Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: W1/21J1o/5Uw3EtE3EgwT0bYdA7Q++JZfCoz1NP74n8=
Subject key identifier: C0:7A:D3:69:E7:A1:FC:29:FE:2D:AE:89:1E:21:21:11:C6:E9:29:62
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01A0D15B7F16D6F34798FF06C474091FB446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1A77
Signing time: Thu 24 Sep 2026 03:00:29 +0000
Manifest this update: Thu 24 Sep 2026 03:00:29 +0000
Manifest next update: Fri 25 Sep 2026 03:00:29 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: q2yVyb45abLjbR3MJPA8yVqSh/B2MGCJhLW3YRHgOfc=)
2: AHwZLzMSIzjdiILFlHimNy1KVH0.roa (hash: y5lR675u3Up+2TOOlskI792uCxkPkEvihlTIWi4xd1I=)
3: ECoz_Sqbad8xhzrXYOPW_x5hkWs.roa (hash: fhkp1qGbHfnV+x8UJdhpoApY2XHyqofSBo+ygly5ePc=)
4: I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa (hash: lZPJ4+UTAfzaBn1qvEutfPFu9s5OmtvAwYfd82jbQxI=)
5: bCD_tq_1R_WkwnNptbSONR7egi0.roa (hash: kbtkGeS9624Gz1BHggPnBisTuD3laygElyKlMRfT7I8=)
6: g97yKKTw0qoO3z8jCDHeZy3h_sA.roa (hash: BG+WNmPh44Y/W0xYtmXHCAEYFDjw7vRLIThzcdS18hY=)
7: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (hash: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM=)
8: kxfj2nv76RgasA6SFw9h3YIvRV8.roa (hash: t6hEcQl764cybmk/fsQro0yyYfk+r+X51eI3dq/XPII=)
9: zX39p8hPMLMogAvQxpt7zlkHVdA.roa (hash: bJcnLltJJ72buWp7XshBBRT58VrzJdJnDzL7OsGRoZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:7f:16:d6:f3:47:98:ff:06:c4:74:09:1f:b4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Sep 24 03:00:29 2026 GMT
Not After : Sep 25 03:00:29 2026 GMT
Subject: CN=c07ad369e7a1fc29fe2dae891e212111c6e92962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:c5:61:fb:65:00:5f:fb:7b:8c:54:0c:d2:
28:ca:1d:63:e0:23:1b:f7:fd:d9:f4:23:1e:f2:bd:
8f:69:68:8c:51:b9:e6:4d:35:5d:7c:be:d6:52:95:
58:f3:77:58:c4:be:41:1d:6c:1c:a7:eb:bc:a3:6c:
e3:a9:db:1f:be:6f:0a:b0:11:53:14:19:0d:4d:83:
60:0b:7f:1b:c5:2c:c3:9e:06:30:de:35:0e:0f:56:
50:8e:d6:5a:c3:4d:1e:4f:2e:96:d8:07:01:20:19:
66:9d:71:8e:65:f9:1c:a0:07:9b:8d:c5:35:74:a8:
24:8d:9f:4a:eb:89:22:4c:24:7a:d1:08:85:32:61:
44:25:46:fc:24:c5:68:9d:da:72:f1:c3:ab:bf:7d:
e6:55:66:5b:2a:55:1b:00:6e:f7:62:a8:28:7c:fb:
9c:00:92:79:2a:ef:4a:b4:bc:67:39:20:d8:32:2c:
6a:6e:68:f5:ab:91:8b:6f:d8:1f:69:76:ca:33:2d:
60:e7:c0:46:be:cd:fa:39:bc:15:05:0f:a3:b4:e7:
17:4b:d3:c6:e0:6a:d2:0a:5f:2c:4e:c8:ef:92:17:
1c:08:80:45:58:bb:2f:3a:18:d3:44:72:20:e4:56:
