Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
File: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft (raw, json)
Hash identifier: nfXh+ixzF1zJvbXYcVZ0e7OYxKfTuBkX+OgoPGc7/9Q=
Subject key identifier: 5C:4F:B0:F7:9E:53:FF:C5:7F:8F:94:EF:A9:0D:54:0E:AA:BD:BB:89
Authority key identifier: D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
Certificate issuer: /CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Certificate serial: 01A0F3435BBE616F70F8483294BB0A9FDF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
Manifest number: 01C0
Signing time: Wed 30 Sep 2026 17:01:12 +0000
Manifest this update: Wed 30 Sep 2026 17:01:12 +0000
Manifest next update: Thu 01 Oct 2026 17:01:12 +0000
Files and hashes: 1: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl (hash: 4Eq2l4ApvHYvua9EvNzIfyAteqBzVqxojpqSJ/4lW8A=)
2: de_jsj8CpSljIjcGiO4A6ZRhO1I.asa (hash: N/rOb5DkyhPin/riPrKSvflYTWR9QweMJOMrP3OE2iQ=)
3: r9tO5dOM7W3cJ0IAJV4a9_UjU64.roa (hash: 7p0HLcZz+BpTWdYxVEea5xby6zTSJ5cYhN5NEaQQ0nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:5b:be:61:6f:70:f8:48:32:94:bb:0a:9f:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Validity
Not Before: Sep 30 17:01:12 2026 GMT
Not After : Oct 1 17:01:12 2026 GMT
Subject: CN=5c4fb0f79e53ffc57f8f94efa90d540eaabdbb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:cf:25:4c:54:6d:ca:e4:09:27:68:49:19:
d8:0b:04:b9:77:05:c4:d7:d0:f9:36:73:17:26:c6:
72:ee:69:65:c4:c6:21:01:d5:f8:de:ad:e7:30:a4:
b9:51:5b:08:40:33:08:d5:0c:9e:0a:8b:6b:81:0d:
23:7e:ee:53:54:6e:c8:54:4d:84:a4:65:39:73:43:
cc:0a:e4:6f:c2:a2:6a:11:09:0d:cf:71:c0:b6:d9:
1b:b8:ee:a3:9c:fe:ca:b4:22:47:5c:4c:d5:26:06:
62:84:ff:44:74:90:cd:03:bb:61:0f:61:b7:09:fa:
5d:4a:82:14:7a:12:c3:46:91:ad:f2:e5:3e:8a:08:
c8:73:8b:d0:4c:e7:81:12:e4:a2:42:14:42:9b:06:
62:c1:3a:bb:cf:ee:40:3b:71:db:19:dd:e2:0d:38:
dc:ed:ca:e4:3f:0c:e4:45:f7:73:7b:d9:72:5d:3a:
68:0a:9d:71:f8:7e:17:af:26:19:d6:5e:4e:85:08:
16:bb:06:ac:9a:04:f4:fb:0c:f8:76:99:d9:4a:a0:
4d:8f:69:f1:34:9d:43:eb:3b:e9:27:b7:39:ca:ec:
3e:e2:d1:1f:40:59:af:16:6b:8f:1a:c8:68:57:5d:
be:4c:75:1e:2f:77:76:84:94:c3:b8:be:c3:1e:cb:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:B0:F7:9E:53:FF:C5:7F:8F:94:EF:A9:0D:54:0E:AA:BD:BB:89
X509v3 Authority Key Identifier:
keyid:D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:67:84:45:17:d3:8e:df:43:6b:58:7c:c2:12:24:2e:c8:de:
b2:d5:8e:16:86:bf:13:b8:70:7c:56:da:5d:0e:cd:b3:ab:c7:
e3:f1:90:4d:2a:67:a1:e0:b1:f1:5f:bd:78:79:de:44:5e:5d:
1e:f4:03:52:bb:c8:c7:e6:7f:9b:83:f2:b5:e3:90:c4:a7:c0:
18:6f:22:2c:cb:7c:b4:a3:71:f8:b8:3d:70:ff:15:2a:c3:9b:
ea:2a:b7:29:e6:81:24:84:ee:2d:cf:9f:63:8a:1d:23:31:85:
b9:92:01:8c:08:2c:4a:04:b9:c8:ca:44:f3:c3:12:cf:cd:7d:
bc:94:21:b4:a2:ba:1e:f4:2b:86:9c:17:ed:bb:b6:21:f7:9c:
c8:23:40:77:4e:78:91:3d:2b:35:55:6e:19:b6:2e:b9:44:78:
e8:b7:39:31:d4:7e:0d:05:8d:87:1b:af:8a:bb:75:6a:a7:fa:
b7:93:82:e8:fa:47:0f:bc:3a:43:0c:ce:9b:ab:1b:3a:b3:bd:
a3:90:00:05:30:f5:64:40:f1:7e:7f:e2:bf:bd:e3:7e:78:46:
99:11:09:ef:bd:b2:35:8d:44:60:38:6d:35:33:2e:cd:b3:7a:
fc:45:7b:0d:54:f0:c0:0b:9a:82:3d:42:21:a7:bb:ef:57:98:
6d:db:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:22:52 2026 by rpki-client