Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
File: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft (raw, json)
Hash identifier: waKLCD53Ew+xbEOvlRldoI/eIWD31of52XKSRfp1OSk=
Subject key identifier: E0:FB:0B:75:73:4B:2F:07:34:13:5E:38:63:83:4E:C3:72:E2:46:2F
Authority key identifier: D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
Certificate issuer: /CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Certificate serial: 019E1EA3A3863F1B3A2826448C35AB83001A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
Manifest number: 48
Signing time: Wed 13 May 2026 00:01:41 +0000
Manifest this update: Wed 13 May 2026 00:01:41 +0000
Manifest next update: Thu 14 May 2026 00:01:41 +0000
Files and hashes: 1: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl (hash: wXDgc8yz8tMOFNqAns16me5pcNHzrgfUP9hEkaKIzac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:a3:86:3f:1b:3a:28:26:44:8c:35:ab:83:00:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Validity
Not Before: May 13 00:01:41 2026 GMT
Not After : May 14 00:01:41 2026 GMT
Subject: CN=e0fb0b75734b2f0734135e3863834ec372e2462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:cc:67:1d:06:c2:0e:e8:2f:b7:96:0e:d0:
45:e5:c2:bb:26:96:e0:f3:f9:fb:3b:a3:bd:ea:58:
ad:5f:aa:66:7e:a3:ec:2c:13:6a:ef:22:78:d1:9e:
24:f5:98:b7:44:54:40:2d:ec:fd:30:a2:01:60:83:
57:6e:9f:5c:33:3d:49:b9:6c:89:f8:28:d6:6e:bc:
e5:61:3f:eb:a6:8a:5f:93:04:bf:e0:72:b9:41:0a:
0f:96:5a:66:3e:04:8a:11:d7:bc:44:57:13:db:46:
07:92:09:08:38:89:3a:11:d1:bd:24:1f:a3:a4:b5:
05:00:a9:b5:97:9f:80:95:6b:08:92:93:a4:5f:ee:
08:84:d8:f1:80:90:08:1c:0f:c8:ce:7a:25:86:cd:
a6:03:c5:4f:86:aa:0e:be:9f:20:c0:8a:e4:b7:0e:
de:50:66:06:e1:db:75:f0:79:49:1f:89:f5:fe:d1:
df:ea:60:ed:f7:ab:0a:c5:7a:f1:57:77:18:8c:d1:
0b:48:96:81:dd:0b:4d:6f:da:ce:ce:d3:c5:55:0c:
d0:80:44:1c:39:ea:22:cc:7f:5f:90:aa:d3:f3:56:
fd:01:44:36:87:70:1c:22:d6:ee:cf:29:33:01:4a:
ba:d0:bd:f8:40:50:6c:a6:9c:fb:42:d0:97:2e:5c:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FB:0B:75:73:4B:2F:07:34:13:5E:38:63:83:4E:C3:72:E2:46:2F
X509v3 Authority Key Identifier:
keyid:D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:09:da:68:86:2a:69:d6:c6:49:07:d4:9d:0c:5d:b8:38:
94:a6:5f:2d:28:e0:46:be:73:e9:f6:4f:d1:e7:c7:3b:d0:56:
6d:33:ec:5b:e6:e6:3c:3e:e4:b3:c8:c0:97:c4:d2:e1:0d:da:
8d:78:d8:4d:bc:6f:15:cc:0a:89:8a:d7:8a:ed:11:a7:72:a4:
7c:72:49:d4:e9:ca:11:35:bc:f6:c4:9e:aa:8d:dd:da:15:bf:
9c:08:39:e0:b4:99:2e:b6:9f:9c:7f:b5:48:56:00:3b:ae:0f:
60:90:70:39:b3:3e:e7:be:a9:08:81:ad:c1:17:99:be:82:b5:
6d:63:9d:98:22:6b:c9:e9:fc:d8:57:65:63:22:3a:53:41:30:
ba:1e:fd:5e:61:74:37:07:ad:ab:aa:dc:50:42:5f:3d:a5:41:
99:dd:e0:85:2a:cc:b4:4f:80:68:21:cd:09:15:d8:95:3f:f2:
99:4d:39:a5:09:b7:16:f3:61:06:58:15:d6:6d:1b:2a:cc:ad:
95:c2:f7:0d:c2:2b:db:ae:a1:d9:0c:fe:ae:2c:53:e2:95:88:
43:f3:25:20:3c:19:f0:b3:34:21:73:7b:c5:10:c2:e5:08:d2:
8b:60:4a:fc:c7:17:7f:07:2d:09:ed:13:b7:99:de:6a:ee:ab:
89:9a:6b:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo6OGPxs6KCZEjDWrgwAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWM2YzJlMmIzZTc1MTg4N2QzYTU3MmQxZjYwY2YxNjMy
NDcwOWUwHhcNMjYwNTEzMDAwMTQxWhcNMjYwNTE0MDAwMTQxWjAzMTEwLwYDVQQD
EyhlMGZiMGI3NTczNGIyZjA3MzQxMzVlMzg2MzgzNGVjMzcyZTI0NjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnufMZx0Gwg7oL7eWDtBF5cK7Jpbg
8/n7O6O96litX6pmfqPsLBNq7yJ40Z4k9Zi3RFRALez9MKIBYINXbp9cMz1JuWyJ
+CjWbrzlYT/rpopfkwS/4HK5QQoPllpmPgSKEde8RFcT20YHkgkIOIk6EdG9JB+j
pLUFAKm1l5+AlWsIkpOkX+4IhNjxgJAIHA/Iznolhs2mA8VPhqoOvp8gwIrktw7e
UGYG4dt18HlJH4n1/tHf6mDt96sKxXrxV3cYjNELSJaB3QtNb9rOztPFVQzQgEQc
OeoizH9fkKrT81b9AUQ2h3AcItbuzykzAUq60L34QFBsppz7QtCXLlwMjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOD7C3VzSy8HNBNeOGODTsNy4kYvMB8GA1UdIwQY
MBaAFNJcbC4rPnUYh9OlctH2DPFjJHCeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGx4c0xpcy1kUmlIMDZWeTBmWU04V01rY0o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jNTgyZjctMTIzZi00MGIyLWIwMDct
NDI3OGY2MDBmZTk2LzEvMGx4c0xpcy1kUmlIMDZWeTBmWU04V01rY0o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jNTgyZjctMTIzZi00MGIyLWIwMDctNDI3OGY2MDBmZTk2
LzEvMGx4c0xpcy1kUmlIMDZWeTBmWU04V01rY0o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMIJ2miG
KmnWxkkH1J0MXbg4lKZfLSjgRr5z6fZP0efHO9BWbTPsW+bmPD7ks8jAl8TS4Q3a
jXjYTbxvFcwKiYrXiu0Rp3KkfHJJ1OnKETW89sSeqo3d2hW/nAg54LSZLrafnH+1
SFYAO64PYJBwObM+576pCIGtwReZvoK1bWOdmCJryen82FdlYyI6U0Ewuh79XmF0
Nwetq6rcUEJfPaVBmd3ghSrMtE+AaCHNCRXYlT/ymU05pQm3FvNhBlgV1m0bKsyt
lcL3DcIr266h2Qz+rixT4pWIQ/MlIDwZ8LM0IXN7xRDC5QjSi2BK/McXfwctCe0T
t5neau6riZprjQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:19 2026 by rpki-client