Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: PkSWmSq7tub6R7C5xPwMMJoLbz/Q8e02TQUDp8fshFg=
Subject key identifier: 3F:46:6D:50:7E:68:6C:BA:0F:A5:F8:31:0E:24:25:62:D7:DF:DD:3F
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019F859F5886F594B0CBFC46C014E094DD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 03DB
Signing time: Tue 21 Jul 2026 17:00:40 +0000
Manifest this update: Tue 21 Jul 2026 17:00:40 +0000
Manifest next update: Wed 22 Jul 2026 17:00:40 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: 3MpfWLAutUUFULuUBsDF9hPklQP09JE+V/hMprKyQvI=)
2: IjCH-sqDG187PVVmJq9UXUG58Q8.roa (hash: ZeryMWfiqlc876G1je4RBD22AenRdJNuu5lhGxbMfeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:58:86:f5:94:b0:cb:fc:46:c0:14:e0:94:dd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Jul 21 17:00:40 2026 GMT
Not After : Jul 22 17:00:40 2026 GMT
Subject: CN=3f466d507e686cba0fa5f8310e242562d7dfdd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:dd:8f:4f:3e:0a:00:1a:b0:49:59:c8:57:
41:9b:79:e6:39:c5:28:62:77:f9:6f:55:8b:99:9d:
b3:f8:57:14:63:4f:f7:af:70:6a:43:dc:91:4b:7b:
6b:94:b5:5a:6f:e1:a5:82:95:6c:d1:6c:c1:33:2a:
b8:b9:69:75:4f:d5:45:25:bd:cf:16:67:1e:a8:c2:
3a:47:fb:d5:7f:18:28:95:72:7e:73:13:65:b1:5e:
09:63:ec:35:c9:16:b8:b2:59:9d:8b:6a:65:dc:e6:
ab:da:f8:fe:3b:6c:ad:54:5e:95:2d:40:6d:0d:93:
75:c8:f1:5b:29:f8:f0:3d:74:42:1d:c3:0c:d6:5e:
f3:3a:9d:4d:73:1a:b9:a0:de:eb:81:36:3e:5a:b0:
89:84:48:f5:62:27:76:00:91:fc:87:60:48:a3:4d:
7a:5a:07:a1:1a:bf:7c:7c:82:af:ca:38:e8:93:95:
e3:b1:3c:d7:54:b3:6a:f8:79:43:18:0c:62:f1:36:
a2:23:8d:de:35:c6:71:a4:20:a4:12:77:8e:5c:71:
a6:3e:16:f3:7c:de:24:0a:0c:41:26:b2:53:61:89:
dc:9d:97:49:c4:63:0b:4a:5a:24:14:d0:25:94:a0:
8a:67:37:24:70:4c:b6:37:62:09:23:92:26:20:12:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:46:6D:50:7E:68:6C:BA:0F:A5:F8:31:0E:24:25:62:D7:DF:DD:3F
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:25:e7:82:1e:4d:39:7e:82:b1:f6:35:79:fb:4f:c9:b2:2c:
af:0a:9d:8e:f1:ae:cd:c8:03:49:91:9c:cb:14:02:b7:ee:fd:
0d:e7:b5:6b:7d:0d:4f:76:0e:16:07:56:a5:1a:15:04:6c:d2:
65:09:09:d1:53:47:2d:a8:5d:7e:24:ef:93:a5:19:e2:a7:f2:
d6:fa:d7:85:ec:b0:9e:45:17:13:64:29:28:03:96:94:be:bf:
16:e2:42:98:e7:51:09:fb:7e:33:9a:7c:e2:c2:f1:2a:46:de:
44:e2:d1:a9:90:89:f3:e4:ff:ec:ff:ce:ea:af:7d:44:31:29:
08:26:10:de:65:4d:8c:00:c4:8a:32:f7:06:48:a9:46:85:f1:
86:cb:97:a2:58:a6:2d:52:aa:35:ef:3d:dc:a5:87:e2:b8:7e:
96:37:58:4a:07:c3:64:ff:96:92:94:f6:72:64:fd:d1:6a:c1:
c2:f9:07:9b:11:b3:96:3b:14:6c:d1:6c:3e:df:d5:5f:d8:10:
82:c1:c7:b2:fb:12:bc:14:73:24:a5:c8:00:6b:6f:27:6a:29:
e2:99:9f:87:e1:dc:d4:e6:5f:7f:63:9d:24:7c:f8:53:35:a4:
fd:db:aa:c6:65:3f:9e:7a:69:29:4f:21:27:f8:fa:f1:09:42:
ec:bf:6d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:39:45 2026 by rpki-client