Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: W+clmTm6ikqgYZDB/o+mLlbCOzDScZZk5I0tb2l3z1M=
Subject key identifier: 5A:40:4A:26:F8:9F:DF:BB:28:E0:2E:27:C7:63:C6:D4:48:83:8E:13
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01A0C3D69B1570D510208A6330C625E2C4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1A70
Signing time: Mon 21 Sep 2026 12:00:16 +0000
Manifest this update: Mon 21 Sep 2026 12:00:16 +0000
Manifest next update: Tue 22 Sep 2026 12:00:16 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: V6y6tApAnZBHnq7Y0kRLckj3T2RQaXnW/bhI685zWwc=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa (hash: lZPJ4+UTAfzaBn1qvEutfPFu9s5OmtvAwYfd82jbQxI=)
5: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
6: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
7: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
8: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
9: zX39p8hPMLMogAvQxpt7zlkHVdA.roa (hash: bJcnLltJJ72buWp7XshBBRT58VrzJdJnDzL7OsGRoZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:9b:15:70:d5:10:20:8a:63:30:c6:25:e2:c4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Sep 21 12:00:16 2026 GMT
Not After : Sep 22 12:00:16 2026 GMT
Subject: CN=5a404a26f89fdfbb28e02e27c763c6d448838e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:59:e6:dd:fc:21:fd:04:03:a8:0f:11:ba:
cb:5e:3f:45:c5:9d:43:8a:26:2b:5b:52:7b:38:bf:
37:be:5a:5f:5c:bd:52:68:14:95:56:53:01:80:9c:
6d:38:bf:4b:30:6c:2e:dc:35:e4:b2:f5:d7:6f:48:
0a:9d:f8:22:39:6f:e9:6f:e8:13:55:ac:df:87:06:
ef:69:b9:fd:09:71:4d:ad:fd:5e:cd:6f:b0:37:c1:
71:e0:cf:7b:4f:3d:81:fe:8a:2d:ea:e8:47:c4:84:
20:87:4e:ab:7d:ae:3f:5e:f4:9b:b8:18:fb:69:01:
9d:4e:85:c7:14:92:c3:d2:5d:3c:f3:21:0b:e8:40:
9e:ab:98:86:37:14:48:ab:51:44:5d:67:2d:87:25:
85:06:62:57:b2:38:e2:8c:b0:b0:08:d4:b5:8a:bf:
5d:b8:6b:65:c9:d5:82:21:5c:7c:73:c0:d0:c5:83:
ff:2b:fe:5d:6f:7c:7e:25:c9:ce:f3:ca:cb:eb:ea:
67:c2:d0:63:42:69:59:c1:3e:70:92:19:d4:6b:ce:
dd:21:c3:21:64:d1:43:14:12:9c:cb:c9:7b:e0:4b:
02:2c:4e:69:82:ac:e8:dd:56:5a:cd:5a:ff:fc:7b:
0f:db:3f:c0:24:9a:cf:c8:7b:f9:2f:c6:e9:47:f7:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:40:4A:26:F8:9F:DF:BB:28:E0:2E:27:C7:63:C6:D4:48:83:8E:13
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6d:7f:da:01:6f:45:cd:aa:2d:ed:54:2a:e1:5f:50:12:56:
99:bc:f6:43:67:26:4a:7e:64:b0:35:2a:b7:d2:62:9b:7a:5e:
32:e4:2f:be:4c:2f:6c:33:73:4b:8b:ef:20:3c:1a:88:7f:8a:
3c:3c:d5:04:9f:c1:05:a1:ca:66:41:e1:38:be:73:fc:ce:e5:
84:6d:07:60:3a:95:72:fa:33:92:ff:18:10:7b:b4:63:dd:ab:
77:9d:37:66:8e:0e:8a:39:14:a1:e3:3b:98:cf:a2:6f:69:c0:
52:b5:ea:f4:8b:aa:25:c9:e2:90:d6:30:ec:60:2c:dc:a4:f6:
ae:1d:f6:d3:8f:e6:de:a5:92:03:12:9f:f4:ed:ba:d3:fc:a8:
9c:10:5f:24:da:7b:5c:2f:e3:4b:7b:33:60:43:48:fa:ad:c8:
72:e6:8b:cf:aa:8e:11:e2:32:fd:e9:e3:5e:c6:f2:0c:03:d0:
a6:c7:ba:12:39:a0:3e:e2:de:57:3d:27:a8:f4:c5:ca:7d:ad:
c4:25:a2:73:bf:cf:a7:bc:14:3f:0a:b5:4a:b7:8e:18:10:a3:
ba:7c:65:9f:cd:c0:c9:9a:69:93:24:c1:5d:75:cb:f0:5e:c0:
1d:4d:59:aa:9b:82:86:35:96:df:0d:88:de:7a:6b:3f:13:66:
71:8e:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:25:51 2026 by rpki-client