Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: WKmnpcujU4GU5hZZdAWOGjw839dqY9BagObWz+6noz0=
Subject key identifier: 91:63:5C:C1:96:8D:AB:F9:06:91:88:2E:A1:53:78:36:E5:EF:8D:19
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 01A0C3689B7F7DD316A203CAE74E335AA968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 10:00:07 +0000
Manifest this update: Mon 21 Sep 2026 10:00:07 +0000
Manifest next update: Tue 22 Sep 2026 10:00:07 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: gndVXKqo115ntoeHvVpCkpzBcUiaaqee+AxQ/vstSSo=)
2: 12mV3ZosY8cTKWpFfBQEfwnx0BM.roa (hash: sqnV6smhnureA54M31ulMVSP8a9WYb/7AIpEIZop+fE=)
3: w-By4YicrBafnG_nw52slsPB7Mo.roa (hash: EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:9b:7f:7d:d3:16:a2:03:ca:e7:4e:33:5a:a9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Sep 21 10:00:07 2026 GMT
Not After : Sep 22 10:00:07 2026 GMT
Subject: CN=91635cc1968dabf90691882ea1537836e5ef8d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:99:b7:46:e7:71:51:85:5b:8c:92:b6:fa:
80:3c:19:70:84:89:1f:6a:d2:5e:a5:c5:2b:16:6e:
ac:4c:ef:2a:f8:cd:29:26:f7:9c:c9:96:ed:f9:c8:
79:38:45:d8:00:e6:6c:cd:6f:eb:b1:11:c1:fc:31:
e8:4e:7d:88:c5:4c:45:7f:20:cb:1e:3d:1c:2e:6f:
50:e7:3f:b9:78:fa:9d:ec:ac:ec:5f:7c:6e:75:36:
0f:62:97:69:2b:59:aa:1a:8d:7f:43:ad:5b:53:7b:
a7:57:c1:04:ea:40:78:b1:f4:93:eb:64:1d:cd:87:
37:de:67:34:a3:f1:3d:25:ce:e6:98:fa:65:64:a9:
be:80:18:7a:c6:57:34:74:ac:4c:7d:08:74:b7:38:
77:94:f5:21:1c:2e:18:01:0c:de:9c:25:3d:d7:1b:
d5:6a:27:64:fe:a7:89:99:ee:d9:6c:17:65:4c:ff:
15:cd:92:13:b4:ea:18:01:e9:59:17:fb:a0:28:9d:
ff:8e:84:1d:0b:11:75:2c:28:bf:f9:42:a8:09:b5:
02:c8:30:9f:24:03:8c:23:81:30:4e:4a:d4:8b:e9:
ba:53:2c:1c:12:c7:74:c9:cd:36:e3:2b:1f:f6:88:
17:d1:f9:ff:29:ff:e4:24:29:e7:ea:d8:26:5e:05:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:63:5C:C1:96:8D:AB:F9:06:91:88:2E:A1:53:78:36:E5:EF:8D:19
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6b:9a:13:0a:32:3a:6b:5e:85:da:10:d9:aa:5b:58:26:0f:
03:46:b5:6c:ce:6a:51:f3:77:f2:a7:8f:6c:e0:e4:6a:6f:73:
ee:b1:68:8c:4d:8d:76:29:90:57:e7:b6:ce:28:15:fc:e6:3b:
64:31:64:02:6b:02:ae:0c:95:a8:ac:96:eb:fd:97:73:2d:8b:
41:66:db:25:3a:59:34:77:81:dd:74:7c:02:55:5e:39:2c:9a:
3e:40:ee:6c:00:dd:d6:91:de:3b:a0:bd:69:62:ff:df:70:14:
12:cd:e2:2b:b7:38:c0:71:24:56:e6:8c:af:8c:f1:3a:69:0f:
29:bc:73:88:29:bb:a3:e5:45:a1:81:3e:c6:95:2a:1f:4d:29:
dd:57:be:d0:d6:02:63:72:af:42:03:b2:6b:ef:25:a9:34:00:
4a:3d:f7:bc:c2:53:e0:19:60:96:c3:40:3d:c6:b7:2c:fb:6f:
7f:67:43:b4:1e:a4:de:7e:3a:5e:81:ce:a1:eb:d3:0c:a0:43:
f3:a1:29:99:47:fe:9b:bb:90:0e:10:c1:5d:0d:d5:50:9f:75:
c6:68:cb:7c:68:37:b8:dd:4d:f5:a9:aa:8b:fd:dc:66:70:af:
06:a1:a3:5e:8a:cc:8a:e3:ee:58:36:d4:9a:31:6c:89:f8:6f:
86:6e:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:10:45 2026 by rpki-client