Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: mhh4nin9pSIYWRg5hKZGpQcACTWgDdDiNFZ/WRWNv0A=
Subject key identifier: CA:54:2E:7B:8F:CE:F1:E9:A8:A1:67:C8:7B:A5:FF:BA:45:47:1E:EB
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019CAC46AE3703A44FF3EBD051F7324B8E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 0261
Signing time: Mon 02 Mar 2026 02:00:39 +0000
Manifest this update: Mon 02 Mar 2026 02:00:39 +0000
Manifest next update: Tue 03 Mar 2026 02:00:39 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: v4DsZkR33EsoDHKOG53O7qd5Rv51ZU9IZXtOgWrhsks=)
2: cSeWyBS9AzYXBpViYHa1BylGQ6s.roa (hash: PrBtaBiVH3j3v9lcfh2nnshhHKh443GU9s9mrNx3uY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ae:37:03:a4:4f:f3:eb:d0:51:f7:32:4b:8e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Mar 2 02:00:39 2026 GMT
Not After : Mar 3 02:00:39 2026 GMT
Subject: CN=ca542e7b8fcef1e9a8a167c87ba5ffba45471eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:42:66:31:cc:85:ad:1c:b5:34:51:51:91:
1b:f1:4c:cb:0a:5d:65:28:d1:7a:08:b4:92:f9:19:
8c:f6:2c:35:05:87:6f:78:e6:49:ff:96:ec:6e:17:
40:66:e0:ae:06:6b:93:1a:cc:5c:0d:78:6c:e6:48:
c2:7d:91:25:4e:25:5a:9f:1b:73:06:eb:f9:8a:81:
4a:be:1d:ff:8d:e9:7c:2d:15:75:43:77:6c:df:3d:
17:a0:97:44:13:03:2f:9c:96:e5:1b:1f:99:87:10:
b9:59:c8:5e:9b:2e:75:41:18:3e:41:f9:58:5f:03:
b8:63:e6:2d:c4:43:37:ae:82:b8:84:96:b2:b6:af:
97:8a:31:6c:a8:fd:ae:11:c7:76:8d:fd:1c:7b:46:
65:85:4b:1a:74:0c:75:5b:c6:37:fc:d0:ac:83:ce:
57:1d:c6:ac:a0:c1:55:c3:77:95:9f:ae:a5:b8:a6:
fe:3c:3a:cb:d7:3b:61:f3:5f:8f:b3:fb:7d:76:7f:
cd:74:ee:82:b3:b5:7a:8e:d4:35:78:73:e9:ed:23:
82:77:fb:46:c9:46:de:4d:e0:3b:42:f6:a6:be:54:
ca:1b:b5:01:60:86:52:fb:f1:af:b2:11:b8:29:4d:
ee:8f:a5:9c:83:1a:12:5d:2f:11:1d:82:1b:9e:b8:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:2E:7B:8F:CE:F1:E9:A8:A1:67:C8:7B:A5:FF:BA:45:47:1E:EB
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4f:bd:9b:a6:e8:24:e6:8f:f2:e8:4e:7b:88:16:a6:ee:b2:
cb:72:4e:31:4b:a3:eb:68:a1:30:b1:99:70:a6:45:fd:73:81:
26:5c:92:b8:cc:1f:56:cf:39:f6:ac:b3:01:5c:db:7a:9b:37:
4c:95:f8:bd:e7:b8:ba:53:86:88:73:41:a2:87:a8:34:b8:76:
3b:ae:45:64:49:9b:b6:1a:9e:a8:1d:01:b2:c6:20:2b:eb:47:
35:1b:5d:1c:63:51:e0:2d:49:5f:f1:ed:72:ab:e7:81:f0:c6:
00:9a:7a:f1:31:42:15:23:1f:17:b4:b2:3e:4f:96:f7:66:ef:
88:37:f9:c3:2b:c6:18:7e:c3:58:5d:05:0d:0f:93:db:ab:95:
96:fb:b0:45:0c:e3:7e:ab:ff:b4:bb:75:f1:65:73:e7:80:08:
cf:14:eb:8a:ce:15:c7:78:75:bd:f4:ec:d1:54:15:2a:f0:f7:
30:5d:b0:bc:6d:ff:5f:d1:1f:2c:21:a7:76:2f:89:ee:39:d4:
11:61:e9:5b:79:18:34:26:84:6e:eb:d3:12:b8:e2:06:94:41:
32:14:45:c3:3a:57:36:a9:28:80:00:a9:37:1c:49:4e:f6:5c:
5c:5c:a5:2e:d6:7a:c8:fd:5c:87:6c:ac:b2:18:18:fe:72:2b:
d3:37:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:20 2026 by rpki-client