Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: vNDUF6T6GCJVQcnTbx0FL6Pa4R5Uo2GQjPC4RelfJoU=
Subject key identifier: 0D:A4:9D:9B:41:6B:DE:1B:07:C4:B3:08:CF:26:A4:54:B9:52:EA:8D
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019E30723A9F9490294F21621E6B37E9A211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0EFD
Signing time: Sat 16 May 2026 11:00:52 +0000
Manifest this update: Sat 16 May 2026 11:00:52 +0000
Manifest next update: Sun 17 May 2026 11:00:52 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: Zr+k9MPcTKR9KkUjpbg2kf5+9vdBAs/Es6S8ZetAX18=)
2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:3a:9f:94:90:29:4f:21:62:1e:6b:37:e9:a2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: May 16 11:00:52 2026 GMT
Not After : May 17 11:00:52 2026 GMT
Subject: CN=0da49d9b416bde1b07c4b308cf26a454b952ea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:cb:26:49:b5:f3:6a:d3:74:2b:02:89:a1:
a7:57:54:da:41:53:d8:9d:f5:71:f2:23:b7:c4:04:
b1:70:6e:2a:44:b4:51:22:8a:c3:d0:c0:0a:2d:28:
a6:ea:88:42:50:88:11:80:a2:ed:bf:31:06:92:c4:
81:eb:44:dd:f3:80:88:ce:5f:4c:cd:95:7d:b6:8c:
82:48:67:ef:51:c5:d7:47:0f:9f:40:a5:6c:4e:9d:
be:83:3a:28:36:c6:ae:5d:81:42:be:88:7b:c4:5d:
58:27:29:94:c3:c6:b4:91:5c:7d:e7:08:2d:95:c6:
e3:71:f3:35:b8:3e:ab:ef:1d:a9:92:9b:67:3f:8f:
dc:06:88:66:54:c3:c8:ea:18:51:5f:86:e7:df:1c:
60:7c:59:6b:03:01:35:57:7e:90:a8:eb:8b:48:58:
6a:b1:c9:9e:1b:d9:87:50:8a:bc:27:cf:80:47:67:
fa:26:f6:07:26:90:8e:9a:4a:58:e4:ca:17:e7:28:
8c:21:f4:05:e5:83:e4:49:40:59:fc:40:78:03:df:
35:7e:56:6f:f1:4e:25:fe:4e:d8:62:f2:69:ba:0c:
80:88:01:41:5b:b6:ff:a4:d5:a8:3c:78:f2:e0:44:
9f:f6:1a:44:30:5f:76:7c:80:e8:55:1d:1e:de:ea:
f5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A4:9D:9B:41:6B:DE:1B:07:C4:B3:08:CF:26:A4:54:B9:52:EA:8D
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e9:83:14:fe:8b:f0:3b:34:a1:ec:2a:d0:7d:9a:91:e7:00:
1b:95:a4:22:3f:8f:6c:90:ed:27:ac:da:c3:0e:ca:07:74:95:
f4:a4:02:b2:40:99:ef:31:ab:38:eb:50:da:a3:ef:13:ed:2f:
2e:fb:bb:2d:07:a5:eb:ed:b4:b1:6d:e3:a3:15:5d:b9:33:fe:
1f:c8:49:28:ee:6a:aa:dd:c8:1f:c1:e0:62:d4:5d:0e:0d:cd:
e6:aa:9b:12:e2:40:39:b5:a1:c5:7c:ac:7d:fa:91:8e:68:ad:
3c:86:18:e1:e2:73:75:6a:1e:82:58:8b:0d:0f:f9:b8:f7:a0:
03:7d:0e:70:4d:a2:2b:cc:a7:93:3d:41:85:ab:eb:92:4f:87:
eb:66:d0:16:59:41:22:4d:5f:c9:79:e1:6f:7d:e6:3e:e3:60:
85:b6:1d:09:2a:33:b0:38:9a:3f:f2:0f:f9:6b:21:a0:38:af:
43:66:e5:13:34:dc:75:ad:0e:35:27:11:f5:62:ef:f2:82:3d:
26:2d:57:8a:e9:88:f8:54:9d:49:a1:4b:3c:09:ec:64:7b:d9:
fd:49:42:55:95:1b:7d:23:33:6d:a1:f2:07:b6:1d:7a:ac:29:
80:f1:81:ed:ba:2e:45:4a:9d:9d:16:af:a0:50:0e:55:82:09:
21:3d:1d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:27 2026 by rpki-client