Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: 4DjPrqh83p2kZiNaObjIcxo94rDLuQfM4q1Pe7BPAvc=
Subject key identifier: 0B:D7:07:CD:39:3F:EC:CD:78:C7:68:DD:AA:DC:76:D8:59:F6:6F:25
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 01A0C557F203C9A7BC65B19808CC91A96F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 19:01:10 +0000
Manifest this update: Mon 21 Sep 2026 19:01:10 +0000
Manifest next update: Tue 22 Sep 2026 19:01:10 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: qGm5WKPUTxFqM9LKzXSIWLD0x9N9FlQoBem51tw12+4=)
2: 5s6XKsomdWNWDCdDfvlwJ_bv16M.roa (hash: 2MYOlX42yAcrFD0bmpi2VtXwK7LzEOj6ivS2Lm4VbdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:f2:03:c9:a7:bc:65:b1:98:08:cc:91:a9:6f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Sep 21 19:01:10 2026 GMT
Not After : Sep 22 19:01:10 2026 GMT
Subject: CN=0bd707cd393feccd78c768ddaadc76d859f66f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:65:e1:c8:23:71:0e:27:c2:de:66:7b:43:
3e:1f:58:f4:7b:95:d4:11:34:3c:92:1b:4d:ff:c1:
f6:02:30:c7:d3:f9:df:5c:e3:b7:95:45:66:d5:86:
34:6d:48:72:48:0d:e8:e3:2f:64:5c:d5:96:53:3f:
d2:50:7d:48:ed:01:a8:6d:5e:a3:9d:a3:2a:29:a7:
4b:ef:95:56:74:7f:7f:9b:d5:2b:7f:ed:f6:f2:e9:
e5:cc:b2:0c:87:ca:18:e5:2f:7c:71:cf:7d:ae:e8:
f8:b6:7b:1d:ca:39:43:45:38:dc:d8:66:b0:59:7e:
23:09:20:16:7b:90:fa:d5:0f:b8:b5:23:1f:dc:46:
4d:de:e4:b3:16:ad:a4:a4:6e:ad:d3:6e:76:71:91:
7f:70:57:84:0a:98:d4:d8:82:57:4a:8c:c8:eb:42:
d0:65:51:3c:30:ef:13:7e:f9:99:b6:60:1b:57:7b:
4e:98:85:4a:f9:73:ef:b0:b3:a4:98:71:dd:11:99:
83:7f:02:03:07:8a:f7:a0:64:42:16:7b:77:47:24:
22:06:b2:96:17:29:48:33:37:5d:7e:22:05:fe:ef:
27:a6:80:1d:21:45:bf:72:2d:9f:71:91:79:00:8c:
84:e7:c2:94:6a:7b:a1:cd:dd:b0:31:de:8b:da:5d:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D7:07:CD:39:3F:EC:CD:78:C7:68:DD:AA:DC:76:D8:59:F6:6F:25
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:91:20:22:bf:b6:d8:20:23:9d:9b:01:ed:47:86:3f:dd:c2:
50:ca:b7:c8:4f:04:2b:13:31:68:c8:76:18:da:36:1c:7c:7f:
b3:14:0f:56:f0:8a:be:60:a5:05:f5:e2:62:dc:bf:2c:53:82:
d0:86:c1:70:c0:45:6e:84:c4:f7:1e:f7:62:b9:88:a2:c4:46:
ab:41:30:49:ce:8e:1b:4e:2a:5b:9e:30:32:3e:6a:58:88:ad:
33:3c:6d:07:27:16:49:51:13:30:78:64:10:3f:00:ec:ff:8b:
cc:7c:c7:4a:5d:b0:96:f0:02:be:b9:d0:66:c7:76:c3:59:56:
36:37:3b:35:94:76:85:0e:90:4e:37:78:07:38:f8:50:30:22:
73:0a:3a:91:a7:c2:2d:aa:6e:b0:63:a1:7f:06:e8:20:3b:fc:
16:c6:dd:3d:fd:0f:8c:8f:47:69:a4:12:88:45:f6:4b:d3:ff:
41:cc:9f:0e:a5:18:d9:ac:82:a1:db:9d:f5:55:a4:00:c5:ae:
4e:c6:be:4b:ee:e5:9c:2b:13:d8:2e:65:3c:09:9c:55:58:a5:
2e:57:06:41:b4:e6:d1:b9:0d:5b:54:1e:b3:81:5e:68:a0:a2:
0f:3f:1a:87:b4:72:b9:dc:44:15:61:e3:de:1f:9f:45:c6:ca:
c9:20:50:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:23:51 2026 by rpki-client