Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: hGERPkKWqYflFRdLMR5KATTwqi9QJHG53ftwmqAudIE=
Subject key identifier: 8C:C4:86:03:53:E9:5B:38:D9:2C:7D:91:B7:5F:B4:33:6C:4D:98:18
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 019D38665E792E1DF9CCDC51BEA254492055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0BFD
Signing time: Sun 29 Mar 2026 07:02:05 +0000
Manifest this update: Sun 29 Mar 2026 07:02:05 +0000
Manifest next update: Mon 30 Mar 2026 07:02:05 +0000
Files and hashes: 1: MD2XknW8QXUXX5zjYirvLatDz1U.roa (hash: 57ZBGDriQ05ex2sQRZeUkWVivCM8pRal2i0bg/3JG3E=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: KCORHmACw4U66mMj6MshvgJtaDQ1hPUZS0S9nsVG7IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5e:79:2e:1d:f9:cc:dc:51:be:a2:54:49:20:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Mar 29 07:02:05 2026 GMT
Not After : Mar 30 07:02:05 2026 GMT
Subject: CN=8cc4860353e95b38d92c7d91b75fb4336c4d9818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:f8:47:c9:2b:9a:27:24:75:03:e4:b3:b2:
2a:18:8a:e9:5f:b9:f5:f5:8f:1d:c6:13:a6:9f:5c:
76:0f:33:f8:c5:ca:2b:fe:1e:37:f8:b2:a0:ae:8b:
f9:e9:f3:67:a3:57:69:2c:99:8e:17:2c:ef:1e:55:
52:59:86:d5:4f:da:d4:ca:6d:23:ec:c6:b0:6c:9f:
e4:ea:00:ed:da:75:82:b4:4d:f0:12:bc:70:93:e4:
ec:34:1d:ca:7d:7f:c2:38:82:79:b7:13:79:6d:e4:
9f:f6:cb:d3:28:2f:c9:2b:32:6a:34:b1:7c:a9:7b:
da:1c:bc:bc:e6:c9:ae:bc:3a:e0:f5:1d:dd:f2:1c:
0e:28:dc:c4:98:2a:ae:9e:22:49:fd:3a:82:e1:4d:
7a:e2:2d:e3:f0:d4:ba:64:69:d4:f7:bc:d5:98:7c:
53:5e:71:26:78:0d:c4:85:0f:cf:e4:2a:c8:64:a3:
9e:1b:4b:e0:61:6d:d8:13:bd:e5:dc:3e:46:88:4d:
4f:60:fa:6d:b6:67:28:f7:ce:e6:e7:02:88:48:97:
69:6b:cc:30:e6:cf:a2:0b:f1:02:7b:3c:a8:5b:df:
59:12:4f:91:92:84:8f:72:0e:83:4e:25:61:ec:fa:
09:0e:5f:51:ac:e9:e8:dc:1c:7a:cc:d9:a0:bc:d3:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C4:86:03:53:E9:5B:38:D9:2C:7D:91:B7:5F:B4:33:6C:4D:98:18
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:49:f4:d6:5b:be:52:89:d0:f4:c4:89:68:47:fa:b8:e0:50:
31:c1:cf:b3:7b:9c:a0:4f:dd:aa:7a:13:a7:1f:23:bb:7d:13:
57:66:3d:59:52:16:12:ca:c0:be:2e:c5:ef:b1:0b:c5:52:a0:
1b:40:c8:c7:f7:6f:ab:ab:2c:f4:8e:7d:8f:2d:b1:98:c1:64:
35:44:3d:d2:f3:50:83:90:53:40:cb:6b:72:33:7d:4b:7d:af:
0c:11:e2:61:80:46:e7:79:99:c3:27:09:81:03:f6:39:f9:c8:
c6:74:a4:ce:31:93:51:1d:38:26:75:fd:ce:98:b1:92:fd:46:
c8:08:c3:72:41:ce:ea:aa:30:9d:77:60:f9:55:3d:d1:0a:38:
4c:2e:5c:2f:c2:f8:b0:08:af:07:3d:c5:cd:e4:31:09:dd:36:
6a:d4:f5:f2:8a:16:6b:cc:4d:95:4c:04:da:42:69:5c:ce:6f:
1c:7b:c6:b9:b3:72:95:3c:fe:38:25:ac:e3:ec:9e:07:b6:3e:
15:83:e2:7a:c9:67:c1:fc:63:35:f6:b4:ad:6e:34:97:ee:2e:
0e:e1:e1:43:50:75:26:da:60:d3:c7:96:88:5c:6f:5f:8d:c5:
ae:69:39:30:bf:c0:63:d8:f3:65:09:d2:42:80:28:14:42:e1:
b8:a0:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:04 2026 by rpki-client