Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: h0gYXxlugiP/fF8GTHsRr/qmbKsIFxLA6Ghl0cIum6Q=
Subject key identifier: 6C:74:1E:41:73:F7:96:7F:FA:2B:83:3C:7A:A1:1C:F5:1D:83:93:A2
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 01A13F02F870B7CA22E893FEA6BD64B9BE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 197F
Signing time: Thu 15 Oct 2026 10:02:01 +0000
Manifest this update: Thu 15 Oct 2026 10:02:01 +0000
Manifest next update: Fri 16 Oct 2026 10:02:01 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: s3ne+DIz7dKgtIfQw59CksuYEFkAyMXEoLSnsVNej0I=)
2: PzBJvCvuKoLcfTByzdz7KrKT9g0.roa (hash: 3oZ6E/qyPFCkNxJX9IOFDQ5m/aqdqH2CkJ/hq3ptHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:f8:70:b7:ca:22:e8:93:fe:a6:bd:64:b9:be:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Oct 15 10:02:01 2026 GMT
Not After : Oct 16 10:02:01 2026 GMT
Subject: CN=6c741e4173f7967ffa2b833c7aa11cf51d8393a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:8c:e7:4d:44:b9:77:e3:b9:1d:f8:67:31:
49:ac:24:95:bf:8f:3b:31:a4:ea:e5:f1:38:6e:c5:
b6:69:44:10:46:ab:f9:ab:ad:f7:26:a5:87:77:c4:
a1:c8:a9:b4:1c:18:fc:f4:3b:4a:8a:db:03:ef:0f:
69:54:3f:24:1a:02:1d:46:d5:8e:eb:9b:ff:d9:39:
30:2d:1b:51:60:44:d4:68:15:ad:ed:99:8f:c3:54:
23:66:37:24:77:b7:aa:49:6c:f5:69:7e:3b:79:d2:
f4:e7:84:af:50:05:22:40:49:56:76:35:8a:79:be:
65:78:b7:4e:ef:ba:12:1c:fc:7a:cb:d2:36:68:6a:
09:b6:79:d1:63:b2:e7:ba:89:dc:57:c1:5d:d0:78:
62:73:3e:a9:4b:4f:4e:a1:be:fe:14:b3:4b:da:5e:
6a:17:49:bf:89:29:a4:60:be:9d:a0:e2:f9:74:6e:
9a:30:1f:97:51:d0:c3:63:09:b5:53:d6:13:b4:a9:
12:68:61:cd:1e:25:b5:3f:0c:90:ae:55:15:81:40:
cf:cb:a4:a8:10:80:64:48:cd:85:c5:fd:4f:16:c2:
4e:c5:47:9e:ef:50:fd:d0:48:db:45:fa:87:dc:3a:
4e:c4:fb:d2:24:1a:72:7b:71:49:6b:fe:a6:08:ea:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:1E:41:73:F7:96:7F:FA:2B:83:3C:7A:A1:1C:F5:1D:83:93:A2
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e7:f1:b2:56:e5:7d:c9:de:5d:2c:16:09:f3:97:92:38:b9:
e0:8f:0c:c5:5b:46:a9:26:b2:e6:be:01:98:6e:e0:4c:b3:91:
fe:d6:6c:97:3e:4a:87:bd:c0:92:2c:e7:cf:07:3b:ff:4f:16:
e5:17:c1:7e:35:f3:09:bc:9d:6b:96:c1:b2:b7:58:29:09:bc:
bc:98:12:fb:d6:7b:ac:e0:69:9d:ae:48:7b:58:fb:be:6f:50:
0b:6e:4f:f9:24:f4:c7:3a:33:6e:ca:67:34:83:2e:08:4a:15:
fa:53:d0:82:21:93:04:d1:d5:86:05:3b:30:38:ed:75:ca:a3:
59:bd:55:ff:51:f7:73:02:fa:d5:42:49:0e:88:ae:f2:19:64:
3d:42:1d:ce:03:ab:a0:23:5f:66:ce:84:a6:de:73:a0:33:75:
84:eb:97:98:2b:2e:45:09:f3:d2:b3:f2:f4:54:27:dd:c7:9c:
75:fb:87:63:77:2d:cb:59:69:38:ca:78:c4:06:2b:a7:f7:68:
c5:59:52:e7:d9:f2:10:02:f6:05:2c:1f:70:39:f0:0e:01:83:
61:ef:d5:27:04:b4:4d:ff:75:c1:f8:17:d5:c3:35:79:88:82:
92:76:c5:6e:45:af:62:54:9a:f6:e9:14:06:17:22:7b:b6:5a:
00:c7:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:21:55 2026 by rpki-client