
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
File: 1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json)
Hash identifier: 3GJIFAiAk8wWVueBMT3au0bTYGYxrTO50IvllI6kXpA=
Subject key identifier: BB:E6:5E:6E:4B:53:59:39:5D:03:87:34:83:1E:5B:A6:C4:34:1A:C2
Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
Certificate issuer: /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Certificate serial: 019FA9E2EA46A773A750D621079F51E44671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
Manifest number: 027D
Signing time: Tue 28 Jul 2026 18:00:48 +0000
Manifest this update: Tue 28 Jul 2026 18:00:48 +0000
Manifest next update: Wed 29 Jul 2026 18:00:48 +0000
Files and hashes: 1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: UpQcRMNdIpSOxRn48iiIo9HvFG/eMJcg+djOZWTZ1PE=)
2: iYN0utCjOjCIPINNJfjhuG0vjOg.roa (hash: 7Wnyb9CGOm4TN0ey7ufrrNiIF/X3LDz9AlFMHrkszjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ea:46:a7:73:a7:50:d6:21:07:9f:51:e4:46:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Validity
Not Before: Jul 28 18:00:48 2026 GMT
Not After : Jul 29 18:00:48 2026 GMT
Subject: CN=bbe65e6e4b5359395d038734831e5ba6c4341ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:11:7a:a7:fb:9c:12:cd:4a:0b:77:4e:1a:
dd:e1:a9:39:37:1d:4e:31:57:b6:ad:5a:04:b4:b1:
d6:4c:31:b8:62:31:be:a1:18:91:43:cf:4f:56:61:
db:e3:a3:0a:40:46:ce:3e:63:f2:1b:a5:43:98:ed:
a3:96:b1:8b:f1:54:f9:9f:20:8c:9d:03:57:43:4b:
d8:e5:d2:11:a8:77:35:f4:c6:6a:15:e2:9d:2b:8f:
a6:ad:55:17:a6:15:52:8d:2b:5b:b5:c7:04:9e:09:
1d:f4:1b:a5:0f:bb:b5:56:69:91:75:80:34:a4:a4:
30:c9:32:13:de:25:46:b4:51:a7:b6:6e:f6:db:ca:
30:01:58:e2:aa:82:d4:12:b5:30:5c:ef:ab:86:a8:
fb:ed:c0:f7:3a:95:a9:2f:63:8d:2c:53:7e:54:ce:
71:0a:08:dd:37:77:db:ad:b8:5a:5c:cf:c8:b8:64:
8b:38:90:a9:4e:94:00:b3:14:a3:89:3b:95:50:8c:
b7:23:11:44:63:a1:29:c5:45:23:ec:26:6b:d5:a8:
3f:d2:fc:58:5f:6d:02:03:10:4e:45:8f:be:10:71:
65:5e:0c:73:66:16:80:aa:22:01:20:f3:6f:41:dc:
44:41:ec:5f:87:07:4a:48:a8:18:24:5d:2a:19:76:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:5E:6E:4B:53:59:39:5D:03:87:34:83:1E:5B:A6:C4:34:1A:C2
X509v3 Authority Key Identifier:
keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ea:bd:e6:b1:ac:92:57:64:9e:71:e4:04:ef:ca:54:97:c3:
f5:cb:da:b0:6d:03:3e:be:46:25:3c:b9:69:16:0d:23:bb:0a:
d6:19:97:91:55:b1:ee:2e:78:ef:9a:b0:0d:6a:a3:50:c2:45:
9e:05:e4:d3:25:e4:c5:a4:9e:13:04:b7:60:5f:a1:58:d9:dc:
e3:f1:87:90:b7:19:e4:6f:84:cb:b4:c8:65:2d:f8:a3:92:ca:
52:c9:7a:7c:17:59:e0:f5:ee:3f:dd:75:e8:86:b3:d8:b4:c7:
cc:3e:b4:84:bc:37:41:50:53:90:d3:73:10:90:c4:de:d4:da:
e1:63:74:20:a9:f7:26:5c:3d:b6:10:79:0e:1c:39:a6:e0:a1:
83:fc:1b:7b:bb:1a:c8:4e:ad:47:a4:b1:43:5b:0b:a1:7c:b4:
6f:c0:45:a5:fd:d8:07:0b:ba:e8:ab:45:76:e0:c2:54:96:c1:
19:05:a6:f1:91:e2:fd:e0:85:28:d4:3c:89:c4:44:27:6d:2b:
50:4f:a3:17:df:e8:18:bc:81:e4:97:67:d6:18:86:88:09:a8:
cd:dd:24:ae:f0:e1:57:cd:35:b1:be:4b:1e:9f:0f:f4:46:1e:
86:fe:b2:57:7e:38:a3:72:b2:57:73:3a:48:cd:23:e3:9a:f3:
f6:ec:98:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:04 2026 by rpki-client