Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: aruoz5/uukpn4YahnNA9kMzxLPnFL9GdidvQPGOVb88=
Subject key identifier: E7:94:95:35:90:07:73:C3:60:67:67:7D:8B:B4:8A:56:04:80:28:78
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01A1739421DCE2D9B358C535A1D7911BEA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1ACB
Signing time: Sun 25 Oct 2026 15:00:50 +0000
Manifest this update: Sun 25 Oct 2026 15:00:50 +0000
Manifest next update: Mon 26 Oct 2026 15:00:50 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: k5SlSLKkvO7UHyDwrTScYRqqvQlI6x90uXP/f+rU528=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa (hash: lZPJ4+UTAfzaBn1qvEutfPFu9s5OmtvAwYfd82jbQxI=)
5: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
6: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
7: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
8: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
9: zX39p8hPMLMogAvQxpt7zlkHVdA.roa (hash: bJcnLltJJ72buWp7XshBBRT58VrzJdJnDzL7OsGRoZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:94:21:dc:e2:d9:b3:58:c5:35:a1:d7:91:1b:ea:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Oct 25 15:00:50 2026 GMT
Not After : Oct 26 15:00:50 2026 GMT
Subject: CN=e7949535900773c36067677d8bb48a5604802878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:ea:e9:17:eb:e7:58:2a:82:2a:40:f4:13:
95:4d:c9:4a:0a:19:f8:bf:7c:34:6d:5f:e4:62:89:
5b:3d:08:87:ab:0d:83:c0:e2:87:13:75:40:55:e8:
bf:2a:48:dd:29:b9:8d:a4:fa:1e:b8:b8:b3:eb:9d:
54:9b:04:29:f1:df:c0:1e:84:e3:de:8b:35:01:6e:
55:ec:0c:82:a7:ce:c6:e5:55:c7:a2:2a:73:6e:4c:
45:9a:b9:8e:94:71:83:b8:0e:86:c6:f0:41:bd:25:
24:a8:dc:e9:ce:bb:fb:a2:1b:c1:12:e0:3e:32:dd:
87:16:aa:a9:b6:f0:64:72:56:d3:e2:eb:09:32:7a:
f4:ae:ea:57:e8:48:9b:76:5e:46:95:8e:a1:c4:9b:
2b:80:dc:92:f0:c8:dd:eb:b8:e5:8a:f5:ed:b8:6b:
75:82:52:60:61:f6:bd:a9:e3:9d:70:44:c1:99:65:
e2:e3:39:05:29:73:c0:04:70:3a:6b:26:84:0e:97:
4f:8f:96:9b:61:f7:52:72:6b:d4:33:e6:44:f3:ce:
41:70:89:06:91:5e:cb:22:cb:b4:ff:0f:c0:d4:44:
71:62:cb:a1:9d:ae:88:ec:e5:bc:30:ea:88:af:36:
f8:36:69:ef:ad:16:7a:82:9e:1b:fa:49:8c:f6:1d:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:94:95:35:90:07:73:C3:60:67:67:7D:8B:B4:8A:56:04:80:28:78
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8a:eb:95:d7:d8:b7:28:88:07:94:c3:20:b6:a6:97:bc:bb:
4f:92:d2:1f:3f:53:3d:7a:05:ad:79:b2:7c:91:6c:b3:09:8a:
62:20:71:30:b4:06:dc:4f:35:46:8a:0d:09:7b:35:82:83:a8:
8e:e2:11:a8:77:d0:0b:9a:14:58:b1:28:ee:bc:a3:c1:16:ec:
72:16:54:b5:59:97:e3:38:bd:73:ad:3b:9a:4d:a8:f3:e4:dd:
49:0a:73:b2:6b:f5:db:c6:90:95:2a:b2:38:f7:96:af:2e:40:
bb:ab:c7:06:b1:d3:fc:9e:f8:89:5a:46:02:60:eb:04:3e:70:
06:ed:17:12:22:80:8d:56:30:37:db:ba:e2:4a:bf:f5:7c:57:
44:65:ca:fa:4f:ac:09:d3:3c:e0:15:cf:97:54:6f:8e:4c:b1:
01:a9:22:03:d8:e5:ab:a5:75:fc:88:31:ec:43:7b:d5:54:ca:
a7:55:bc:8f:66:8a:16:04:b5:b8:17:d8:d4:6f:9b:10:6c:e8:
d5:9e:17:2c:a0:5f:3b:cf:72:3a:20:cb:a7:21:70:f3:1a:18:
93:e8:5f:b2:f3:d6:4e:21:58:63:81:f4:a9:57:e6:82:e6:cf:
21:bd:92:ff:6d:b2:d5:7c:c8:ea:4c:65:cc:41:b5:e2:10:c4:
00:33:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:54:35 2026 by rpki-client