Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: rb8Gq9NGIZcWOMPw2pZrx7ouGJASnwEE7RyMY1EYquM=
Subject key identifier: CD:6F:60:14:CC:5B:94:C2:70:92:0E:54:0C:03:32:3A:19:B8:4E:3D
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019D9B50D427670D06EFC940AB6FB32CE982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 12:00:58 +0000
Manifest this update: Fri 17 Apr 2026 12:00:58 +0000
Manifest next update: Sat 18 Apr 2026 12:00:58 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: +qPkiAwOXdlskAvKQYZlr8L2fe1Jaq3FTUy2Ygyac7U=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
5: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
6: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
7: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
8: y_I-Rx6c6ZO5cg0hshn5JRXp8OQ.roa (hash: /H74JIaGZ/O6ji1TsDEo7znyzAE5IDXwnYg53gQ9tCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:d4:27:67:0d:06:ef:c9:40:ab:6f:b3:2c:e9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Apr 17 12:00:58 2026 GMT
Not After : Apr 18 12:00:58 2026 GMT
Subject: CN=cd6f6014cc5b94c270920e540c03323a19b84e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:8e:cd:7b:6a:49:51:33:df:67:24:06:7d:
29:ba:66:9f:56:a6:82:b7:31:13:ff:0f:87:1e:12:
cb:74:d7:34:63:53:d3:86:99:75:94:07:d0:dc:5f:
3e:31:3f:44:6a:d7:2d:1b:1e:97:33:eb:5c:e6:13:
2e:9d:e1:c6:95:e0:75:7e:0f:7b:92:63:eb:e5:45:
f9:16:df:b0:2e:7f:b8:4b:d1:5b:21:23:5e:4f:4f:
4f:b4:00:d5:a4:ce:09:b1:3a:d0:ce:50:61:ea:15:
8f:fa:49:57:a6:6a:b7:95:63:e1:c0:91:d0:4f:9c:
ae:21:5e:39:e0:51:0f:8f:e7:97:fa:3b:f6:a0:09:
64:b1:60:c7:3d:aa:ce:90:b1:6d:ef:0c:16:25:cf:
7b:18:00:9a:ae:6c:a9:f6:a2:c8:b7:13:12:ac:f4:
bb:1d:99:0c:08:14:fd:15:2a:73:b0:87:6e:d5:e5:
42:44:f0:c1:31:bb:ee:42:cf:24:40:bd:25:60:29:
4c:3b:09:ad:87:8a:03:7e:d1:d7:f7:a1:f7:a0:11:
56:76:9a:17:14:a6:3e:e9:18:77:9d:d0:68:c7:97:
2d:d9:a3:97:a8:07:77:1f:2b:23:6d:fe:61:68:09:
51:9b:6f:de:8a:db:bd:8d:b8:ba:ec:f8:0f:94:65:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:60:14:CC:5B:94:C2:70:92:0E:54:0C:03:32:3A:19:B8:4E:3D
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9f:9b:cd:ef:b0:33:ad:c7:28:13:80:cb:90:29:3f:76:bd:
3f:c0:d7:71:0f:6a:23:d0:b8:e1:0e:72:22:b0:14:38:24:aa:
26:fb:ae:1c:7f:ab:11:da:8b:7f:51:18:60:90:70:ef:29:4b:
21:97:76:9f:10:7b:b2:09:b8:20:91:56:b7:99:3c:f6:f2:b3:
30:7f:89:e6:79:e4:11:4c:b6:36:c3:21:76:39:d8:35:1a:df:
42:e1:e3:bf:6a:ed:f7:e4:10:29:8a:e0:5e:1a:eb:ef:21:94:
d1:27:d0:a8:45:c0:25:76:cf:43:05:40:7c:5c:10:e0:57:4d:
cb:ed:65:d6:d3:b4:55:f0:6d:1c:98:75:84:41:b9:76:36:84:
67:b2:5c:78:d3:c1:02:6d:bf:58:ae:cd:c3:b1:3f:2e:a9:8f:
57:bc:cb:5a:1b:b1:b7:40:3b:50:bd:ce:15:67:ee:2a:46:10:
4f:76:e2:db:9b:a3:2d:18:8d:23:c8:61:1d:c0:9c:28:58:9b:
ff:89:58:bc:75:c3:e1:69:51:11:b7:11:41:ac:53:28:e2:91:
cf:a8:0c:93:d6:09:79:43:4a:30:ab:e9:73:51:c5:bd:ce:44:
92:0f:29:43:6b:c1:b6:6e:66:46:ef:a2:52:64:ee:14:29:90:
4c:91:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:04 2026 by rpki-client