Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: tMJ+XOVHXZ9rM1CcDo49/dMhSrQNpv+7JgNpZZc+Igw=
Subject key identifier: 5A:08:C3:3F:EC:72:74:6F:91:B6:BD:BF:97:C8:5E:55:3F:59:53:9F
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019CABD9F8EFFFB06C6B1B94449B477E03AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: 9UATLN2QvHk3WkczsKnf6hCq6xzNeRkgCOZl9HBpQRg=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
5: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
6: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
7: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
8: y_I-Rx6c6ZO5cg0hshn5JRXp8OQ.roa (hash: /H74JIaGZ/O6ji1TsDEo7znyzAE5IDXwnYg53gQ9tCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f8:ef:ff:b0:6c:6b:1b:94:44:9b:47:7e:03:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=5a08c33fec72746f91b6bdbf97c85e553f59539f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:7d:ff:79:8e:fc:90:16:d4:8c:6e:c1:58:
33:96:a5:8c:67:16:08:d0:d8:13:12:ee:e5:22:b2:
4a:68:41:ee:04:4a:ea:92:0a:07:8e:7d:0a:3d:b7:
a8:6a:91:51:7f:36:3d:7d:64:9a:6d:b3:50:ce:19:
96:de:12:4b:3f:d9:2d:0f:85:6d:0a:3d:22:33:b1:
25:70:8c:4e:82:a3:16:77:0b:2f:a5:2a:c6:7b:f2:
73:67:73:0a:6c:e7:4f:ed:28:26:79:78:20:6b:4c:
df:38:f4:1d:68:9c:d3:02:52:3a:05:f2:b5:ac:90:
0e:2f:45:9d:bd:a9:dd:a0:65:dc:00:ef:29:75:36:
f0:d9:73:72:b1:3e:a6:a1:c9:76:b9:2d:fd:c4:cd:
1e:7e:44:a5:a6:ff:59:3e:2a:70:58:4b:2f:c5:66:
14:f7:e5:9f:16:ff:d1:ea:df:1b:93:83:4b:8b:29:
d2:97:ca:49:91:4e:b1:7e:a5:2c:eb:d7:51:05:01:
73:c9:de:f6:cd:8b:e3:73:2a:af:ff:98:62:9d:e2:
e7:f1:b8:b9:6b:20:ac:5d:27:6e:01:f0:58:4b:f2:
0a:2a:32:1c:fb:51:88:0f:0b:27:10:27:6b:e4:a4:
d8:4c:86:d2:2a:0c:d4:1a:25:68:0a:78:7e:17:76:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:C3:3F:EC:72:74:6F:91:B6:BD:BF:97:C8:5E:55:3F:59:53:9F
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:01:18:cc:91:98:9c:1a:36:33:3e:8e:62:6a:34:a0:14:58:
e1:0b:d8:31:d3:04:b9:fc:49:23:bf:12:37:da:aa:fb:2f:e3:
3a:e8:f1:3d:0e:08:0d:f7:53:f7:9c:6b:ec:93:7e:ea:08:6b:
92:fc:23:cb:bb:91:95:3d:6a:89:d7:01:bf:68:de:e5:54:85:
f8:ea:38:8b:89:7e:cc:f5:ff:0b:f4:e9:a8:b5:bd:be:47:d1:
5c:d9:6c:d4:35:b5:e6:a2:66:bf:c4:1c:a9:b8:e3:cb:32:10:
b2:cb:70:a0:01:21:fb:83:24:e3:88:aa:43:05:80:f3:4f:30:
19:5a:55:fa:8d:c8:01:87:16:54:31:33:d8:be:6e:98:57:84:
41:f5:c3:16:03:86:b2:f6:56:69:d9:6c:ab:4e:6c:4a:60:77:
49:3f:11:18:d8:87:1f:76:68:01:ab:56:54:c3:73:c8:f0:a6:
09:34:53:dc:3f:42:d1:90:01:ec:42:c6:08:97:dd:ea:ab:12:
37:f1:d1:9a:49:82:b2:4e:25:31:4a:62:9d:09:c9:47:01:54:
a6:f8:1a:89:7c:5d:75:09:15:17:cc:e9:84:0a:fa:8b:54:f8:
9a:6d:63:9a:d5:dd:0c:20:c5:69:91:cb:4d:2e:52:a3:a2:dd:
f0:1d:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:27 2026 by rpki-client