Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: P037cvz35mYfwtbr7uit/pJVbE0fPQWABvgqC5vHdQs=
Subject key identifier: 64:88:39:8A:67:3B:3A:35:7C:E4:1D:FD:F7:EC:1C:7B:55:7F:DE:97
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019CE3DA192C2164AC9FC4E50A4C404793E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 186E
Signing time: Thu 12 Mar 2026 21:00:47 +0000
Manifest this update: Thu 12 Mar 2026 21:00:47 +0000
Manifest next update: Fri 13 Mar 2026 21:00:47 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: /QKY4GmkcLdqTsIla78/iagwSXUX285AAlsqZEFSSgA=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
5: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
6: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
7: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
8: y_I-Rx6c6ZO5cg0hshn5JRXp8OQ.roa (hash: /H74JIaGZ/O6ji1TsDEo7znyzAE5IDXwnYg53gQ9tCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:19:2c:21:64:ac:9f:c4:e5:0a:4c:40:47:93:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Mar 12 21:00:47 2026 GMT
Not After : Mar 13 21:00:47 2026 GMT
Subject: CN=6488398a673b3a357ce41dfdf7ec1c7b557fde97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:58:51:b9:c2:89:94:ec:84:05:fb:e0:0b:5f:
83:d9:b5:a1:94:45:99:6c:95:d8:be:45:57:e7:a1:
73:e4:33:5c:8b:67:90:ef:8a:34:5e:02:94:13:51:
d9:48:19:fe:e1:b4:d8:5c:81:2f:ae:e4:af:c4:fd:
b2:07:fb:bb:71:70:5c:81:62:ed:e4:8f:82:72:7d:
e5:39:98:7a:a9:2f:4a:12:60:25:32:c7:04:bd:98:
d9:ea:b7:9a:8f:8f:fe:d2:d2:35:1c:d0:c5:a8:a5:
95:4f:69:4a:17:f3:06:d3:fd:f9:f4:10:e3:9a:21:
60:e5:6c:e8:82:15:7f:c7:b0:cd:b4:03:b2:82:48:
0c:22:68:f6:9a:0c:77:ea:cf:eb:df:69:54:4e:00:
72:c5:15:39:2c:8e:94:83:e2:46:1f:8e:f9:fb:63:
24:2a:5c:f5:a3:75:a2:c3:fd:40:42:fb:85:7d:7c:
f0:49:97:f6:fc:08:29:05:6b:fb:9e:5c:b8:5d:3a:
96:eb:ef:98:57:8b:bf:fd:ee:29:04:be:dd:f0:fe:
ed:72:da:f1:1c:5e:8a:dd:70:44:83:d9:c4:58:27:
23:c4:11:38:d0:b7:ab:55:51:2e:fa:0e:44:15:7a:
d2:cb:f5:64:95:6e:0c:08:eb:4a:79:21:aa:34:5e:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:88:39:8A:67:3B:3A:35:7C:E4:1D:FD:F7:EC:1C:7B:55:7F:DE:97
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8c:fe:01:f7:7f:af:89:bc:eb:c7:32:9e:25:97:1f:ae:54:
b5:0e:e7:22:9e:72:72:bd:c0:59:77:53:60:14:62:b6:3b:d4:
1a:53:fa:9d:e2:53:7c:cd:90:4d:e7:84:a8:dc:2b:c7:11:e4:
2d:b3:42:dd:43:9c:2e:bd:4b:30:95:e7:c5:57:57:ad:42:13:
36:4f:cb:ed:a1:81:04:6a:25:9d:bb:fe:c4:5f:d4:45:29:a4:
0a:49:c7:f9:38:12:50:ea:e6:1b:b7:09:1f:5b:0b:6e:c8:2d:
d2:3c:5e:81:26:e0:81:64:44:7a:32:c7:47:5b:f8:0b:55:a0:
ec:61:fe:90:fe:b6:5f:1a:38:00:63:fb:15:22:9a:29:ec:06:
c5:f6:18:c6:ba:4a:bd:25:9b:06:12:54:5b:31:20:b6:82:b6:
dc:b0:87:07:0c:be:18:e9:28:67:35:67:b6:de:10:dc:90:85:
e3:9f:03:ca:7f:f6:40:70:86:d7:09:03:85:2d:6b:89:bc:c2:
d2:1d:a3:07:18:c6:2f:c0:c1:51:54:01:39:f6:fd:37:ef:66:
35:50:bc:99:04:f7:f7:36:32:68:9e:3b:78:51:23:3c:79:e9:
3e:58:13:11:50:71:2f:fc:3d:05:8d:ee:1d:a3:6e:1a:15:ed:
3f:49:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:06:07 2026 by rpki-client