Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: gfS5dyXNrl8rn6OC0lr1dqBBq7pqm3HbU1s9EwGAbTs=
Subject key identifier: B9:41:DE:06:B8:FD:6E:BA:12:EE:BE:5D:D5:8F:31:84:BA:33:08:64
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019D3941415277EBCEAF4A8897A82CBD3445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0E7D
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: /RUOiImOCanACAHtDYCY+tUT9iLzTI2s2k2y0IO28RA=)
2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:41:52:77:eb:ce:af:4a:88:97:a8:2c:bd:34:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=b941de06b8fd6eba12eebe5dd58f3184ba330864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:6f:1e:4b:55:a0:99:39:a3:d7:53:bb:91:
30:c4:2f:f8:a8:3a:c0:a6:08:b0:f9:04:ea:ec:05:
d3:05:0a:4c:29:ab:5f:c1:1c:ce:e2:ea:85:bc:7c:
d4:01:6f:14:54:68:ec:3f:ad:0a:33:c3:ca:29:29:
f1:86:fb:dd:80:d5:d8:18:f5:da:00:67:a1:10:96:
47:a7:74:b8:e6:1c:7c:5b:44:ce:0a:48:21:75:3f:
6b:38:af:1e:d4:2f:58:98:94:8e:eb:70:12:3e:c2:
41:8c:24:44:57:37:41:d2:ec:ca:65:46:6e:b4:40:
c1:fb:26:a0:81:a3:ec:d2:4b:98:ed:22:76:f9:54:
f3:fa:91:24:f3:50:45:d0:49:93:bf:b4:a4:af:e9:
81:bf:19:50:ef:81:aa:74:51:36:7f:93:f5:d2:90:
f9:91:a4:c7:b3:da:d0:8b:63:9b:44:e5:b5:f5:8d:
f0:16:d0:8e:3a:69:b1:bd:67:b6:81:48:08:d2:f9:
11:72:e9:32:9e:1f:d1:c1:07:a7:32:3c:de:80:90:
a0:45:fc:2c:e6:10:3e:a8:2a:70:87:31:85:59:e6:
50:03:e3:ec:06:87:2d:25:01:64:5f:48:74:bf:02:
f3:32:8a:7e:96:d1:37:b6:ac:c2:1c:7f:e9:18:5e:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:41:DE:06:B8:FD:6E:BA:12:EE:BE:5D:D5:8F:31:84:BA:33:08:64
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b0:9f:cf:6d:0f:26:34:41:8c:3d:a0:d2:3e:23:e7:d8:83:
26:04:0a:57:e6:62:3e:b9:c5:10:f2:95:b9:08:23:d5:0b:d6:
f0:88:1a:f7:0d:83:e5:55:fc:5d:a4:f3:5f:ce:af:6e:4c:e3:
5f:d5:c7:96:dc:52:40:72:ef:2d:49:49:bc:5b:37:4c:39:62:
97:70:90:33:e1:0e:98:d1:ef:8f:27:eb:c0:7e:de:17:6c:e3:
eb:4e:85:aa:4c:78:cd:29:eb:ca:37:b7:ae:da:56:5c:58:4d:
5e:26:21:74:6f:0a:76:44:54:8b:60:19:0c:ac:35:34:13:72:
65:5e:85:91:f5:38:e1:5b:b0:4e:83:b5:66:3a:2c:a8:3d:7c:
d2:10:ae:22:01:b0:8a:d4:d4:e7:b5:c6:8d:80:6f:44:f9:2e:
04:1c:b6:04:b5:65:b7:c6:9c:6f:52:c0:e6:01:63:f9:a9:3f:
e1:bb:94:62:69:5b:dc:cd:f1:a0:43:8f:be:b7:4e:51:37:53:
ba:d9:87:b7:37:ff:df:0d:f7:e2:6f:9a:f1:9f:ac:d0:e7:91:
f5:17:b6:3b:62:2e:a8:c2:3f:2c:78:31:0c:d8:e7:b6:8d:44:
d3:ac:76:37:46:79:b6:71:76:ec:6f:1c:89:73:07:da:bc:c4:
46:d3:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:12 2026 by rpki-client