Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File: 0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier: rCck7qtHX3q53dHGY8+jKZrUjBtpJFRkl8qGMvxY8m0=
Subject key identifier: 69:8D:FC:15:81:23:EF:1F:0F:C6:DB:77:90:B4:FC:90:6B:A5:F3:F3
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial: 019CAD9089F3A65178AA9F2702EF84EEEB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 08:00:56 +0000
Manifest this update: Mon 02 Mar 2026 08:00:56 +0000
Manifest next update: Tue 03 Mar 2026 08:00:56 +0000
Files and hashes: 1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: XkGQN2D4fE25En8p/zeEbFTt9SQS89cKn5f+uiKI9xw=)
2: nqFedlELDT6btqVr2PyQaNO_Pfw.roa (hash: 8tqaPkj8LtydCchM9fMrH7we2nm/JziMXiNEi0lLF+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:89:f3:a6:51:78:aa:9f:27:02:ef:84:ee:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Validity
Not Before: Mar 2 08:00:56 2026 GMT
Not After : Mar 3 08:00:56 2026 GMT
Subject: CN=698dfc158123ef1f0fc6db7790b4fc906ba5f3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:2b:f4:1c:0b:3a:88:12:4a:b3:f9:40:a3:
52:d5:89:5e:d4:db:87:70:05:00:2e:ad:9c:82:d5:
df:ac:b2:54:09:a1:db:1d:aa:70:c5:cb:81:62:bc:
8d:d6:aa:5e:78:25:bd:16:62:d2:6a:99:a2:9a:c6:
29:22:c2:b8:49:59:96:55:f8:3a:e5:13:35:52:58:
e6:61:cc:f5:0e:1c:c4:58:83:f3:19:b4:13:e7:ad:
15:a6:97:ff:e3:4d:3c:a4:a9:cd:4a:8b:45:bc:46:
0b:da:e6:3f:7a:fe:3f:b8:6e:df:6c:ab:5b:9e:33:
a3:00:c6:ac:23:49:5f:9d:b7:34:9c:23:40:fb:8e:
3d:c8:40:3b:b9:af:38:26:5d:c5:2d:6e:f3:bb:c0:
ca:c8:b6:d5:92:e5:ac:49:1a:cb:90:1e:50:f5:8d:
bf:e3:9d:23:a3:17:a4:3f:3d:b5:8e:96:22:c5:9a:
b2:a5:8e:c4:73:b7:78:17:8f:b8:20:5e:fc:02:22:
a2:31:8e:8c:67:b6:8f:f3:73:4b:59:8e:41:58:b2:
f9:c7:08:f8:1e:fc:3c:58:44:a4:24:d7:0c:0f:08:
24:bd:a2:82:ed:2c:2a:01:4a:60:f9:34:59:21:13:
78:f7:f4:97:92:35:10:7c:cb:2f:94:76:f7:20:c6:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8D:FC:15:81:23:EF:1F:0F:C6:DB:77:90:B4:FC:90:6B:A5:F3:F3
X509v3 Authority Key Identifier:
keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:93:be:2a:9c:06:54:40:e4:9d:46:34:46:c7:76:aa:51:f6:
5c:7e:3a:ed:14:ae:32:5f:9d:9e:14:60:77:b6:39:72:51:9c:
f0:a1:d6:9a:32:48:12:85:27:20:59:70:c0:ba:f9:5e:45:e8:
c7:79:20:38:ed:70:42:4a:1d:7a:53:9c:68:14:db:da:0b:75:
81:ad:38:77:cd:38:54:5f:c4:f0:fb:de:a9:5a:35:8e:bd:fe:
44:25:44:12:17:cf:bb:47:85:90:20:ac:f2:36:c8:93:b6:0a:
0a:aa:dd:7b:44:5a:4d:71:3a:91:34:ea:5a:8a:d4:e0:5d:de:
11:d7:7d:51:c5:a1:cd:dc:bf:b4:d0:7d:22:2c:9b:1c:7e:5b:
81:2d:5f:6e:72:dd:22:db:14:28:4a:a6:78:e7:cf:19:86:d8:
75:a9:1f:0c:fa:17:3e:71:8b:67:63:ce:1b:ef:23:0f:4d:b9:
16:0a:bb:e9:bf:64:70:b4:67:bd:21:f2:ca:dd:2c:16:70:2d:
17:68:02:7a:60:f2:fc:7b:44:8c:61:79:d3:0e:04:b5:13:63:
38:5a:3e:ef:4c:d7:52:dc:03:db:ce:a1:bd:50:b2:13:95:93:
69:f4:81:7e:b4:cd:50:b0:52:be:23:d2:f1:67:85:fc:32:e2:
c4:3c:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:16 2026 by rpki-client