Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: 4hEtcPs80wZVslvYtl6rE8g4bls976T/pQnKVywL/Cg=
Subject key identifier: 63:5F:36:FB:3C:A6:14:56:75:5F:D3:30:9D:28:9A:29:BD:26:6D:94
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 01A0D8044872DD741E0227ED349C013B4017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 048C
Signing time: Fri 25 Sep 2026 10:02:34 +0000
Manifest this update: Fri 25 Sep 2026 10:02:34 +0000
Manifest next update: Sat 26 Sep 2026 10:02:34 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: oB84J2RIkCpVHLsJ1PrJEcU1pf00JbTI6Mt5zI/QBM0=)
2: xokwMX7pBQZJD8_4WfB-FdFEXi8.roa (hash: I09l7esTbT+gqVY+7jBoty1HjPWzG3I2RBTZMIcgZgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:48:72:dd:74:1e:02:27:ed:34:9c:01:3b:40:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Sep 25 10:02:34 2026 GMT
Not After : Sep 26 10:02:34 2026 GMT
Subject: CN=635f36fb3ca61456755fd3309d289a29bd266d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:fd:d3:db:92:95:20:7c:64:4d:56:80:8a:
4e:8f:40:a0:ef:53:f2:5d:dc:0d:d9:3f:84:ba:bf:
5a:b1:14:2e:9a:94:27:42:c4:1d:72:69:9f:97:82:
6f:4e:59:cd:d1:f3:7e:cd:67:94:ea:d6:9c:ff:1d:
a0:a4:89:58:95:a8:ac:b7:8d:bb:11:5a:5e:fa:49:
f2:bd:bc:e1:35:94:55:0f:d7:03:4d:97:4f:65:dc:
dd:a0:1d:dc:b3:a7:75:39:ba:5f:6d:22:da:10:74:
ab:ff:25:17:6b:e9:56:86:bb:1c:f2:bb:f7:8e:d6:
3e:13:de:7f:08:1d:5e:dc:bf:11:40:8b:5d:17:90:
79:27:3e:90:2c:cf:50:b9:21:fa:fa:da:73:1a:28:
51:b6:94:d8:2c:6f:a6:20:3c:c6:fb:c4:97:3c:87:
81:02:c5:90:e0:54:81:09:2d:a7:3c:ec:4e:b8:d4:
d0:c5:78:b3:7c:72:ef:15:91:a5:77:da:ee:5d:8f:
e4:e7:8e:87:61:cf:dd:ee:98:52:2a:b7:aa:ec:d2:
fb:c6:e6:56:66:2c:1c:3f:d2:83:d8:91:2e:3e:4e:
01:60:d9:47:eb:31:be:f1:2c:b5:78:ab:b1:4b:db:
25:08:3d:16:e4:56:a8:d7:e2:46:75:41:77:69:62:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5F:36:FB:3C:A6:14:56:75:5F:D3:30:9D:28:9A:29:BD:26:6D:94
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ca:3f:a1:d6:92:1f:82:2d:37:46:1c:df:56:8f:3a:b6:bc:
08:c3:57:ff:25:cf:e2:c5:c4:36:f8:97:9e:10:62:21:78:bb:
14:74:b7:6e:91:91:d8:60:ac:08:2d:42:60:fa:8d:06:5f:2a:
0c:6d:29:33:a6:0b:e8:e3:e1:2f:0a:3f:00:0a:51:63:55:67:
4c:07:87:fc:7f:92:ed:33:f7:aa:38:4b:85:c1:1b:c9:6e:28:
97:99:65:0a:2c:8c:9a:07:fb:64:1d:a5:5d:e7:1b:36:85:e0:
a5:c7:9c:1e:26:b1:be:f2:26:81:08:fb:1f:d8:9f:c0:b2:8c:
77:5c:72:29:26:8d:b7:25:1c:6e:7f:82:71:1e:37:1a:d2:dc:
59:a6:dd:1e:85:b2:a4:72:78:d4:8c:bf:c8:c2:ce:83:ea:d5:
03:1a:21:95:2e:b1:70:86:9a:d3:d3:6c:56:19:b0:56:83:9c:
77:df:5a:ac:15:f4:85:5b:9d:d4:76:6a:0a:82:ec:d8:7d:1a:
3b:04:ff:80:cc:5b:b3:4a:59:12:c6:9a:6c:b0:1e:d4:ad:7a:
3d:db:4e:c3:bd:8f:31:93:d3:88:95:94:2c:fb:22:da:cd:44:
8e:65:28:45:9c:bb:20:56:85:b6:42:4e:d5:0b:40:4a:fe:28:
f2:b4:8f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:08:36 2026 by rpki-client