Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
File: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft (raw, json)
Hash identifier: Ie76C1swKvHzj261VDk3O/Z0qW1kNIJ0StNMtmATgm0=
Subject key identifier: B5:D8:4F:77:DB:D4:34:9C:43:D0:C8:C2:50:30:FF:ED:21:A6:ED:A5
Authority key identifier: D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
Certificate issuer: /CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Certificate serial: 01A0F90F342FC37AC8EDC114368E88A24EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
Manifest number: 01C3
Signing time: Thu 01 Oct 2026 20:01:58 +0000
Manifest this update: Thu 01 Oct 2026 20:01:58 +0000
Manifest next update: Fri 02 Oct 2026 20:01:58 +0000
Files and hashes: 1: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl (hash: rbPD6tVXZv+506WQzsZPCejg9lIgHuDn7t0F43IYqaY=)
2: de_jsj8CpSljIjcGiO4A6ZRhO1I.asa (hash: N/rOb5DkyhPin/riPrKSvflYTWR9QweMJOMrP3OE2iQ=)
3: r9tO5dOM7W3cJ0IAJV4a9_UjU64.roa (hash: 7p0HLcZz+BpTWdYxVEea5xby6zTSJ5cYhN5NEaQQ0nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0f:34:2f:c3:7a:c8:ed:c1:14:36:8e:88:a2:4e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Validity
Not Before: Oct 1 20:01:58 2026 GMT
Not After : Oct 2 20:01:58 2026 GMT
Subject: CN=b5d84f77dbd4349c43d0c8c25030ffed21a6eda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:a8:9b:82:8a:3b:c9:39:62:c2:c2:11:57:
c1:78:6b:db:f5:d6:26:e9:04:cf:2e:1d:69:f4:2d:
dd:76:93:ba:80:ba:e5:1c:c9:57:5c:e8:f4:9c:0c:
55:cd:52:ac:c4:c8:b3:e6:03:fc:cd:ea:7b:48:25:
2f:22:3a:ea:fa:71:22:05:ff:d3:74:44:eb:60:14:
c9:f2:5d:b7:7b:97:10:f8:a9:ef:52:3e:93:9c:02:
80:16:02:5b:50:6d:0b:4e:f0:10:9e:ae:ec:39:73:
14:dd:aa:d7:48:6f:c2:76:b1:aa:ea:de:35:f2:94:
bb:62:fa:6a:ea:50:11:79:ab:d0:21:00:3c:f1:d5:
af:2d:8e:c0:2c:32:b3:49:ea:a5:89:89:aa:42:07:
d4:21:05:87:80:17:93:94:f9:71:3e:76:3c:54:fe:
39:18:38:b8:dd:36:70:75:7d:05:04:c5:e4:be:73:
05:44:82:37:e0:1c:68:d7:49:36:48:9c:ec:89:23:
f2:b2:df:8a:30:a2:da:33:c4:8d:d9:64:bf:57:f6:
4f:4f:6a:bf:af:f9:35:ee:0c:b7:e5:9f:c8:4c:f1:
8b:27:aa:7b:9b:e8:ba:2d:8f:70:61:b1:69:81:1b:
4d:ce:82:0d:2a:68:c3:79:c0:5c:3b:7d:b0:06:39:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:4F:77:DB:D4:34:9C:43:D0:C8:C2:50:30:FF:ED:21:A6:ED:A5
X509v3 Authority Key Identifier:
keyid:D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:83:3d:63:0b:a5:89:c0:99:94:bd:b3:07:d6:4e:c0:f6:28:
