Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: c13Wg67NohxWPszkO4VGbGA2iFDciURvjXuTf3APeT8=
Subject key identifier: 04:F1:8E:BD:3E:6E:B5:9A:1B:01:61:5B:B8:B7:56:EF:39:05:7D:28
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 01A001A5D771FDE3AC8E815F08A8404A7255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 19:00:40 +0000
Manifest this update: Fri 14 Aug 2026 19:00:40 +0000
Manifest next update: Sat 15 Aug 2026 19:00:40 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: 2SKWFpKljTh/ohhr43mU4OrSVb93/oh1/wWpp1f9e/g=)
2: k6B1HK3NKe6NDCRPO-ofLOtSI58.roa (hash: VsAnfAmolqSFo3sK403a26HeoQZ7z5c7wu+L4SUd2zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:d7:71:fd:e3:ac:8e:81:5f:08:a8:40:4a:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Aug 14 19:00:40 2026 GMT
Not After : Aug 15 19:00:40 2026 GMT
Subject: CN=04f18ebd3e6eb59a1b01615bb8b756ef39057d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:3d:46:d2:5b:fd:6f:b8:e2:c3:c1:76:47:
a8:bd:26:0b:6b:ae:bd:74:10:b1:2c:c3:77:20:e2:
40:30:e2:07:49:bc:e9:8b:72:1c:79:6a:7c:85:21:
08:f4:3a:d6:a8:6d:63:27:96:7d:7a:87:fe:77:2e:
72:9c:07:38:14:79:4e:43:12:71:b6:d3:8f:46:6b:
20:e4:ad:ea:50:23:ac:82:f2:98:32:d3:9a:a9:47:
17:fb:64:39:d7:9b:08:2c:3f:b7:7b:df:f0:33:9c:
24:e2:39:cb:d2:be:2c:fd:f4:43:f6:8b:50:53:52:
ee:a0:c9:5d:54:8d:ff:1a:4b:18:2b:56:94:cf:f3:
78:ba:7b:77:63:bd:99:14:4c:8f:ba:fb:82:f5:f8:
db:f4:2f:2f:b9:e3:f1:46:1e:86:c6:2d:03:31:db:
ca:f6:03:da:4a:b5:e0:e1:1f:89:b1:e7:53:c4:a4:
66:fa:a5:1c:00:d4:bb:e2:ed:b3:41:3b:6e:9c:f3:
b2:04:21:67:ab:9d:df:62:94:8a:22:0c:36:db:1a:
4d:05:d8:74:67:3a:ba:d7:af:fd:85:fe:df:6e:34:
e0:3e:1e:dc:0d:52:e6:6a:32:be:69:86:c0:e7:92:
93:1c:36:01:88:5c:4e:4f:7e:57:d5:a5:49:a6:d5:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:8E:BD:3E:6E:B5:9A:1B:01:61:5B:B8:B7:56:EF:39:05:7D:28
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:52:5c:e3:25:fd:d2:6e:c6:68:37:24:52:cb:bc:e2:39:
08:38:f1:a7:48:ab:a6:a6:80:ff:d8:9d:45:02:86:33:91:7c:
8e:93:e3:74:4a:bd:04:0b:3f:19:fd:c3:bf:30:f2:68:aa:2e:
03:eb:da:7f:1e:9f:ac:a3:f7:a5:03:55:3a:56:9f:73:9e:c5:
17:0f:47:6c:03:d6:fc:58:3c:87:ef:10:ad:00:1e:fd:5a:ab:
20:2d:f4:19:fd:d5:a4:2f:50:7b:fb:e3:03:76:25:60:06:08:
14:82:25:b6:28:2f:52:74:8d:f7:c6:6e:a2:85:16:86:ce:0f:
14:13:be:11:f4:6c:39:54:f5:20:f5:0f:d5:c2:e8:ad:ad:4a:
2c:27:35:2f:32:d6:a7:39:bc:d0:07:f1:c9:a5:f6:8e:b7:e2:
38:52:6a:0c:eb:6b:bc:55:95:c5:27:18:9f:f1:ac:a6:20:97:
40:53:94:e2:8e:71:1a:8c:8b:14:b3:ca:80:c4:b8:4e:b0:ca:
df:c8:a1:1e:22:0e:9a:de:f7:70:e7:63:aa:24:d6:5d:99:92:
0c:1a:6d:98:67:4b:6e:f1:7b:8b:b1:b0:ed:76:52:76:25:41:
79:14:d7:9e:eb:2c:ec:1b:c8:2a:3e:b7:fb:8e:4f:7a:b9:93:
fd:a2:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:57 2026 by rpki-client