Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: QVglAoYKfIygCpfIHyv/WC5IrXVVKkTT1TBAbQDsNV0=
Subject key identifier: C4:9B:AB:2E:88:39:50:48:5E:0F:43:75:D5:BB:BA:17:24:06:DF:5E
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019D29614C6CBAD946FEE6A104F5339C36C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 09:02:15 +0000
Manifest this update: Thu 26 Mar 2026 09:02:15 +0000
Manifest next update: Fri 27 Mar 2026 09:02:15 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: IlkneW8KoGzVSGsq+THnncdIx2qXIcIHhDTxVE2QUXo=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
5: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
6: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
7: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
8: y_I-Rx6c6ZO5cg0hshn5JRXp8OQ.roa (hash: /H74JIaGZ/O6ji1TsDEo7znyzAE5IDXwnYg53gQ9tCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:4c:6c:ba:d9:46:fe:e6:a1:04:f5:33:9c:36:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Mar 26 09:02:15 2026 GMT
Not After : Mar 27 09:02:15 2026 GMT
Subject: CN=c49bab2e883950485e0f4375d5bbba172406df5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:9c:92:4a:47:29:33:94:e2:5f:23:20:f2:
91:89:1b:e9:38:10:99:3b:13:f5:6a:c1:4b:3f:43:
bd:06:fb:a3:1c:a9:b8:9e:78:89:d1:84:10:cd:3f:
ef:57:37:f9:fe:4e:f9:4a:bf:94:0a:af:9e:da:03:
fa:dd:36:37:17:93:27:83:ce:55:bc:e1:38:66:b9:
67:e6:8a:ef:67:05:86:b5:6b:6c:72:4f:e0:9d:4f:
6d:bd:c4:e6:c3:ae:59:c8:34:f4:9c:dc:ce:71:06:
ea:34:62:f0:b4:86:1d:30:59:f3:08:e9:71:49:c1:
fc:d5:ce:90:34:7a:e6:e7:5a:81:5e:09:b1:0e:ab:
eb:5b:f4:21:e4:6a:39:10:b8:9a:a6:a9:2a:c9:d5:
fb:71:b3:74:39:43:08:8b:32:de:de:ca:5d:76:da:
d4:ec:ab:47:8e:dc:fe:79:b3:55:cb:02:d1:00:f1:
f4:45:0c:e9:8e:d5:be:e5:e3:01:93:4d:3a:71:ed:
69:70:82:12:01:24:43:7c:d1:fc:c2:77:47:7d:34:
24:00:2d:1b:1a:b1:c0:d1:1d:31:e0:a9:a3:bc:32:
83:b6:c8:3e:d3:ce:89:2e:26:e0:09:8e:9e:35:15:
5c:0b:2e:b5:ac:7b:b2:ee:ae:1e:be:94:23:fb:9d:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:AB:2E:88:39:50:48:5E:0F:43:75:D5:BB:BA:17:24:06:DF:5E
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ec:df:23:27:ef:55:60:25:f0:27:4b:b7:f7:22:4b:97:4d:
68:9e:98:70:69:25:72:e2:af:5a:d0:15:ce:6f:ad:6f:7b:cf:
37:7e:68:9e:d3:a5:20:b2:ac:3b:03:23:1e:61:c2:af:ec:03:
88:08:61:ed:b8:10:12:52:34:19:09:7e:1c:0d:3b:df:a3:c7:
40:6a:91:26:ca:92:7a:5d:25:e8:f7:18:07:a3:27:ee:a8:36:
23:77:e0:31:e5:f4:fc:4d:ef:78:fe:f0:ad:da:43:7b:ca:89:
f2:d8:c5:45:74:fa:64:ea:88:e9:42:aa:99:3c:1b:d2:f6:20:
5c:ab:db:03:bb:c1:3f:e4:e9:d2:e2:15:6d:ac:06:96:63:6d:
d8:26:9c:6d:60:ae:68:91:94:80:2c:4d:43:f5:89:cc:04:5a:
e1:84:43:cb:69:37:06:a5:c3:94:cb:d8:e2:a1:0e:b8:05:fc:
51:3c:d3:1c:05:0a:d0:e7:fd:04:12:64:7f:7c:16:15:d2:51:
99:2b:4f:72:bc:49:e7:e0:21:81:b9:56:4f:31:31:ce:62:18:
e2:65:93:72:1f:d8:d3:8b:7e:8a:a2:cb:69:4e:2f:78:64:29:
f0:ec:7e:8e:cd:95:d3:98:fe:5f:ba:17:21:fe:0e:78:79:60:
e5:09:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:34 2026 by rpki-client