Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: Re/Jz0lXdntM7v4G/ifrWavwybJfqlt24kTj2xg10qw=
Subject key identifier: 59:A2:59:D9:55:FE:CE:A0:6D:25:29:65:44:60:19:72:51:5B:0B:8E
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 01A16DFFCF7719ACC82B23BA9A49C9375D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0E2B
Signing time: Sat 24 Oct 2026 13:00:43 +0000
Manifest this update: Sat 24 Oct 2026 13:00:43 +0000
Manifest next update: Sun 25 Oct 2026 13:00:43 +0000
Files and hashes: 1: MD2XknW8QXUXX5zjYirvLatDz1U.roa (hash: 57ZBGDriQ05ex2sQRZeUkWVivCM8pRal2i0bg/3JG3E=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: J0Do6D3esJjMt9FF7raEaz+EPt4zrpGfCuqRM0mk49s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:ff:cf:77:19:ac:c8:2b:23:ba:9a:49:c9:37:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Oct 24 13:00:43 2026 GMT
Not After : Oct 25 13:00:43 2026 GMT
Subject: CN=59a259d955fecea06d25296544601972515b0b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:8f:d8:80:53:6a:43:0a:02:a6:e9:a3:08:
7b:8f:97:c0:04:ec:26:10:4c:0d:aa:56:75:78:d4:
dc:b3:7d:26:f7:64:a0:f8:a6:6a:d6:3e:de:d1:2e:
89:75:c9:92:7d:70:33:93:9f:ff:0c:a3:94:46:65:
39:b5:c4:ae:70:fd:01:48:37:42:a4:8b:47:fb:65:
02:f6:f2:a8:aa:0b:c5:fe:f0:a9:b9:af:06:bd:a4:
a0:2d:80:7f:85:23:14:3b:ca:5a:41:0a:de:b2:60:
e9:ef:71:28:bd:eb:b2:6d:89:d4:4b:94:0c:82:a2:
40:87:2f:b6:ee:b9:a9:96:4e:51:39:c1:c6:54:7b:
d4:fa:39:88:96:49:eb:9b:97:55:31:be:4a:3a:34:
b1:de:23:df:e3:d2:50:2c:47:ce:f1:b7:fd:dc:f1:
7e:24:3d:62:dd:0c:f5:6a:81:30:1d:a6:0e:1e:22:
28:66:e4:cf:f2:6c:3a:0a:2a:ba:20:c8:cd:c1:11:
47:15:25:6e:a7:cc:1b:5e:cf:80:40:05:18:d6:8b:
af:ef:56:32:a8:d2:ac:5e:de:3a:57:2a:ff:14:8b:
37:68:0d:e1:f4:4f:f6:83:76:f8:81:29:12:c4:a9:
aa:08:c1:16:09:2f:1c:c2:05:ef:58:3c:df:69:8f:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A2:59:D9:55:FE:CE:A0:6D:25:29:65:44:60:19:72:51:5B:0B:8E
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8f:40:19:26:af:41:73:bd:64:78:b3:f2:b9:e5:42:6d:81:
dd:e4:da:f3:a4:de:8a:46:ea:b2:36:8c:14:8f:b2:91:5b:9f:
e2:97:51:0c:0a:29:cd:f0:e3:09:b7:e0:ad:48:9b:63:9a:76:
3e:d4:2f:52:6a:0d:c6:2c:bc:ef:72:df:b5:f4:08:fa:67:3f:
72:dc:49:e8:f6:b9:bd:42:7f:95:63:09:a7:04:f4:94:f3:a1:
85:1d:e5:ad:82:d2:32:40:3e:8d:ea:b7:ca:cf:02:14:7b:a8:
c2:39:86:68:57:56:e9:87:9f:be:0c:7a:b0:8f:90:56:ad:f3:
21:11:04:89:80:2c:d5:45:2f:68:60:8d:05:b0:02:cd:a7:a9:
98:d2:e8:fb:a1:32:28:d7:64:34:55:34:c1:bd:cb:5a:87:d0:
48:7a:74:1d:84:31:33:19:3f:cb:4a:50:23:e9:b5:a9:b4:d4:
2d:e2:03:4c:e2:b8:48:9f:1b:40:b8:bb:2b:68:8a:71:25:2f:
d0:b1:9b:1c:1f:8c:05:3f:07:e7:6a:2c:e4:1e:1a:80:cf:ab:
4c:0c:e7:c0:1a:dc:4d:b3:13:4c:c8:7d:9b:46:d2:e5:68:ca:
6d:cd:f7:18:19:27:ce:78:e9:2d:a3:25:1f:72:37:69:8a:80:
8c:a5:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:38 2026 by rpki-client