
2: de_jsj8CpSljIjcGiO4A6ZRhO1I.asa (hash: N/rOb5DkyhPin/riPrKSvflYTWR9QweMJOMrP3OE2iQ=)
3: r9tO5dOM7W3cJ0IAJV4a9_UjU64.roa (hash: 7p0HLcZz+BpTWdYxVEea5xby6zTSJ5cYhN5NEaQQ0nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:52:4e:3d:95:f1:5f:1e:0f:d3:41:8f:5e:63:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Validity
Not Before: Aug 26 20:00:56 2026 GMT
Not After : Aug 27 20:00:56 2026 GMT
Subject: CN=693b3f1573e59b7ff9a57912a430955a1b79faa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:44:4e:c1:a3:45:1e:47:d9:c7:40:34:5e:
aa:0b:1f:30:50:77:c7:f6:2b:69:95:b1:d5:97:b7:
a3:9a:92:e4:a4:5e:8d:71:46:8e:87:ea:34:ec:66:
42:af:1c:b6:59:29:b3:b6:96:ed:44:62:0e:75:6a:
43:70:90:80:78:31:74:b3:c0:c2:49:e3:27:fe:1a:
b8:a4:90:13:73:d2:a4:a5:8d:e3:5c:97:c9:1c:44:
8a:47:c8:ce:7c:01:b0:d0:56:a5:64:8c:80:de:68:
79:4b:f4:27:7d:40:98:d6:90:a8:9b:a1:15:33:0c:
e0:48:0d:52:d3:a6:d5:fb:83:1a:b8:f5:8f:e1:72:
96:34:b8:23:dd:fe:dc:84:03:7d:fd:00:8a:c0:28:
d4:94:be:50:10:83:69:13:cf:57:eb:87:ab:4a:5d:
df:6d:fa:38:52:f6:42:38:ff:5d:df:67:de:fe:3b:
06:66:fc:6e:90:b6:21:6e:04:21:b3:79:cf:48:e3:
08:af:ae:73:0c:50:fc:0c:f7:ed:48:d7:63:88:b6:
ea:50:a6:28:b8:28:da:f2:37:f7:fb:04:a3:21:54:
16:de:15:54:0c:a2:f2:e8:63:85:c9:59:d1:40:c6:
05:73:68:9c:82:c1:2e:ab:7a:09:e0:f6:18:97:60:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:3F:15:73:E5:9B:7F:F9:A5:79:12:A4:30:95:5A:1B:79:FA:A4
X509v3 Authority Key Identifier:
keyid:D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5a:c1:86:63:b2:0f:92:c5:d5:e7:6b:14:96:6e:28:e6:a1:
49:e8:c3:c6:c4:78:5e:f6:f1:f5:fd:9a:a2:52:7c:3f:a5:03:
fc:d3:d9:e8:b1:37:e6:29:89:e3:0f:89:7f:d3:b4:7e:c3:2b:
5d:e3:d3:48:77:17:f6:49:26:69:fc:1e:74:9e:60:45:d3:ff:
48:4c:9f:47:da:e3:1e:81:9b:cc:30:38:8f:7b:b6:6b:e0:da:
71:96:f3:e6:1e:f3:63:36:d0:29:1b:3f:5b:5c:23:88:c7:9b:
73:ec:a5:ac:27:63:2a:55:af:2b:b5:a8:61:fe:96:18:2e:a8:
ab:8e:0e:2d:30:37:af:32:b4:94:b6:1b:3c:58:ef:a8:ef:51:
21:d2:ea:6d:47:9a:28:44:8a:f6:c3:46:8d:bb:74:f5:4d:4f:
86:d2:37:52:b8:06:08:37:05:0d:f0:8d:64:00:7a:01:a2:28:
43:81:93:92:15:f6:b7:4f:52:4d:8a:81:4d:b0:8c:aa:67:c9:
81:0f:4a:29:6d:1e:f7:4b:0f:21:59:07:0b:83:62:eb:c9:48:
39:7b:c7:a4:6d:49:16:03:bf:f9:d7:5a:63:aa:5b:ad:40:67:
b9:80:f5:9d:2a:d1:24:3a:02:b8:fb:72:3e:df:9c:ab:8a:8d:
a4:e8:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:30:34 2026 by rpki-client