Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: Oj5lxUpfsr5gqnOpcNMxzRCuZCTZLiJO+Y+60TcwOZs=
Subject key identifier: 61:8E:69:D1:B1:3E:30:B8:28:37:FD:3E:6F:BC:67:C7:C9:D3:29:51
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 01A16CB66A30ABC3A819AA2B3B8079D43E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 04D9
Signing time: Sat 24 Oct 2026 07:00:56 +0000
Manifest this update: Sat 24 Oct 2026 07:00:56 +0000
Manifest next update: Sun 25 Oct 2026 07:00:56 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: 4ziY9a9YjGSVPh0CFtXCil4VyFJAqMi13DBGc66uB68=)
2: xokwMX7pBQZJD8_4WfB-FdFEXi8.roa (hash: I09l7esTbT+gqVY+7jBoty1HjPWzG3I2RBTZMIcgZgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:b6:6a:30:ab:c3:a8:19:aa:2b:3b:80:79:d4:3e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Oct 24 07:00:56 2026 GMT
Not After : Oct 25 07:00:56 2026 GMT
Subject: CN=618e69d1b13e30b82837fd3e6fbc67c7c9d32951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:a5:56:7f:6d:79:eb:c9:0a:60:c0:a2:d1:
7e:33:a3:10:4b:2c:91:db:ac:9b:9f:4a:96:c4:43:
d0:3d:61:a6:29:f0:03:27:02:42:4f:ba:18:b8:73:
ae:bd:90:06:d9:d7:ef:c1:16:dc:e1:32:18:31:0a:
18:a7:16:86:a9:19:a4:09:6b:18:a1:5a:de:d1:0b:
aa:01:c5:3c:88:5e:f5:42:f4:84:b9:1a:52:40:fc:
27:63:05:1c:6c:d7:f8:97:5b:1d:fd:ab:92:8e:15:
ac:11:5b:ab:d4:c2:06:7a:30:b2:c7:d0:79:21:46:
12:90:de:5a:76:4f:b8:a3:29:9b:a4:43:19:6c:30:
11:da:3e:ee:bf:57:61:48:6c:ee:29:06:25:e1:c4:
93:91:7e:cd:71:07:54:10:71:51:56:d4:e8:d9:cf:
01:55:eb:63:95:d5:fe:7e:48:9c:67:75:03:74:b8:
83:7b:74:12:ca:5f:cf:d8:7d:2f:33:85:ce:6f:03:
c4:73:90:20:26:f7:e1:71:fe:a5:6f:e3:bf:b9:4e:
2e:e3:f9:6a:22:37:80:41:53:4b:4a:43:3c:59:ad:
42:d5:18:e2:ab:2f:52:d8:2b:a8:58:57:4e:2c:34:
a9:16:58:3d:bb:73:06:cf:5c:66:1b:b6:70:e0:5d:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8E:69:D1:B1:3E:30:B8:28:37:FD:3E:6F:BC:67:C7:C9:D3:29:51
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5b:9a:91:a8:a9:eb:9d:11:23:ca:9f:5f:f7:7c:df:a4:24:
34:12:de:ce:8b:de:1d:3d:fc:5f:0c:de:a5:42:55:7a:ac:b6:
7b:11:97:d5:90:73:73:d6:f8:7a:30:73:38:c3:19:18:79:4a:
e4:58:d4:74:e0:aa:eb:f9:08:d7:48:d5:9a:97:b1:24:73:b6:
01:a2:92:29:bb:55:51:b8:7d:c2:cf:8e:dc:73:09:3b:b2:3a:
e0:2d:db:0c:c4:56:de:66:82:2e:28:d8:3b:d9:6e:3b:92:85:
32:e6:61:cb:d1:36:49:73:09:ca:15:b7:6e:07:70:32:0e:e8:
16:ce:f7:35:6b:e7:60:d5:cf:1c:9f:79:6b:08:59:32:79:c4:
9e:a6:25:3e:aa:69:08:67:2b:e2:5e:0b:72:8b:69:70:a3:b8:
67:54:92:d4:97:63:ae:32:48:98:ae:20:ca:b3:58:83:84:d7:
17:5c:d8:b5:21:44:b1:b6:88:c2:21:ab:68:a1:d7:87:88:13:
13:24:a2:9a:be:59:4c:2f:ae:43:c6:e6:f6:cf:d5:a0:ab:b9:
d1:3f:9f:5e:8b:ba:8f:2a:d2:c0:55:d1:09:80:7a:13:56:af:
13:78:8a:17:7c:f8:62:34:ec:32:5e:97:e3:45:d5:ce:ed:57:
4f:da:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:49:04 2026 by rpki-client