Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
File: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft (raw, json)
Hash identifier: t+IpH/qdcwzjGEKs6sfDi9MS4epf6E/MeW3bzR9oekA=
Subject key identifier: 2C:C8:B2:F0:74:36:15:89:54:A5:61:E7:F7:48:F6:1D:EE:DF:C2:76
Authority key identifier: D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
Certificate issuer: /CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Certificate serial: 01A0BF1F277F5F44FB48A8EFE0BCE9E930FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
Manifest number: 01A5
Signing time: Sun 20 Sep 2026 14:01:25 +0000
Manifest this update: Sun 20 Sep 2026 14:01:25 +0000
Manifest next update: Mon 21 Sep 2026 14:01:25 +0000
Files and hashes: 1: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl (hash: tHhUDk7bfxYERSBFg9YC47EHq6POyZhGUlgBcSea+mM=)
2: de_jsj8CpSljIjcGiO4A6ZRhO1I.asa (hash: N/rOb5DkyhPin/riPrKSvflYTWR9QweMJOMrP3OE2iQ=)
3: r9tO5dOM7W3cJ0IAJV4a9_UjU64.roa (hash: 7p0HLcZz+BpTWdYxVEea5xby6zTSJ5cYhN5NEaQQ0nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1f:27:7f:5f:44:fb:48:a8:ef:e0:bc:e9:e9:30:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Validity
Not Before: Sep 20 14:01:25 2026 GMT
Not After : Sep 21 14:01:25 2026 GMT
Subject: CN=2cc8b2f07436158954a561e7f748f61deedfc276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:0d:e7:77:d0:9f:62:91:60:a9:cc:a2:4c:
86:28:79:01:23:4b:10:2b:05:42:54:f5:ab:0e:fe:
94:2d:73:1b:3a:b9:23:d6:a7:0d:95:ea:b7:71:25:
9d:44:ff:5b:17:d8:57:50:0f:d7:55:eb:a1:d6:33:
e3:52:56:f1:45:3d:f8:9b:e1:07:b6:b7:d7:9c:44:
0a:99:18:9b:3d:ec:67:3c:61:d4:f3:4a:bd:62:43:
10:58:21:a3:ee:cb:7b:d8:bc:1e:24:a0:69:14:44:
35:74:15:e6:b7:55:1b:06:6e:9a:a7:14:80:5d:e8:
09:dc:d4:a1:11:62:b3:79:99:1b:3d:e3:7a:b9:20:
c9:7a:f7:7c:7b:24:d8:63:d2:60:e3:c3:03:7a:10:
e6:5c:2e:e3:5b:e1:8b:ac:ca:5b:8b:ab:96:38:4b:
e1:61:5c:7d:38:30:df:99:3d:ef:5e:83:ca:a1:fa:
de:d4:78:e8:97:37:38:71:c3:48:af:35:d5:47:e8:
6a:f1:81:f7:84:15:78:5c:08:18:f2:1e:4b:ba:ea:
89:61:1a:f3:1e:98:17:f4:55:f5:dc:01:ce:e1:fb:
e4:02:98:27:85:9e:c7:56:a0:49:c1:26:92:f5:45:
3c:13:8e:17:97:86:93:f6:68:da:44:d2:cd:bb:f7:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C8:B2:F0:74:36:15:89:54:A5:61:E7:F7:48:F6:1D:EE:DF:C2:76
X509v3 Authority Key Identifier:
keyid:D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c8:10:5e:a2:12:9e:3f:9d:70:5c:06:7a:f7:1e:31:81:f1:
6e:88:b3:e0:fd:92:57:cc:b3:14:e7:2c:b5:b2:f8:8b:b7:44:
5b:49:26:50:3b:d8:40:76:af:9d:fa:ed:21:28:fd:70:9f:f7:
e1:0d:34:d3:4b:c9:b3:4e:22:d7:f3:ff:a5:22:89:da:6a:04:
cf:0a:c1:67:c9:b0:b8:32:57:31:93:61:69:f2:d2:2b:72:bd:
dd:a8:9c:14:58:32:28:c0:29:3c:64:ad:17:13:b9:78:82:2b:
41:13:03:31:4b:8e:26:28:36:85:26:06:6d:42:4d:6e:6a:20:
85:e6:5a:1c:9f:f7:77:cb:02:a4:9f:1f:22:2d:d7:45:68:c0:
0a:76:c1:75:1c:f6:3c:4d:70:5c:fa:f6:f6:61:00:e7:21:ce:
6f:93:e7:df:10:48:10:40:63:33:13:9f:05:79:03:6d:ba:d4:
ad:1a:72:b7:34:d6:33:a1:72:39:37:08:41:c8:45:a1:79:d6:
93:8d:e7:28:be:de:53:3b:f7:8c:8b:13:72:09:5c:13:9f:a6:
9b:25:4a:28:e9:ca:72:14:d1:c9:4c:3e:a2:a5:62:8a:2b:ed:
f9:be:72:16:99:d7:f0:1f:14:1f:92:f4:49:ad:30:11:51:c5:
8f:e6:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:58 2026 by rpki-client