Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier: Bw3I1Nre2tMinYM4sNVUXICLY2ny2fBGmbNgWixtL8U=
Subject key identifier: 1B:95:5A:F5:0C:53:E1:42:D0:C1:32:81:0A:61:C3:A3:AD:C9:7B:67
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial: 01A001384A51E52DA6C1DB54B3B8D46EFB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number: 0FCB
Signing time: Fri 14 Aug 2026 17:01:01 +0000
Manifest this update: Fri 14 Aug 2026 17:01:01 +0000
Manifest next update: Sat 15 Aug 2026 17:01:01 +0000
Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: gGPH9OVN7TGfhV4DBRSDyrlQbHe91vRcdoTqJHeNNmQ=)
2: SxTqFSaVYKNp7RXjp-9P-WYLFPk.roa (hash: ZmAlezL/eOxIgz3wvBspKHt49atyoUhtEGugoI4vkno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:4a:51:e5:2d:a6:c1:db:54:b3:b8:d4:6e:fb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Validity
Not Before: Aug 14 17:01:01 2026 GMT
Not After : Aug 15 17:01:01 2026 GMT
Subject: CN=1b955af50c53e142d0c132810a61c3a3adc97b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:70:cb:be:b6:17:f0:ff:19:72:1c:4d:70:
d1:3a:8e:51:9f:5d:ee:2a:77:fd:37:fa:39:37:ae:
33:61:ad:f3:ef:a0:fc:98:13:e0:c2:38:6f:86:e9:
0f:e3:05:0f:46:8a:9f:ef:e3:59:40:a6:65:0e:ed:
81:11:27:a0:c1:d6:3a:2e:b9:31:95:63:7c:04:a0:
14:34:31:ab:b3:8e:a9:c1:a9:63:08:5b:2d:e6:03:
5b:11:13:73:da:18:ed:5a:77:47:6d:df:ab:ca:b8:
06:ab:33:3b:70:3a:3f:57:54:8a:fd:5c:a8:ea:6a:
84:f8:bf:39:b9:75:3a:67:60:7e:12:14:23:8a:13:
e3:22:00:30:ce:52:20:62:37:5a:3e:dd:45:21:fa:
6c:e6:59:67:b6:b9:93:75:31:f4:99:91:e4:7f:8c:
44:32:6c:31:b2:9c:ac:93:7b:06:45:53:8e:b3:b3:
0d:47:5f:a9:3b:1a:76:5a:17:34:76:b7:62:ac:94:
58:6c:7e:86:4e:8b:4c:e5:91:36:df:80:89:0c:13:
89:4b:d2:2d:40:3a:d4:ba:06:64:6f:ad:49:fd:b5:
30:50:a4:cb:75:56:ad:27:ef:3d:39:45:05:9b:86:
19:22:aa:7b:70:78:dd:5a:22:83:a6:ae:ce:d2:8c:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:5A:F5:0C:53:E1:42:D0:C1:32:81:0A:61:C3:A3:AD:C9:7B:67
X509v3 Authority Key Identifier:
keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7a:51:b4:a7:15:a0:a2:26:fc:c9:5d:de:7e:e2:a2:b4:9c:
24:d0:d1:0f:40:d4:8c:df:42:69:fe:af:8c:75:d2:73:9a:0d:
d8:e3:c4:18:52:1f:fe:06:b4:c6:6a:b6:84:9b:18:5d:76:84:
01:2b:9f:bd:a4:f7:d6:1a:ec:b8:2a:6a:f0:e3:da:36:24:7d:
42:6d:e5:3e:68:3d:b6:19:e1:a0:c4:e1:99:9f:6d:02:92:44:
b4:00:6b:2e:3a:09:15:67:f2:e8:03:79:02:a4:35:54:71:c4:
32:15:e6:4b:2a:2f:71:2a:53:f7:ea:aa:8f:c4:b0:f7:47:77:
f7:b0:4d:c0:0f:82:d6:2e:ce:09:60:b2:d9:f7:89:c2:d1:dc:
f8:11:da:57:15:ac:c1:65:61:a6:15:6d:ce:ad:4e:a3:34:f3:
91:e7:75:c8:bc:8d:f4:99:ce:98:0d:71:8a:43:00:67:91:88:
50:e5:31:8f:20:ef:46:8e:f6:28:09:33:ed:48:71:2c:26:db:
8c:34:e8:b5:44:91:af:94:7a:d7:49:7a:73:91:49:b8:9e:76:
5a:26:1d:8d:6d:bd:58:81:fe:7c:11:41:55:71:80:a5:2d:d2:
75:f7:08:d8:7f:bb:d4:81:48:75:70:8a:3b:e5:0a:f9:bd:78:
54:e0:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:43 2026 by rpki-client