Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: 825aW9xTotBbsDbVcB06wmZ0WuJhrIo5dF4OdxCLXMU=
Subject key identifier: 26:73:5F:2D:38:ED:DC:AF:5C:AD:FB:F3:3C:9B:AC:D8:C9:6B:37:D3
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019FA9076136077252D93C25D04056B1D175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0FC0
Signing time: Tue 28 Jul 2026 14:01:00 +0000
Manifest this update: Tue 28 Jul 2026 14:01:00 +0000
Manifest next update: Wed 29 Jul 2026 14:01:00 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: Pq9+XaxaRau9iCDarkBImOaOrXgsnK9nic0bnXoRsC8=)
2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:61:36:07:72:52:d9:3c:25:d0:40:56:b1:d1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Jul 28 14:01:00 2026 GMT
Not After : Jul 29 14:01:00 2026 GMT
Subject: CN=26735f2d38eddcaf5cadfbf33c9bacd8c96b37d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:39:c4:9b:5b:e9:42:7a:ab:0d:a3:e6:41:
81:ac:4c:8d:db:26:ff:09:2e:53:6a:b0:8c:49:51:
93:59:e3:be:2c:1a:96:52:fe:07:30:3e:b1:49:2b:
29:54:70:b1:b4:cb:16:31:ae:1a:5d:90:c6:2d:2e:
bd:84:79:f1:be:30:2b:eb:72:cf:1f:f3:56:f3:ef:
8c:3f:25:f2:26:b5:14:83:d5:06:72:76:b8:1e:a1:
af:65:4c:c1:5c:59:2e:40:e0:4c:b9:77:04:76:d9:
dc:9c:64:ec:cd:56:b7:26:57:8a:14:b0:52:bc:fa:
60:e2:e2:3d:db:7c:66:ec:8e:ea:cb:5e:1b:db:eb:
ad:3c:66:ae:78:12:13:6e:6f:eb:d1:bb:59:76:28:
e7:f1:ac:29:67:56:dc:e7:13:c4:b1:69:3b:ef:f2:
f0:3f:4f:48:3c:b0:5d:e8:da:4f:9b:c5:71:3d:91:
e5:d3:69:84:dd:a5:55:e3:92:52:0b:29:a5:63:c3:
f2:3d:0c:32:fb:11:e0:6c:67:3c:6c:71:f3:47:04:
42:6d:26:2a:d9:13:9d:28:57:8a:46:bf:51:9d:fc:
e4:07:e2:64:e5:ae:f8:fb:32:3e:11:d1:ae:57:d6:
01:ed:88:93:f2:26:2d:4b:1c:b8:c4:2a:43:d6:0f:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:73:5F:2D:38:ED:DC:AF:5C:AD:FB:F3:3C:9B:AC:D8:C9:6B:37:D3
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4c:94:db:bc:54:0c:a6:c1:a6:b1:83:35:c0:e4:cd:a9:d6:
8d:ac:b0:5d:61:42:95:a1:f1:61:11:4f:35:8c:8d:2f:33:66:
5d:08:29:87:76:96:c4:b2:c1:bf:f3:cc:81:ef:33:1e:7c:4d:
01:ce:eb:0b:5f:d5:e6:1f:82:6c:9f:ef:13:9a:4b:a5:a5:93:
b7:e6:e7:cc:49:3d:21:91:68:c9:e1:71:c1:eb:93:cf:f6:48:
33:4f:71:e4:4e:1e:18:4c:64:45:cb:60:7b:5c:bf:56:79:d4:
8a:03:f7:65:0e:4b:1d:23:a0:50:30:5c:4b:60:e4:7d:4b:de:
8c:38:d1:ae:c1:da:c5:5f:f5:8a:24:da:90:6b:2b:9d:b5:f5:
a7:03:d4:bd:13:6e:ce:63:d8:38:64:6c:3d:7f:66:16:66:f3:
37:75:e0:f2:34:09:ec:5e:34:f3:53:3b:80:cf:ce:21:35:dd:
cd:30:98:e4:a6:2c:d5:78:2f:ed:75:a9:d9:0e:2b:7d:6a:e9:
d6:f9:0a:f3:00:85:33:ef:47:95:cb:b9:d7:97:bc:65:11:7d:
52:20:85:be:ee:45:8c:e0:7b:ba:e3:da:c8:5d:40:0c:81:8d:
95:70:3f:ef:75:9b:d9:c8:d5:94:1c:31:fc:0c:49:ed:5e:8e:
9b:af:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:46 2026 by rpki-client