Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: bMrxr/KRV7kP1y8PWYZi+Ls+rRk+lSsTmbMIPLPcOWQ=
Subject key identifier: 18:EA:C6:AF:AF:EF:0A:6A:84:3E:88:C0:B2:2A:E3:24:AC:CE:B8:6E
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 01A0E81CC0F9A64D41CEE354F90FFC9A28AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0B85
Signing time: Mon 28 Sep 2026 13:03:13 +0000
Manifest this update: Mon 28 Sep 2026 13:03:13 +0000
Manifest next update: Tue 29 Sep 2026 13:03:13 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: bPN8ZNg8Svw5JzASa0/YzzLr2phj94Z0saThK5wPjWE=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:c0:f9:a6:4d:41:ce:e3:54:f9:0f:fc:9a:28:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Sep 28 13:03:13 2026 GMT
Not After : Sep 29 13:03:13 2026 GMT
Subject: CN=18eac6afafef0a6a843e88c0b22ae324acceb86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:b1:2c:08:dc:7b:53:79:99:46:21:21:83:
3a:0f:4c:df:45:7e:e1:e6:e7:ce:a6:e6:aa:a6:fc:
20:b4:aa:01:17:96:d5:de:17:84:56:0c:82:bb:57:
fb:a4:23:77:dc:ac:c5:a4:c6:75:01:38:47:81:5d:
57:46:0d:e7:28:a9:9c:9e:2a:5a:2c:e6:91:51:5b:
ca:f2:86:13:64:b4:da:53:65:84:65:57:ec:58:a0:
40:58:92:12:81:0d:e0:b2:6e:f4:00:ff:ff:e7:db:
31:ae:99:54:29:2c:24:15:a3:0c:9d:64:88:3d:7e:
9c:15:b6:3e:23:28:11:9b:bf:ec:19:64:fa:f6:3a:
8f:dc:21:9e:b5:e5:5f:1c:52:ce:4a:2d:e7:cf:12:
d9:f8:92:7d:91:9d:af:a6:60:d6:80:3e:a7:bc:44:
b2:77:42:40:ca:3b:76:15:e8:95:1e:6f:ab:67:31:
a8:eb:79:fb:af:cc:2d:55:83:e6:3e:1d:15:46:ed:
6f:9b:1f:4d:b2:47:21:2b:1f:11:c7:28:6d:ce:f3:
78:0c:86:5e:79:48:ef:f1:f8:f4:89:97:08:f6:ce:
af:40:46:b5:19:aa:d5:2f:ef:7f:5d:24:d4:c9:ca:
97:0c:2c:9e:26:40:6d:de:00:33:3b:4a:60:b0:5f:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EA:C6:AF:AF:EF:0A:6A:84:3E:88:C0:B2:2A:E3:24:AC:CE:B8:6E
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cd:e4:8a:8a:20:3e:7c:c4:19:89:a9:35:67:49:35:c5:50:
e6:82:b9:00:65:da:4b:98:dd:d3:10:e9:b5:8e:80:90:20:2c:
da:11:37:f7:d6:13:f2:91:17:de:d1:90:2b:bb:8e:95:ac:2c:
54:99:99:b7:18:86:cc:d9:3d:66:6f:cd:6a:82:11:dc:75:3b:
c7:19:db:e6:fa:82:e9:bd:e1:83:c8:15:75:5a:48:41:9c:62:
20:73:e8:f0:fa:7b:aa:45:e0:88:4d:e7:3c:b2:f3:65:3f:08:
18:0b:ea:ac:cb:2d:de:b5:c7:9e:db:43:d3:d3:ed:bf:1c:25:
f8:ab:14:8f:2c:5f:75:52:66:90:aa:c9:32:56:94:83:c8:69:
1f:cf:a0:b7:f8:5d:c7:de:30:36:06:8e:d5:9f:65:98:a8:dd:
60:31:eb:c9:67:bc:f9:44:aa:2f:b2:5f:a4:33:83:c3:9a:7e:
15:20:c3:09:c8:44:cb:46:bf:0d:fe:b5:d1:c1:ab:e2:20:ea:
07:74:48:e0:9c:b8:01:59:51:75:c8:dc:0a:1d:3c:74:0f:70:
0e:84:9e:fa:31:fd:93:8e:98:1a:aa:28:b1:20:b8:a2:e6:56:
db:0c:05:b1:5e:8c:3f:15:46:bf:74:84:e4:da:f5:36:42:64:
b9:93:cb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:51:26 2026 by rpki-client