Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: pXDf+uaHDZi206PjlaNwgqbdmq/TB+EyM6iA2ypLwgA=
Subject key identifier: B5:1C:F0:B8:E2:54:4D:59:17:4D:17:BD:57:79:F5:5F:F4:12:01:C3
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019E910187A53FC078DB2DE12A11CAE04BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 035C
Signing time: Thu 04 Jun 2026 05:00:56 +0000
Manifest this update: Thu 04 Jun 2026 05:00:56 +0000
Manifest next update: Fri 05 Jun 2026 05:00:56 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: O5S4yhDVD5ABWzlmz+TsVJ1ySRaPObw/2A9Qkis3HfI=)
2: cSeWyBS9AzYXBpViYHa1BylGQ6s.roa (hash: PrBtaBiVH3j3v9lcfh2nnshhHKh443GU9s9mrNx3uY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:01:87:a5:3f:c0:78:db:2d:e1:2a:11:ca:e0:4b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Jun 4 05:00:56 2026 GMT
Not After : Jun 5 05:00:56 2026 GMT
Subject: CN=b51cf0b8e2544d59174d17bd5779f55ff41201c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:d2:11:8f:41:8d:14:ca:a2:d8:b4:3c:98:
d2:90:77:98:11:fc:63:b4:0f:f1:2e:4e:99:b9:10:
4a:48:c0:b5:ba:b9:c3:1f:67:e5:a0:23:be:2a:7b:
d2:50:50:14:bd:98:8b:40:47:7e:39:f8:80:6a:f0:
30:d1:5a:9c:fc:7c:93:bc:91:b4:f2:63:a7:06:87:
97:9c:24:09:86:d6:ca:70:2c:2a:34:cc:2e:37:41:
02:2c:9e:c8:be:0a:f9:81:ba:b7:6f:b8:22:2c:79:
b2:84:5f:a6:8e:f8:dd:4b:cb:28:01:99:a4:07:64:
cc:e8:9c:6e:54:e0:2b:1f:d4:b1:a7:07:9a:0b:4c:
b6:ed:9a:c1:b9:ff:a7:47:53:22:a2:9e:b3:9e:53:
e4:8a:51:fd:55:b7:00:88:f1:a5:ef:8d:48:22:a6:
10:c8:af:4f:49:21:eb:22:e7:9b:4e:61:7a:e5:f2:
c8:ef:be:37:04:3d:03:50:8f:7e:88:83:e1:2d:3a:
6c:03:b4:57:c1:dc:04:91:7e:ea:ab:4e:36:b4:76:
d3:a6:b0:fc:4f:81:6d:9c:2e:1c:81:7d:e7:02:74:
36:1b:01:11:45:fb:19:c3:2a:68:ba:8c:37:c8:ac:
41:cb:8d:4f:5d:8a:ad:18:f4:83:60:9c:cc:67:f3:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:F0:B8:E2:54:4D:59:17:4D:17:BD:57:79:F5:5F:F4:12:01:C3
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a1:f4:d3:97:fe:05:09:78:ef:6a:4d:07:7d:00:69:e6:47:
24:f9:2e:be:36:ef:6a:28:5c:5e:e8:e6:40:ad:d9:f2:ff:8d:
99:3d:b9:d6:04:e3:0e:3b:3e:ea:2e:89:00:29:42:66:62:6f:
df:e0:68:c8:bf:11:9e:df:ba:1a:4a:c7:4e:7e:86:cd:22:24:
c0:89:dc:20:1f:09:95:09:8d:ed:bc:4b:de:77:0c:bb:1d:79:
33:d6:0c:e2:73:6c:48:75:96:27:fa:f2:a4:93:a6:7f:b3:18:
fc:2d:ca:47:5b:e3:ae:a9:cb:4e:81:f3:4e:1a:4b:f6:f2:d0:
36:cc:1b:9b:b9:bb:cf:e5:b9:8e:0e:90:c9:3d:78:0b:04:26:
bb:09:58:06:21:33:18:6c:28:d5:0d:95:d2:fa:5a:7d:79:2d:
fe:aa:21:44:00:d9:fc:eb:bb:b7:d2:95:b8:a6:37:43:e8:fc:
d9:e9:5b:e4:93:8e:58:42:57:99:0f:77:ef:2a:f5:40:0f:44:
c6:63:5d:55:f1:b8:46:3b:fa:d7:87:a0:38:be:73:56:c3:89:
0e:ab:e4:0d:af:2d:33:6d:24:bb:95:61:5f:a8:9c:75:0b:6e:
c0:4b:70:11:2b:b5:95:9c:81:0b:0d:38:e2:09:68:fd:91:8c:
bf:4f:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 14:17:29 2026 by rpki-client