Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: 5NdBVa14XglkzjugTuaXkF0Itod2EE1EwYb2gPeFuQY=
Subject key identifier: F5:87:4B:CB:D8:D8:12:9C:C2:55:8B:4A:2B:F1:EC:91:B4:BA:5E:F2
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01A089E7F29E775C54EC39297D2C2DEFD193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1A52
Signing time: Thu 10 Sep 2026 06:01:14 +0000
Manifest this update: Thu 10 Sep 2026 06:01:14 +0000
Manifest next update: Fri 11 Sep 2026 06:01:14 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: dQJ5egmvRUkUI5s+7S25sSLf6EQdvqB7LSskcS96Aik=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa (hash: lZPJ4+UTAfzaBn1qvEutfPFu9s5OmtvAwYfd82jbQxI=)
5: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
6: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
7: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
8: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
9: zX39p8hPMLMogAvQxpt7zlkHVdA.roa (hash: bJcnLltJJ72buWp7XshBBRT58VrzJdJnDzL7OsGRoZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:f2:9e:77:5c:54:ec:39:29:7d:2c:2d:ef:d1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Sep 10 06:01:14 2026 GMT
Not After : Sep 11 06:01:14 2026 GMT
Subject: CN=f5874bcbd8d8129cc2558b4a2bf1ec91b4ba5ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:b4:5c:64:33:7c:e6:71:2c:fd:b7:33:6a:
56:74:d3:51:c1:2e:f8:79:ac:91:ba:5d:de:68:7d:
a1:b6:49:e5:c1:f8:6a:8a:1b:51:55:0c:45:10:7f:
a2:05:4f:08:b1:60:af:20:ac:3f:01:d9:ca:3f:6d:
aa:af:fa:1c:17:7a:e2:74:9d:ec:ae:7a:2b:33:b2:
b0:16:d6:b8:f1:aa:b8:7a:9e:2a:49:93:c2:7c:1e:
26:e3:3e:4f:c1:b9:e2:94:75:7e:de:23:04:d0:47:
d6:dc:6d:05:24:e2:34:fc:1c:b1:a2:b5:09:d1:61:
89:14:7c:f5:1b:63:f4:29:ed:fd:98:97:6e:41:bf:
a5:03:f6:1d:63:46:aa:6f:10:bd:d3:2a:f8:77:b0:
07:62:75:2d:41:af:11:48:71:22:a6:ef:3d:52:03:
3c:5f:2e:29:1a:f8:49:aa:0d:5d:1b:8b:bc:c6:7a:
ae:48:42:69:41:de:5c:7c:ac:da:80:03:3d:75:2e:
92:30:4e:b6:80:81:b8:cc:11:fd:ca:49:ae:d7:f0:
4c:ca:33:40:b2:23:4c:e9:b2:ae:66:df:94:78:d4:
d2:c6:bb:85:20:58:af:6c:45:03:3e:ce:70:a7:4b:
47:8c:eb:2a:e2:5a:04:90:fa:34:ac:6c:f0:54:d2:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:87:4B:CB:D8:D8:12:9C:C2:55:8B:4A:2B:F1:EC:91:B4:BA:5E:F2
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:57:cd:1f:e9:89:10:ce:aa:07:da:cb:5d:82:12:51:32:67:
65:78:fd:07:69:cc:1b:d0:bf:a9:7b:19:a3:47:2b:a7:bc:c5:
1f:35:c7:f1:f1:83:4f:66:3e:5c:2a:3d:68:68:ec:07:03:61:
8b:a9:0a:1e:e8:f2:f0:68:b5:f6:1c:76:2e:23:e7:8b:67:d1:
26:6b:7c:05:3f:c0:3c:ad:01:c5:19:08:71:7d:ea:35:77:89:
e5:d8:cf:9d:7e:a7:02:61:1f:ed:07:55:c7:b0:b3:80:54:ec:
63:84:b1:bf:9e:ca:77:26:5d:be:40:76:a9:08:8b:5d:72:0a:
b0:64:a8:5f:c9:02:86:61:b3:e8:e9:b5:ee:c3:a9:34:6f:c8:
fd:48:2c:f3:1d:3d:b5:9e:ad:8c:b6:ec:25:9f:36:e1:24:e0:
3a:0f:40:aa:d3:1f:78:57:9a:6b:6d:ef:21:79:7c:e8:a5:37:
c7:1d:28:a2:62:4a:b8:8b:5e:2d:db:4a:4e:65:94:3a:73:68:
d7:eb:f8:da:64:0e:e8:2b:85:83:50:45:70:70:d2:8d:20:b8:
04:0f:79:3c:bf:8e:18:e2:d3:93:df:00:5c:ea:69:a4:c7:ac:
27:ed:87:03:a1:ee:01:8c:f9:2b:ef:98:34:bb:60:d6:a5:8c:
5a:86:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:03:54 2026 by rpki-client