93:7d:fe:f2:35:4e:e6:65:19:dc:dc:2e:4c:ee:fe:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:D3:69:E7:A1:FC:29:FE:2D:AE:89:1E:21:21:11:C6:E9:29:62
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:75:00:ad:d8:6f:34:26:4c:fc:ff:e2:99:01:a0:05:8d:
10:d5:3e:7f:12:76:c2:20:9b:c2:54:51:d1:dd:03:f3:43:3b:
17:ac:02:29:1b:e6:4d:98:db:cb:45:6f:18:a1:63:82:5c:a3:
ac:c2:cc:35:54:35:e2:5f:7f:76:ad:e3:0e:4c:ab:c3:7f:e1:
ae:79:58:54:88:7e:6b:30:32:dd:f9:35:ab:38:3f:30:a0:fb:
4f:c6:66:d8:72:bc:90:7a:00:90:16:1a:d0:78:9e:12:9b:fe:
75:d3:77:e5:e6:f0:43:19:03:75:30:dc:e6:a4:07:f9:d5:ae:
2b:cc:12:5f:58:3c:8c:84:49:49:75:1f:6c:83:33:bd:f8:77:
35:c2:91:c1:f2:50:8f:ae:7c:a8:e0:88:e9:75:3a:94:25:87:
d5:c4:01:93:bc:26:e4:ae:f8:e1:07:23:44:d8:7f:b3:27:9d:
fc:52:57:b4:dc:e1:53:85:b3:03:a5:0d:23:8a:7e:b5:51:da:
52:27:ce:8a:d8:b5:66:49:de:95:41:1c:47:5c:22:9b:c1:81:
db:a9:e8:39:4e:a9:f6:b1:d0:c3:67:1c:4c:ab:84:a0:7b:13:
a6:77:8c:38:8e:56:f6:c0:e1:35:57:d9:67:bd:0e:21:c7:78:
e9:78:cd:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW38W1vNHmP8GxHQJH7RGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjg0OWI5YmM5MDQyYTE1NTczMzE5MzdlNGFkNzE1MThh
ZjYxY2YwHhcNMjYwOTI0MDMwMDI5WhcNMjYwOTI1MDMwMDI5WjAzMTEwLwYDVQQD
EyhjMDdhZDM2OWU3YTFmYzI5ZmUyZGFlODkxZTIxMjExMWM2ZTkyOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApojFYftlAF/7e4xUDNIoyh1j4CMb
9/3Z9CMe8r2PaWiMUbnmTTVdfL7WUpVY83dYxL5BHWwcp+u8o2zjqdsfvm8KsBFT
FBkNTYNgC38bxSzDngYw3jUOD1ZQjtZaw00eTy6W2AcBIBlmnXGOZfkcoAebjcU1
dKgkjZ9K64kiTCR60QiFMmFEJUb8JMVondpy8cOrv33mVWZbKlUbAG73YqgofPuc
AJJ5Ku9KtLxnOSDYMixqbmj1q5GLb9gfaXbKMy1g58BGvs36ObwVBQ+jtOcXS9PG
4GrSCl8sTsjvkhccCIBFWLsvOhjTRHIg5FaTff7yNU7mZRnc3C5M7v4X5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB602nnofwp/i2uiR4hIRHG6SliMB8GA1UdIwQY
MBaAFNC4Sbm8kEKhVXMxk35K1xUYr2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjkt
NzJiYWQ5ZDczYzgwLzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjktNzJiYWQ5ZDczYzgw
LzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1F1AK3Y
bzQmTPz/4pkBoAWNENU+fxJ2wiCbwlRR0d0D80M7F6wCKRvmTZjby0VvGKFjglyj
rMLMNVQ14l9/dq3jDkyrw3/hrnlYVIh+azAy3fk1qzg/MKD7T8Zm2HK8kHoAkBYa
0HieEpv+ddN35ebwQxkDdTDc5qQH+dWuK8wSX1g8jIRJSXUfbIMzvfh3NcKRwfJQ
j658qOCI6XU6lCWH1cQBk7wm5K744QcjRNh/syed/FJXtNzhU4WzA6UNI4p+tVHa
UifOiti1ZknelUEcR1wim8GB26noOU6p9rHQw2ccTKuEoHsTpneMOI5W9sDhNVfZ
Z70OIcd46XjNmQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:23:16 2026 by rpki-client