Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File: 0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier: Is/2aqwhrDukq0klIxbiVNzL5prcdYDB5UmWyxe6O3Q=
Subject key identifier: 11:40:1C:FA:16:FD:E5:13:43:61:FE:7F:C7:86:7D:9C:27:C2:92:56
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial: 019E1C7D5A5F128710E9559DA78A6DE1C64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 14:00:37 +0000
Manifest this update: Tue 12 May 2026 14:00:37 +0000
Manifest next update: Wed 13 May 2026 14:00:37 +0000
Files and hashes: 1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: Osj1isbaA34W7jZyp8hopsO6iWdidUAUmUT9+AY4DTQ=)
2: nqFedlELDT6btqVr2PyQaNO_Pfw.roa (hash: 8tqaPkj8LtydCchM9fMrH7we2nm/JziMXiNEi0lLF+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:5a:5f:12:87:10:e9:55:9d:a7:8a:6d:e1:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Validity
Not Before: May 12 14:00:37 2026 GMT
Not After : May 13 14:00:37 2026 GMT
Subject: CN=11401cfa16fde5134361fe7fc7867d9c27c29256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:19:3c:3c:ed:59:dc:ab:be:40:b8:1e:f8:
93:62:a0:3c:d8:78:7b:46:f3:fa:29:38:0f:72:60:
46:c6:90:b2:83:06:64:98:9d:4d:4a:4e:3d:72:c6:
88:50:f7:15:90:b8:7b:d0:ef:22:c8:d7:eb:cd:a2:
d7:f0:d8:fd:95:8f:7d:6c:df:95:ad:8e:10:14:01:
c9:1e:3b:36:33:d7:cf:69:d0:a4:78:3d:56:f7:21:
cf:93:77:8a:58:9a:7a:87:4e:61:4f:b1:c5:8f:f3:
46:99:88:27:f6:23:21:85:82:dd:1b:48:f9:28:d9:
a1:aa:70:39:5f:eb:ac:af:79:ed:61:bc:9d:69:af:
99:a0:48:e0:f2:dc:c2:67:d7:59:85:59:e1:a0:24:
35:f2:87:68:bb:a8:c3:60:19:e7:a2:ff:47:d8:71:
00:5b:86:7c:7c:0f:ce:da:ba:bc:f7:53:81:48:5a:
3a:e6:65:8d:bb:6f:f8:d9:2e:6f:90:02:0a:75:80:
4a:62:cd:5f:76:b0:16:04:c0:77:1f:41:62:f0:54:
10:da:e1:a3:7f:6e:0f:0b:c1:80:3f:8b:8d:2b:91:
24:69:97:95:ba:4e:d8:0d:c2:82:48:8d:1b:1d:6a:
b4:3c:d4:21:fe:ae:e8:0d:b6:31:05:36:2c:be:04:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:40:1C:FA:16:FD:E5:13:43:61:FE:7F:C7:86:7D:9C:27:C2:92:56
X509v3 Authority Key Identifier:
keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:04:0e:bd:d4:b0:6b:f0:62:91:72:9b:44:38:22:24:56:1c:
ea:11:e6:49:06:87:3e:f2:e3:54:14:59:17:9f:7b:0a:1c:0b:
06:eb:2d:b6:2b:a2:32:56:21:16:3e:74:11:76:ef:d7:00:5f:
a4:62:30:fe:66:29:7e:8f:c7:0c:38:cc:52:0d:ad:c7:c6:ec:
c7:b2:24:59:c5:6b:93:a2:a4:65:99:3e:0c:5c:0a:0a:b6:a6:
af:0f:95:04:7c:8e:0f:3d:d9:89:f5:b1:bd:89:5f:fa:7b:25:
04:52:8b:b7:2c:db:90:06:03:aa:68:a3:76:96:72:f4:c8:aa:
5e:22:10:2c:2b:1e:25:92:0c:ea:4d:25:de:9a:2f:14:4c:06:
ee:8f:fb:b3:53:08:e5:55:bf:35:a2:9f:3f:eb:d9:ff:b9:a7:
1b:9b:32:0a:f9:0e:38:05:1e:27:06:49:79:3f:51:78:ed:ad:
d4:b5:0e:05:40:da:51:62:87:08:d4:2e:43:d8:e6:08:21:85:
14:bd:ef:00:cc:85:05:f2:c0:28:66:74:73:be:22:69:47:4b:
d7:f6:ad:90:32:be:e9:8c:2a:90:c2:eb:eb:95:74:0b:1b:e3:
74:8d:c5:4f:91:90:1e:ce:55:05:d3:34:ba:33:e4:fa:3e:e7:
14:88:9e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:39 2026 by rpki-client