Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: hqT0h5RFjNDhFRZMuEWJeM3MZsTC6Pir91xWJ0Gjl60=
Subject key identifier: 0E:59:94:5C:73:7F:E9:1F:60:4C:B0:EA:76:43:FA:C9:7C:93:7E:9F
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019EB7336BFADB8AA6F5D739CB6D3FC876BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1960
Signing time: Thu 11 Jun 2026 15:01:00 +0000
Manifest this update: Thu 11 Jun 2026 15:01:00 +0000
Manifest next update: Fri 12 Jun 2026 15:01:00 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: otkdhuLJXqvWFo/KImAjHMGzMCvOPM6YLvUMRwJU19E=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
5: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
6: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
7: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
8: y_I-Rx6c6ZO5cg0hshn5JRXp8OQ.roa (hash: /H74JIaGZ/O6ji1TsDEo7znyzAE5IDXwnYg53gQ9tCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:6b:fa:db:8a:a6:f5:d7:39:cb:6d:3f:c8:76:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jun 11 15:01:00 2026 GMT
Not After : Jun 12 15:01:00 2026 GMT
Subject: CN=0e59945c737fe91f604cb0ea7643fac97c937e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:bb:df:a3:f1:cc:13:35:94:9b:ce:bc:4b:
e3:1a:8d:4f:6b:b0:ed:d8:f9:11:14:78:af:c1:c5:
2c:10:fb:88:a9:29:0e:4a:c7:0a:0b:e1:bb:4e:63:
26:78:71:da:66:5b:f6:41:87:ad:c6:f7:f1:bc:64:
6c:00:4d:da:c5:3c:63:f3:f6:bb:de:c7:f1:9c:df:
7c:d6:16:54:9a:89:65:9e:42:1a:43:c5:a1:ff:f3:
2f:29:bd:a5:fa:4d:ce:7e:74:64:b5:c8:23:0c:fc:
b2:a8:42:43:cc:53:be:58:2d:38:62:1b:46:2b:2d:
ba:d2:c8:bc:f9:08:e2:b1:ee:94:55:5a:84:5e:f1:
66:94:de:ed:44:9b:ff:1b:b8:be:f2:31:83:6e:9e:
98:62:a4:be:72:90:42:df:17:11:8f:7b:90:37:88:
3e:97:70:21:f8:86:54:4a:fe:8c:89:2d:16:24:97:
99:32:48:cd:e7:06:14:33:33:1c:1c:5c:63:82:74:
16:84:78:8d:f3:a1:ab:f9:48:6e:64:85:63:40:b4:
71:b1:36:b1:e7:f1:49:37:b2:c1:30:c0:dc:e6:64:
84:c6:57:3f:51:a1:cc:1e:17:b3:fa:94:db:4d:fa:
15:6d:8f:9c:7e:ab:95:94:d1:8f:a3:ba:44:03:7a:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:59:94:5C:73:7F:E9:1F:60:4C:B0:EA:76:43:FA:C9:7C:93:7E:9F
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:19:c9:40:9f:7f:00:8c:50:44:64:14:08:9c:f0:44:79:2d:
1a:6b:92:d9:9f:8b:fd:78:b3:11:bd:b2:50:bc:f2:4a:3c:5d:
60:dd:47:52:a5:89:cf:9d:40:50:da:0b:62:8a:27:b8:6e:b5:
d7:ec:fd:6d:e0:9e:a4:d8:a3:33:04:ba:ca:b4:20:21:fd:82:
55:fa:8a:45:ee:03:f6:5b:cc:0f:6f:8e:cf:8f:a6:1b:e1:aa:
cb:6f:e0:98:c4:1d:9a:84:a8:4d:e2:27:c8:17:45:9e:f0:25:
af:05:88:1a:e3:ba:33:ba:8d:15:1c:8b:5e:27:91:35:27:18:
e8:a0:7c:36:f3:1e:43:4c:ad:0a:56:4a:3b:84:e5:a1:0f:93:
d9:ae:f1:ad:b4:8d:f7:f9:67:5a:26:69:9d:0a:33:24:53:23:
03:7b:27:61:a2:0f:db:bd:6e:14:cd:44:0c:d1:04:1e:0f:95:
6c:e6:a6:32:03:3e:a4:cf:4e:de:cd:b9:77:87:ea:02:c6:1d:
34:8d:4b:95:76:6b:59:d3:e7:45:ff:79:c5:84:a2:cf:32:b0:
60:64:50:55:ed:b1:47:25:68:10:28:05:2c:b0:33:6d:85:5f:
3d:3b:c5:8f:d8:ef:a2:c1:11:dc:6d:d9:5b:79:03:3a:65:dd:
02:8a:c0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:07 2026 by rpki-client