Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: ZwHHz00weCPNBjNJsSxhopRuUH5bPc5EoNwVcfa1094=
Subject key identifier: E7:A5:B2:1A:85:B8:6E:DE:5F:C3:0D:ED:C7:43:35:3B:13:2E:6A:06
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019F1830EECB6B0A5B4502BF2570504D504E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0F75
Signing time: Tue 30 Jun 2026 11:01:27 +0000
Manifest this update: Tue 30 Jun 2026 11:01:27 +0000
Manifest next update: Wed 01 Jul 2026 11:01:27 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: 1b6zmbu9HW0tQk8ooo79+sYl/SctSdQRMFN/WXhjR3E=)
2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:ee:cb:6b:0a:5b:45:02:bf:25:70:50:4d:50:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Jun 30 11:01:27 2026 GMT
Not After : Jul 1 11:01:27 2026 GMT
Subject: CN=e7a5b21a85b86ede5fc30dedc743353b132e6a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1d:42:cd:55:91:60:3d:00:3a:00:21:7c:76:
69:65:00:3f:c9:32:5f:b3:ac:f3:6b:66:88:9a:c1:
67:18:81:62:a4:66:1b:24:9f:0e:ee:e0:69:6e:e3:
d6:49:83:c3:20:30:10:fc:af:12:15:02:f8:51:0b:
fd:46:c7:e2:80:82:1f:75:e3:e5:e5:27:ab:2a:8c:
03:8f:ae:42:05:ef:b3:27:b4:c7:ca:36:e3:83:8c:
48:7e:6b:12:77:3c:63:d9:b9:a0:bb:5e:e8:f3:b9:
a2:86:a6:77:eb:b9:23:a6:35:99:a0:f6:8c:10:ef:
f4:79:cf:a6:df:85:75:c8:b9:f6:63:89:20:07:45:
3b:53:3c:e0:ae:57:a6:e0:1c:49:5f:51:2b:ae:f6:
7c:d4:a7:b2:4d:31:ab:2c:04:cd:9c:09:1d:36:00:
08:2a:35:1c:83:78:a6:84:8e:be:18:ad:13:0c:a3:
53:ef:41:be:02:b5:72:ae:d3:14:ba:d0:4a:68:f4:
22:39:27:88:8c:a3:b6:8e:7a:c8:c0:08:b7:ef:7f:
3a:e1:a8:6b:3e:7e:9d:3b:22:86:a9:fb:9f:d0:1a:
3c:38:41:77:f9:ef:08:3e:78:69:47:9e:36:8f:65:
5f:02:32:0c:33:fe:ac:29:46:35:cb:65:f9:0b:6e:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:B2:1A:85:B8:6E:DE:5F:C3:0D:ED:C7:43:35:3B:13:2E:6A:06
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bf:20:9c:25:9e:86:3c:09:94:4b:97:fe:df:e2:c3:f0:67:
9c:cf:d8:c5:54:bf:40:0f:c8:05:75:2b:52:b7:3b:44:6f:3a:
21:8e:72:53:4c:7f:4f:ed:c8:4a:bb:07:d0:2c:e8:e3:53:23:
d0:07:24:4e:b4:5e:44:48:a4:96:5b:7f:be:86:ff:6e:0d:dc:
73:9c:cb:ff:cd:11:0d:0d:b8:8a:36:8f:a7:96:e3:2b:ca:5b:
d3:ab:fa:84:24:7f:56:20:c6:93:23:51:a0:88:14:ab:bc:2d:
1b:54:a4:d8:44:8a:7d:c5:ce:f7:52:d0:19:a1:1c:27:71:c0:
0b:e1:bc:ff:a3:36:3c:cb:18:13:42:22:23:13:92:12:a0:f9:
cc:85:5f:89:38:5d:96:f0:f0:3a:b9:02:4a:1c:dd:d8:cd:3a:
47:de:6e:ff:e4:5d:45:dc:52:89:2d:e2:31:f7:f2:45:dc:d4:
0d:61:7e:97:8d:26:5f:6f:4a:6e:b2:85:76:61:6b:df:3d:49:
53:65:3d:3a:5d:7d:ba:dc:76:fe:2c:d0:fd:df:73:47:78:68:
30:a0:5e:66:07:87:f3:c8:83:01:30:8e:21:85:d5:39:8e:cf:
f7:36:de:80:55:49:06:95:19:24:35:51:20:de:2e:15:bb:a6:
87:5e:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:15 2026 by rpki-client