Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: JmfNgHp8GwSBEZpLaVHnsgBZsAe6oZe54hHz9AvTfBY=
Subject key identifier: D2:0E:E5:B3:D6:5A:80:71:5F:E2:C7:2A:C2:19:94:C8:D3:6A:81:26
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019DCD86B5CA87E3475A0410FB11D97552DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 18E7
Signing time: Mon 27 Apr 2026 06:00:50 +0000
Manifest this update: Mon 27 Apr 2026 06:00:50 +0000
Manifest next update: Tue 28 Apr 2026 06:00:50 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: h9dqdX2ksMFsmobz4BxaFWec861hkrRvUqWAL80ZxIY=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
5: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
6: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
7: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
8: y_I-Rx6c6ZO5cg0hshn5JRXp8OQ.roa (hash: /H74JIaGZ/O6ji1TsDEo7znyzAE5IDXwnYg53gQ9tCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:b5:ca:87:e3:47:5a:04:10:fb:11:d9:75:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Apr 27 06:00:50 2026 GMT
Not After : Apr 28 06:00:50 2026 GMT
Subject: CN=d20ee5b3d65a80715fe2c72ac21994c8d36a8126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:2c:ae:13:11:ca:af:30:cf:74:ac:bb:84:
7b:12:26:5a:97:ad:dc:f6:c8:5f:e5:86:6f:be:09:
ae:33:08:e4:ed:a8:9f:f5:8c:3c:31:23:4f:77:84:
80:d3:18:7b:63:07:de:75:b9:1b:86:8c:21:e3:4d:
8a:ca:e2:c4:8b:33:5a:21:f0:eb:7a:ae:39:30:80:
3d:13:14:87:b1:f6:2b:05:fe:4d:61:55:3f:e0:8f:
d9:54:90:d5:29:c0:29:6c:e7:fa:e9:fd:9f:03:b9:
4f:cc:e7:a9:e4:3a:e6:5a:9f:13:3e:1c:03:4d:e9:
64:78:dc:a3:27:54:b6:1e:ad:62:bc:77:cc:5b:0d:
84:14:66:30:ea:d8:5d:5c:d1:23:3e:f3:68:c0:c0:
c6:71:8c:8e:db:4a:b5:24:c0:ea:40:f9:ca:1b:e9:
52:ce:14:f1:a6:01:f4:d0:57:d4:f6:25:f1:6e:83:
23:63:ee:de:1b:90:b4:73:20:f9:45:a0:e9:93:75:
ea:c3:30:f5:11:50:48:77:10:0a:20:29:a0:b0:ed:
6b:af:35:5e:74:f4:bc:19:a7:25:1e:d6:d4:ac:e9:
dc:c3:c6:c2:99:95:0e:c1:78:c4:57:d5:ed:8f:01:
37:20:fe:14:e2:77:39:0d:c8:52:60:27:e7:4c:4a:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:E5:B3:D6:5A:80:71:5F:E2:C7:2A:C2:19:94:C8:D3:6A:81:26
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3e:06:8d:d1:60:d3:32:55:33:90:bf:da:de:ae:11:50:b3:
11:cc:01:9b:81:9a:99:cc:4e:cd:f8:d6:48:e3:14:e9:0d:79:
10:6e:74:d3:35:08:52:c3:6a:ae:a1:db:51:32:70:1f:1c:f6:
fb:da:2e:67:5e:7b:25:48:1d:22:99:52:c1:ff:f9:f4:b2:97:
45:7d:81:02:cf:3d:fa:71:2e:97:0b:a0:15:78:7e:62:a2:a7:
46:08:ad:96:96:04:cc:d9:45:19:e7:bc:7a:83:97:00:31:2f:
64:fa:ec:67:37:8f:cc:62:08:f8:47:b0:f2:d9:f0:dd:09:aa:
13:34:3c:49:e5:e7:e7:e7:81:2e:f3:0f:d2:94:ca:21:9b:9e:
f8:d2:0e:82:b7:b8:0c:ac:c4:2d:0f:b0:61:ee:e2:5f:a2:3d:
ee:06:b2:32:76:e6:05:d5:30:5f:94:6c:d6:d6:53:71:99:20:
d5:fb:f2:8f:66:43:f6:e7:db:6d:91:5a:7d:dc:11:72:4d:0f:
f3:20:20:94:25:b6:e9:94:7f:7c:3f:aa:9a:c4:64:2d:65:84:
9a:6e:c1:59:f6:32:ab:15:4d:48:55:25:16:4b:3f:9c:4b:0a:
13:66:7e:80:0e:f6:79:8d:24:40:55:97:cd:d6:74:c7:83:85:
d5:95:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:23 2026 by rpki-client