
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
File: 1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json)
Hash identifier: Ff/39ommGg82cuez3rigSZAPu2zBDURsJyqyGvVJSaU=
Subject key identifier: 3D:B2:3C:9B:BC:8F:7F:9C:AB:7E:95:24:5F:EC:83:2B:25:8C:8B:4D
Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
Certificate issuer: /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Certificate serial: 01A0C5C55F604655FF70F7A8A4CC57889609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
Manifest number: 0310
Signing time: Mon 21 Sep 2026 21:00:41 +0000
Manifest this update: Mon 21 Sep 2026 21:00:41 +0000
Manifest next update: Tue 22 Sep 2026 21:00:41 +0000
Files and hashes: 1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: XB0kmPjoHxmAsOdgNEO/LaXtoQdtr4sIHIuoWdxuakY=)
2: iYN0utCjOjCIPINNJfjhuG0vjOg.roa (hash: 7Wnyb9CGOm4TN0ey7ufrrNiIF/X3LDz9AlFMHrkszjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:5f:60:46:55:ff:70:f7:a8:a4:cc:57:88:96:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Validity
Not Before: Sep 21 21:00:41 2026 GMT
Not After : Sep 22 21:00:41 2026 GMT
Subject: CN=3db23c9bbc8f7f9cab7e95245fec832b258c8b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:49:b6:78:af:24:01:4d:47:6c:8a:ce:6f:
b5:8b:48:1f:9e:1b:94:18:81:8f:c0:ed:42:58:0f:
23:37:41:90:b0:de:af:23:d0:c8:2f:6f:9e:71:c3:
47:e7:a2:d2:d4:25:20:06:26:0f:2b:17:73:c7:4d:
4d:9d:d7:f2:b0:52:8e:87:4e:07:ee:73:81:2a:f1:
a6:df:2c:84:98:27:2a:dd:21:43:df:1d:25:3c:95:
00:95:d4:e9:0b:70:f9:46:a4:b3:b7:91:1d:be:c3:
b2:a0:8f:2b:f5:d3:6a:32:f6:3c:84:ae:de:14:a9:
41:2d:a2:b0:e3:a8:fd:91:d2:82:8e:f2:3f:1a:4a:
34:89:19:b9:3f:89:fc:48:af:cf:7c:ad:91:2b:cd:
41:e9:9f:ce:99:93:67:a1:7d:ec:ff:f8:40:b1:a5:
5f:9b:0b:61:32:1f:44:b0:84:b2:a1:da:13:2b:97:
48:07:70:ff:12:6a:60:3d:b6:b8:0c:8b:8c:fa:25:
28:e6:08:23:0b:7a:4c:93:05:c6:c2:0e:5e:a4:92:
4c:03:f4:f3:64:88:ed:2b:54:94:00:b8:9b:b0:6b:
3c:40:87:9f:4a:d1:0f:9d:e0:c6:61:60:25:4d:e2:
0e:1a:15:d4:56:63:2a:86:14:61:ea:66:3a:e6:af:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:3C:9B:BC:8F:7F:9C:AB:7E:95:24:5F:EC:83:2B:25:8C:8B:4D
X509v3 Authority Key Identifier:
keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:20:2b:21:e2:7b:4c:f3:5e:c9:63:df:c7:82:25:1b:e4:21:
4c:9c:5a:1b:52:ad:cd:61:7d:d4:87:11:fa:52:b8:65:5f:b4:
d3:d8:1a:9d:70:7d:7d:ca:01:28:01:94:fd:74:2b:b0:be:18:
a0:97:53:a7:bb:03:46:09:5c:5d:0e:8b:ab:11:ce:3b:67:b2:
a3:ab:e3:68:95:9b:e8:8b:94:b8:1b:59:46:46:27:c3:92:34:
6d:ef:84:56:85:4e:47:35:82:ec:bc:88:04:78:5d:fe:33:b3:
12:ce:81:6e:34:29:92:04:8d:31:fe:9f:ab:a0:fc:09:82:46:
75:d0:f1:72:4d:fd:44:34:ff:e4:0f:61:0f:f9:3c:ff:e1:38:
6b:0b:d7:f5:56:2d:9c:bb:12:87:7f:99:51:fd:67:5e:39:16:
a0:f5:9c:c6:6c:66:b5:a7:6d:c5:bb:53:6f:74:86:86:cf:ee:
2e:2d:2d:37:61:ce:13:39:eb:6e:1f:9a:88:bf:f1:12:08:16:
ba:52:66:23:52:c7:b3:2c:15:74:5e:46:eb:38:33:e2:a5:10:
b1:a8:95:8a:d2:75:ac:63:e2:ed:73:db:06:08:e1:44:93:b8:
e3:5a:3d:3d:b6:92:b0:60:e8:0b:50:8c:ac:89:a7:f7:ea:5d:
a5:cf:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:37:55 2026 by rpki-client