Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: mqnKGQPjJ3iWuBcw1qEXKDOK0rx9cIHPsf6xD/J2Lkg=
Subject key identifier: 2F:FF:90:56:90:36:B0:55:46:C4:41:23:FA:22:47:5C:48:09:DF:DB
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019EBF5AC67AE4FE6197597171DBCAFD8228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 0374
Signing time: Sat 13 Jun 2026 05:00:57 +0000
Manifest this update: Sat 13 Jun 2026 05:00:57 +0000
Manifest next update: Sun 14 Jun 2026 05:00:57 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: 2ZMwItML3Zt1rhq9wzu6zugBdVkYrTY+mXUlZm/dLps=)
2: cSeWyBS9AzYXBpViYHa1BylGQ6s.roa (hash: PrBtaBiVH3j3v9lcfh2nnshhHKh443GU9s9mrNx3uY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:c6:7a:e4:fe:61:97:59:71:71:db:ca:fd:82:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Jun 13 05:00:57 2026 GMT
Not After : Jun 14 05:00:57 2026 GMT
Subject: CN=2fff90569036b05546c44123fa22475c4809dfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:1c:f2:2e:b6:05:12:3f:fe:93:ef:f7:84:
0b:54:c8:64:27:53:3c:cb:d1:a7:a8:b4:77:bb:6d:
1c:7f:6d:ce:86:c8:4d:7c:69:d7:b6:12:30:c2:63:
3f:e6:aa:37:ba:06:46:bb:34:5f:97:da:3e:f3:33:
79:dc:b0:01:1e:3b:f6:e5:1b:e5:b9:d0:fd:4a:77:
92:b0:01:1d:e5:2b:a2:23:e6:c4:d3:3c:d8:44:52:
8b:28:fd:2d:f4:a8:e8:1c:2f:16:cc:38:de:44:d3:
05:02:21:7f:e4:10:61:1a:4e:4f:80:69:ac:73:08:
d1:97:db:72:89:9d:37:b9:96:9e:a2:6e:01:f3:22:
b0:c0:a9:e4:45:cd:8b:65:a5:e2:55:c5:30:3a:a5:
e8:28:41:90:65:40:8a:2e:fb:7f:75:1b:29:aa:d3:
ad:12:fe:7e:25:3a:ad:0c:bf:3f:0a:d5:56:6f:2e:
7a:4c:c3:eb:3f:ce:96:de:3e:8d:7e:78:af:fc:b5:
3d:33:13:59:8d:90:03:ef:60:6c:f4:9f:58:47:78:
77:79:91:31:2a:ae:ec:bc:81:15:04:d1:ab:5f:1d:
9d:d7:53:c9:58:34:27:06:8a:31:95:48:41:70:95:
9c:38:57:45:2e:be:ee:36:df:a4:f3:9e:1d:6b:8a:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:90:56:90:36:B0:55:46:C4:41:23:FA:22:47:5C:48:09:DF:DB
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d0:7c:59:dd:44:32:54:d6:8d:ee:e7:bf:7b:1c:d4:19:57:
d3:9b:10:d7:42:19:b0:e1:63:4b:f3:2e:54:7b:ce:45:ea:37:
fa:19:3a:28:a7:27:47:5b:ac:f3:9d:30:7e:53:b6:9a:42:3f:
73:1e:a8:63:8b:c4:0a:79:1b:8e:e6:13:df:89:4a:06:b8:67:
f6:59:11:7a:64:95:40:65:21:2c:38:6c:2c:42:b3:c9:7e:8a:
64:2f:45:2b:29:1d:3d:e6:67:90:fd:94:d1:9c:ef:f4:d3:d4:
0d:71:63:cd:7f:3f:52:95:ea:1d:3a:c0:09:f0:49:c2:8e:13:
62:79:a7:cc:80:b9:94:d4:59:3e:af:ee:79:06:5a:ad:00:d7:
07:28:ed:93:c8:c4:4c:47:a0:b8:56:6f:31:3b:66:18:e0:12:
5c:52:b2:bb:a6:54:7a:93:2c:6a:38:d4:bf:14:5c:dc:f2:43:
8d:ca:40:48:30:a1:f9:da:07:aa:03:b8:d6:41:a5:ad:b6:72:
60:f4:7e:c7:bf:e5:1d:f0:77:f3:a5:4b:ac:c0:e0:82:1f:af:
c7:19:81:78:d3:f2:1a:92:94:43:84:3b:32:17:7f:03:d0:31:
14:24:ab:75:b3:74:f7:71:5d:c4:c2:3d:04:e2:1c:79:8e:50:
5f:8a:95:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:20:19 2026 by rpki-client