Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: /EnLwgj6+W7YDTMXaLCkr2QKKdRHRUQEfKZyxOlOgPg=
Subject key identifier: C6:92:90:93:3C:4E:08:28:E1:E0:C0:F9:6C:3F:83:B2:AA:F7:C3:CC
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019D99CFEAC891CAC8A9416642042C566C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0EAF
Signing time: Fri 17 Apr 2026 05:00:33 +0000
Manifest this update: Fri 17 Apr 2026 05:00:33 +0000
Manifest next update: Sat 18 Apr 2026 05:00:33 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: I9uDFwi9QM9wGe9HSzGT/P1qDpwqdBxqYI/JurM3crE=)
2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:ea:c8:91:ca:c8:a9:41:66:42:04:2c:56:6c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Apr 17 05:00:33 2026 GMT
Not After : Apr 18 05:00:33 2026 GMT
Subject: CN=c69290933c4e0828e1e0c0f96c3f83b2aaf7c3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:e8:a6:66:4a:fa:d7:88:65:e4:65:04:d9:
09:24:ca:7f:17:fb:41:7d:00:a8:38:32:d7:b0:47:
7a:76:09:e0:b4:a3:2a:1f:64:23:80:a0:4d:1b:eb:
7d:99:4f:eb:f7:fc:cb:fa:f1:b6:93:1d:64:10:2d:
71:09:1f:6a:11:27:63:1c:31:fa:c3:b9:66:18:62:
c0:93:87:83:1e:a0:ef:ae:78:a2:88:0d:d4:18:ab:
d6:2b:98:18:4a:4a:b3:73:a4:29:d7:34:e4:ac:69:
f0:5e:0d:a2:fe:ae:fe:c2:df:6b:65:89:3e:3b:90:
dc:7d:05:eb:ea:03:a7:0d:82:60:39:fb:9d:a2:ec:
11:fb:b9:91:bc:9a:a1:15:cf:24:5a:72:c9:4e:8c:
47:ce:35:10:ff:8b:17:29:35:e9:df:93:84:7a:62:
c9:ff:ea:50:46:fb:dc:22:41:78:1e:e2:35:b3:06:
87:5f:23:27:18:ab:40:b7:40:e7:3f:7d:a6:94:45:
90:92:c6:99:bc:e1:b8:41:15:8c:d3:2a:e0:a7:46:
24:0d:02:51:39:e4:e0:2e:fd:d4:1e:93:e7:ec:da:
bd:da:e3:1a:e3:e2:9b:53:e2:2b:b3:3f:b3:b9:66:
7b:5e:60:af:a0:dc:3e:71:0c:7c:70:f2:cd:e9:29:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:90:93:3C:4E:08:28:E1:E0:C0:F9:6C:3F:83:B2:AA:F7:C3:CC
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b9:11:80:41:0f:86:bd:9a:a5:7d:74:f9:42:29:1c:c3:24:
00:30:eb:38:2c:97:41:0e:3d:39:07:54:2e:d4:f5:71:02:1a:
a6:6a:e9:b5:13:47:73:a8:22:ee:31:1b:dc:24:95:01:83:10:
92:2d:95:9f:31:60:b3:01:1a:1f:eb:19:b3:89:bf:45:ff:8f:
6a:84:ff:a5:b4:09:95:b0:cc:60:d2:d0:64:86:72:e1:e6:cb:
0f:2b:f9:ab:a0:49:1e:84:70:13:75:f5:6e:69:20:3d:a5:96:
1c:39:97:d6:91:be:8d:8e:ed:2a:e1:09:cf:5f:28:2c:89:86:
62:c9:bf:59:76:82:c8:df:b4:56:e5:2c:09:f4:a7:1a:5d:da:
d1:0e:20:54:d5:be:bc:bb:89:cc:f2:2a:b3:2d:aa:45:5d:49:
43:20:e0:1a:b6:35:e6:87:a5:35:f8:12:36:d5:2c:bb:a1:cb:
e0:36:64:72:e8:84:bb:50:d8:a2:de:a1:03:f6:8f:64:8a:c0:
55:a2:2d:14:4a:e4:e9:4b:3e:8a:1f:92:93:06:6e:28:7c:fb:
af:e4:ff:7a:0a:0d:86:88:ad:a8:6e:b3:a4:60:42:24:39:48:
28:f1:f2:5e:75:89:d6:78:77:99:2f:05:90:f4:1b:86:f9:66:
e5:b0:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:40 2026 by rpki-client