92:0c:e3:00:13:65:da:7d:26:4c:f3:91:57:0a:7a:c7:cb:ee:
fd:fc:2d:2e:fe:fe:89:f6:ce:61:83:09:46:c0:45:fa:57:38:
4a:31:8a:1d:d3:11:cf:0e:4a:93:9b:6e:31:ce:ab:ce:09:4c:
0a:3b:7e:67:fe:46:45:27:2d:cc:cb:af:4a:ce:fc:4c:e7:91:
a4:65:54:74:8a:36:5f:1b:d9:93:3b:86:d1:b0:20:c1:63:4a:
b6:8e:2f:62:a0:90:b7:6e:77:2c:6a:b5:e0:a3:01:dc:c7:66:
cc:ea:ca:36:c4:00:4d:c0:67:5f:82:ec:98:ae:4c:87:35:4b:
e6:d0:9f:39:0d:03:8c:48:02:93:a5:d4:48:7d:79:40:f1:07:
3d:7f:47:65:64:23:d6:4d:a0:bb:2c:fd:37:d9:b2:16:cb:8a:
d1:4f:9b:1e:ef:fc:95:76:40:6f:0c:b8:6c:7c:c6:21:a0:d6:
4c:ae:e2:e5:79:0a:9a:02:3c:a4:2e:7a:1b:92:58:4f:57:88:
ec:94:50:78:36:8b:f3:0d:e9:ae:81:a2:18:5d:49:7a:00:b4:
83:6f:c0:78:11:2c:84:ac:a0:8d:30:59:6f:95:1b:52:2d:af:
d1:d1:ef:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD5DzQvw3rI7cEUNo6Iok6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWM2YzJlMmIzZTc1MTg4N2QzYTU3MmQxZjYwY2YxNjMy
NDcwOWUwHhcNMjYxMDAxMjAwMTU4WhcNMjYxMDAyMjAwMTU4WjAzMTEwLwYDVQQD
EyhiNWQ4NGY3N2RiZDQzNDljNDNkMGM4YzI1MDMwZmZlZDIxYTZlZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2COom4KKO8k5YsLCEVfBeGvb9dYm
6QTPLh1p9C3ddpO6gLrlHMlXXOj0nAxVzVKsxMiz5gP8zep7SCUvIjrq+nEiBf/T
dETrYBTJ8l23e5cQ+KnvUj6TnAKAFgJbUG0LTvAQnq7sOXMU3arXSG/CdrGq6t41
8pS7Yvpq6lAReavQIQA88dWvLY7ALDKzSeqliYmqQgfUIQWHgBeTlPlxPnY8VP45
GDi43TZwdX0FBMXkvnMFRII34Bxo10k2SJzsiSPyst+KMKLaM8SN2WS/V/ZPT2q/
r/k17gy35Z/ITPGLJ6p7m+i6LY9wYbFpgRtNzoINKmjDecBcO32wBjnoDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXYT3fb1DScQ9DIwlAw/+0hpu2lMB8GA1UdIwQY
MBaAFNJcbC4rPnUYh9OlctH2DPFjJHCeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGx4c0xpcy1kUmlIMDZWeTBmWU04V01rY0o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jNTgyZjctMTIzZi00MGIyLWIwMDct
NDI3OGY2MDBmZTk2LzEvMGx4c0xpcy1kUmlIMDZWeTBmWU04V01rY0o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jNTgyZjctMTIzZi00MGIyLWIwMDctNDI3OGY2MDBmZTk2
LzEvMGx4c0xpcy1kUmlIMDZWeTBmWU04V01rY0o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYM9Ywul
icCZlL2zB9ZOwPYokgzjABNl2n0mTPORVwp6x8vu/fwtLv7+ifbOYYMJRsBF+lc4
SjGKHdMRzw5Kk5tuMc6rzglMCjt+Z/5GRSctzMuvSs78TOeRpGVUdIo2XxvZkzuG
0bAgwWNKto4vYqCQt253LGq14KMB3MdmzOrKNsQATcBnX4LsmK5MhzVL5tCfOQ0D
jEgCk6XUSH15QPEHPX9HZWQj1k2guyz9N9myFsuK0U+bHu/8lXZAbwy4bHzGIaDW
TK7i5XkKmgI8pC56G5JYT1eI7JRQeDaL8w3proGiGF1JegC0g2/AeBEshKygjTBZ
b5UbUi2v0dHvpA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 02:57:12 2026 by rpki-client