Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
File: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft (raw, json)
Hash identifier: ofPpylGrlevWd4YMLmS/Eh00Qi6XVnqMd8GJY8U6iD4=
Subject key identifier: 75:C1:AA:16:36:D8:81:62:4E:D2:CB:38:3F:11:FE:2B:B0:6B:83:EA
Authority key identifier: D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
Certificate issuer: /CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Certificate serial: 01A0E3D03B1F95151BA95888761D53B32723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
Manifest number: 01B8
Signing time: Sun 27 Sep 2026 17:01:09 +0000
Manifest this update: Sun 27 Sep 2026 17:01:09 +0000
Manifest next update: Mon 28 Sep 2026 17:01:09 +0000
Files and hashes: 1: 0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl (hash: n60UpJFQ157us/TOvnCj74nwAfCZ2FCPseKGPgNQeeI=)
2: de_jsj8CpSljIjcGiO4A6ZRhO1I.asa (hash: N/rOb5DkyhPin/riPrKSvflYTWR9QweMJOMrP3OE2iQ=)
3: r9tO5dOM7W3cJ0IAJV4a9_UjU64.roa (hash: 7p0HLcZz+BpTWdYxVEea5xby6zTSJ5cYhN5NEaQQ0nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:3b:1f:95:15:1b:a9:58:88:76:1d:53:b3:27:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Validity
Not Before: Sep 27 17:01:09 2026 GMT
Not After : Sep 28 17:01:09 2026 GMT
Subject: CN=75c1aa1636d881624ed2cb383f11fe2bb06b83ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:16:d0:80:19:57:d9:f7:92:f0:7f:11:d2:
dd:8f:70:00:91:82:44:2e:79:f0:1a:71:36:2c:25:
fd:f9:f2:33:73:1d:23:cf:ad:55:42:c3:19:14:c5:
ee:81:9e:72:d0:be:f6:e0:36:c2:23:3d:98:63:38:
3b:8e:fa:1b:f1:f8:26:29:2a:c7:ee:8d:e1:c9:78:
7c:48:1b:f3:0a:b4:99:d4:2b:f6:2a:fd:96:fa:e8:
cb:8e:e6:b9:d2:86:56:74:51:fa:d6:70:8b:80:e2:
c4:2f:db:2c:af:31:52:f2:e8:09:c6:48:b5:c0:33:
5b:02:47:db:32:ef:65:d1:a0:62:c6:79:6d:73:6c:
e6:7b:a9:d7:f5:26:5f:5b:54:a0:a9:1e:0a:77:60:
da:e4:d4:0b:1e:bf:2f:22:29:83:b0:57:71:7b:12:
99:50:91:b6:9b:c3:24:ac:db:6f:24:c8:db:87:0d:
41:f3:ea:af:c5:99:45:85:8a:6b:c8:18:e3:65:bf:
21:ab:bf:dd:4f:2c:bf:87:12:77:89:57:b1:b2:aa:
44:fe:c6:89:de:25:1b:27:03:74:32:a5:6a:c0:9a:
da:c4:fa:d7:0c:ac:24:a4:14:29:00:c9:e4:e9:d5:
fd:7f:6f:88:c8:f3:cf:2e:a7:5c:c3:a5:f3:f8:18:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:AA:16:36:D8:81:62:4E:D2:CB:38:3F:11:FE:2B:B0:6B:83:EA
X509v3 Authority Key Identifier:
keyid:D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:47:ab:41:2e:94:f7:2b:03:a6:42:96:8e:1f:b6:c1:ea:
eb:d1:82:b8:9e:ae:c6:7e:2a:96:97:62:cf:e6:81:5c:80:cf:
96:62:36:60:d1:8f:5a:cb:1e:81:00:4a:bb:90:5a:90:54:0b:
7a:c7:d6:ac:a9:84:c1:60:52:7a:3d:8a:9a:32:90:e7:dc:8b:
30:5d:08:42:4a:1d:0d:6f:a1:17:2d:93:b2:54:f5:53:fd:65:
4c:6d:f7:27:75:54:7f:1c:8b:59:f8:3a:d5:00:4e:3c:86:62:
ba:13:65:45:52:b0:d5:fc:72:23:5f:50:15:e4:15:13:3c:50:
81:ed:36:2d:35:fd:eb:44:c4:14:e1:2d:70:f2:6f:b9:37:6c:
a3:b5:de:b4:0c:4d:44:1b:1e:81:11:7a:73:2a:ae:70:b4:b3:
8c:72:c2:c5:8c:7e:e2:42:0c:cd:7a:de:e2:97:bd:66:b7:48:
37:a6:32:cd:f1:5f:fe:1b:42:d6:9f:e6:22:67:ee:aa:77:e2:
f6:f4:e6:0d:ec:e3:46:5f:85:48:8c:07:dd:c8:51:49:02:bf:
1f:42:d4:7f:fe:d7:05:c6:4c:d5:9f:41:32:4b:95:c3:be:d4:
0e:04:46:19:3b:8b:20:71:57:73:46:5f:23:74:8b:c5:c8:7b:
21:8b:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:13:53 2026 by rpki-client