Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: ztjADwxzqEE/j0OSi4cALYsKoqbeVlECuwhdprd1ncE=
Subject key identifier: CD:CE:D7:C8:EA:CF:4B:16:79:5C:0C:3A:9D:51:8D:86:CA:03:53:D5
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 019F17F9AE9BC72D26D634D1D598422ADE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 10:01:06 +0000
Manifest this update: Tue 30 Jun 2026 10:01:06 +0000
Manifest next update: Wed 01 Jul 2026 10:01:06 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: a5DUhDMNnFMCxD4sRmypPPw/AW9408AjSGKaCYXZ7mk=)
2: k6B1HK3NKe6NDCRPO-ofLOtSI58.roa (hash: VsAnfAmolqSFo3sK403a26HeoQZ7z5c7wu+L4SUd2zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:ae:9b:c7:2d:26:d6:34:d1:d5:98:42:2a:de:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Jun 30 10:01:06 2026 GMT
Not After : Jul 1 10:01:06 2026 GMT
Subject: CN=cdced7c8eacf4b16795c0c3a9d518d86ca0353d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:ae:39:b2:fd:80:b1:b9:4f:42:0d:d2:da:
43:ef:4c:44:b4:4b:d2:91:15:bf:e2:d8:b2:d9:ac:
6f:9f:31:59:e3:cb:2d:cc:0a:07:49:c7:3a:30:8f:
94:d3:3b:ba:aa:ef:8f:de:5a:ae:2f:da:37:ea:04:
55:ca:bd:46:51:7f:55:ac:28:58:93:bb:22:52:a3:
aa:13:2b:29:51:8e:56:6b:f5:43:40:7b:f8:cb:96:
10:f3:a3:28:18:a4:6e:95:ed:00:42:a4:8e:df:db:
b4:44:34:32:d9:2f:12:2e:2d:80:94:e5:56:1d:8b:
7b:d5:ba:01:93:cc:4c:20:bd:68:74:4e:88:0c:32:
93:c8:28:86:c2:e9:19:07:b8:d6:da:5b:ef:4b:9c:
e0:af:0d:4a:61:36:65:c7:27:ca:77:e7:cb:f3:65:
7a:b5:b1:98:c8:bb:14:14:b1:99:45:51:39:99:11:
09:24:d0:07:de:d4:55:73:ea:f9:37:f9:fa:b7:98:
8d:82:ff:cd:46:ff:51:56:14:77:61:68:35:fc:b9:
80:84:91:a1:38:40:6d:71:d6:98:15:bc:14:06:af:
20:c7:ba:42:b7:8c:c5:2d:11:99:d1:43:57:03:10:
c5:f1:c5:75:d5:e6:9d:20:9f:40:79:0b:e6:d8:dc:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CE:D7:C8:EA:CF:4B:16:79:5C:0C:3A:9D:51:8D:86:CA:03:53:D5
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:99:dc:8a:91:00:56:08:78:81:c5:e2:12:c8:3f:17:e3:e6:
92:3a:a2:90:5f:ed:46:84:a9:4b:19:7e:dd:71:12:cc:67:ab:
88:76:4e:b2:10:0c:42:27:51:a7:12:40:fc:0e:b5:70:ff:39:
8e:69:ed:7e:a6:b0:e6:6d:5a:ee:16:d9:9d:47:fb:ab:39:c9:
39:da:94:23:b8:fe:2d:31:cc:fd:1b:bd:8a:d0:c6:0e:54:2e:
7a:4d:43:60:dc:ea:80:3c:5b:2b:67:5c:6a:cc:13:09:cf:9c:
ed:42:a8:28:d7:45:66:c6:bf:4e:78:d8:26:00:80:59:48:83:
e8:aa:2e:bb:ab:f6:e3:c8:db:82:93:ff:f3:f1:29:1c:e3:39:
92:3c:87:a8:f8:3c:3f:78:cf:ae:5c:91:c2:e8:9b:8a:55:25:
ab:02:d3:5c:3d:36:e4:dc:71:0a:84:61:c9:5f:fe:21:c9:4c:
38:c4:ff:fc:7c:38:0d:7d:5b:26:cf:c5:23:c8:fc:e2:89:45:
12:cb:2a:c7:a4:47:70:b5:dd:1b:b7:16:81:9d:25:67:69:3e:
8b:63:2d:1b:72:ea:01:f5:52:66:3f:e5:ae:53:d1:ee:c0:4f:
b7:e2:39:1c:a0:5d:c7:fe:d0:ce:cd:e3:aa:68:ad:43:db:99:
1e:74:4e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:44 2026 by rpki-client