Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File: 0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier: dnFXDJRaenHIBmLLRnoU8nBChQflT9OgurNQVQHH9r0=
Subject key identifier: E9:29:5C:2B:56:E3:52:1B:63:E7:19:B1:D2:0F:B9:0B:C5:F3:5B:71
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial: 01A13F70A9A7E1E26F34DE147F77A972801D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 12:01:50 +0000
Manifest this update: Thu 15 Oct 2026 12:01:50 +0000
Manifest next update: Fri 16 Oct 2026 12:01:50 +0000
Files and hashes: 1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: bqgdksarz2x+P7xsxRVCAhEy81TfEVwb6rbQ98lhz0w=)
2: GT8HhSbeb_3esKlX1octkP1xuGA.roa (hash: osq6NafXIn3g0iTu717OFvhm5sqA/xI35v+FmjAzOiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:a9:a7:e1:e2:6f:34:de:14:7f:77:a9:72:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Validity
Not Before: Oct 15 12:01:50 2026 GMT
Not After : Oct 16 12:01:50 2026 GMT
Subject: CN=e9295c2b56e3521b63e719b1d20fb90bc5f35b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:dd:24:90:2b:bb:de:1a:ad:f1:12:89:36:
43:48:b5:2a:f1:30:70:82:f7:b0:b7:17:0a:62:0b:
f9:0c:22:3e:da:41:90:33:31:79:1f:f1:ec:f7:6f:
70:50:31:55:60:72:8b:98:8b:13:d3:90:07:ce:d9:
e9:c1:ec:2b:de:2f:07:9e:79:1a:25:bd:90:99:61:
e4:11:ba:6f:55:51:ed:62:a8:17:b2:26:e7:eb:f2:
29:f9:74:2e:9b:96:06:70:20:15:89:1b:6b:0a:f6:
e4:9e:cf:e3:06:c2:c1:d0:d9:cc:a3:53:19:66:bc:
58:0d:81:14:04:7b:66:60:9e:d4:df:f5:28:ba:c8:
10:92:1f:5a:d4:b7:98:16:0a:95:bb:07:64:1f:48:
38:66:07:4a:4c:8d:43:34:a4:65:6c:0e:a5:3f:1a:
88:9a:f3:58:73:08:bb:43:18:d8:2d:7c:b4:fa:97:
2f:2d:be:20:18:2c:98:20:3f:4a:52:98:93:19:bf:
d2:f5:94:5e:47:d4:2a:78:bd:02:43:b4:25:41:39:
9c:1b:1a:09:8b:9a:c6:e4:a0:c7:b6:53:bb:bc:7b:
55:b6:9a:60:e4:b0:70:6f:b9:eb:ac:a5:30:7c:25:
71:9e:96:5a:01:f1:55:45:6f:e2:13:8a:a0:4b:95:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:5C:2B:56:E3:52:1B:63:E7:19:B1:D2:0F:B9:0B:C5:F3:5B:71
X509v3 Authority Key Identifier:
keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:3f:cf:13:ef:67:f1:8d:25:9c:e3:64:44:b3:6b:c9:f8:
0b:a9:c0:99:4d:96:b0:59:30:b6:c0:2a:2a:16:c1:eb:fc:78:
bd:ee:f2:70:5b:52:3e:e4:00:dc:ed:09:e1:f6:d3:d6:b0:4e:
96:ab:34:e0:63:0d:94:61:3d:ac:2a:20:c9:95:7c:56:11:6d:
71:0a:25:b1:4c:99:66:49:20:70:da:71:33:ea:86:2f:d1:c7:
79:65:8e:c7:75:df:cd:dc:67:a6:e7:ad:3a:f4:58:c1:8d:a5:
b9:e6:08:7c:92:7c:45:5d:ba:30:93:a5:22:45:46:12:4f:37:
29:a0:84:a0:e8:94:94:98:c0:4e:6c:5c:33:6f:5b:e0:76:e9:
4f:3d:89:4c:b2:b0:a5:e1:d7:d6:d9:39:1a:f1:a3:b3:b8:85:
ef:e3:6c:84:e1:21:ac:fd:07:f2:3a:69:a3:39:66:59:6b:18:
c6:38:4f:21:b7:18:05:76:f9:35:a7:a3:cb:5b:de:70:a0:4b:
21:5c:ba:3f:11:e4:50:f2:e3:37:d1:66:da:6a:69:73:eb:67:
9f:ec:05:d4:c2:93:e1:56:b4:7e:f5:8f:71:a6:d7:0d:53:c7:
43:b4:3d:c0:e4:23:ac:53:99:f9:42:7c:71:c7:af:16:7c:d0:
37:18:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:30:06 2026 by rpki-client