Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: VYIejBKzu3zBPwjIZkcXPrpewF2aOk4q8xG+CMcMcsw=
Subject key identifier: 69:76:BB:97:EE:52:BB:D5:1D:74:92:44:F2:81:41:12:85:B5:E6:9D
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019FA9E339C1ABC17C87AD138DAD741E63C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 18:01:08 +0000
Manifest this update: Tue 28 Jul 2026 18:01:08 +0000
Manifest next update: Wed 29 Jul 2026 18:01:08 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: 8wRlnQZ9yPlQjgXiFxr90tPiaMabPloY9pAPIJRM2pk=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa (hash: lZPJ4+UTAfzaBn1qvEutfPFu9s5OmtvAwYfd82jbQxI=)
5: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
6: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
7: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
8: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
9: zX39p8hPMLMogAvQxpt7zlkHVdA.roa (hash: bJcnLltJJ72buWp7XshBBRT58VrzJdJnDzL7OsGRoZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:39:c1:ab:c1:7c:87:ad:13:8d:ad:74:1e:63:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jul 28 18:01:08 2026 GMT
Not After : Jul 29 18:01:08 2026 GMT
Subject: CN=6976bb97ee52bbd51d749244f281411285b5e69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:19:8b:4b:81:96:a1:9e:a3:8d:18:2f:ab:
88:48:7d:3d:e5:92:88:b3:5f:da:75:c3:fa:ba:7d:
00:9e:33:24:05:49:d4:27:96:5f:ad:8a:78:a4:fd:
93:7d:e0:ba:2f:9c:e5:87:46:7e:13:61:94:d6:77:
00:7b:41:62:d5:a8:21:ab:8c:1a:bf:dc:d3:d7:db:
0b:47:3f:64:48:78:13:fc:62:d9:63:6a:9c:13:5f:
d9:d3:8f:26:20:a5:6a:3c:52:d7:23:1b:b0:41:54:
68:1d:6a:26:11:8d:1a:d6:a3:4d:e8:42:d6:43:e1:
3a:73:f5:9c:61:b3:f6:d2:1b:ed:ba:24:42:ef:c9:
c4:10:e1:bd:58:f1:e8:e3:83:85:2e:36:39:3d:85:
48:ef:78:ab:94:41:fa:69:ab:c7:cb:33:85:13:aa:
32:a4:e2:3b:67:a8:bc:81:95:6b:67:12:54:93:b7:
d2:92:cd:5f:16:3d:30:b2:5a:c7:64:13:2c:0c:24:
c3:a6:dd:d6:57:50:49:34:19:7a:e4:71:e0:de:4d:
76:3f:c3:80:ec:38:8c:00:7f:5b:8d:3c:bb:53:ff:
0e:13:cd:6d:f0:5f:b7:81:76:65:1a:2d:5a:a3:96:
f2:bd:6d:e9:de:5e:10:c8:19:cc:53:09:bb:c1:1d:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:76:BB:97:EE:52:BB:D5:1D:74:92:44:F2:81:41:12:85:B5:E6:9D
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c8:2c:43:7c:d3:c0:ae:86:ce:cf:6e:d9:9a:ac:8c:c1:ee:
36:bd:12:09:a9:2c:77:57:00:57:b2:46:bb:c1:7e:29:48:91:
f8:d6:17:b8:19:ba:ad:2d:0b:60:9a:a2:12:d2:da:39:68:92:
05:89:03:aa:5d:f1:9a:ce:e8:10:eb:28:4f:79:c2:ca:88:f9:
fc:51:d4:78:5b:4d:13:b6:65:65:7f:7e:80:21:4f:08:b5:3f:
ba:a8:56:ba:cb:82:84:58:35:96:21:26:27:1a:5a:60:c7:84:
87:0f:9e:3c:5a:58:0d:eb:e0:da:07:58:bf:9a:1b:95:dd:93:
94:99:7c:f7:32:16:13:3b:48:68:48:f5:88:2c:c6:0a:f3:ea:
84:23:39:4a:1e:bd:82:99:9d:2c:4b:48:d8:86:9b:bc:8b:2a:
a8:3b:59:e2:86:f7:14:1e:ba:a5:ca:0e:e7:f1:fd:1c:31:cb:
1d:20:4b:79:3a:99:b6:a8:07:13:e2:03:56:c0:e8:11:99:e6:
39:b3:c3:ba:d5:13:13:9a:6f:62:cb:d7:41:20:43:7b:76:30:
22:53:a0:70:72:7a:1a:6b:20:5b:3e:9c:68:08:80:52:22:18:
89:bb:14:2c:86:49:a7:71:b9:83:78:ec:eb:65:84:fc:4f:e0:
97:6e:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:07:43 2026 by rpki-client