Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File: 0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier: z+b2DUkdQuzxSQCZoQewAzSO6hQvmekuhYfUDgOZLNM=
Subject key identifier: A0:C9:B1:DD:87:25:CB:5A:9D:41:49:E2:18:2B:E4:63:FC:84:F1:59
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial: 01A0DCF2D3CAC2916FB373C8B8D9CF6A6C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number: 1A6F
Signing time: Sat 26 Sep 2026 09:01:36 +0000
Manifest this update: Sat 26 Sep 2026 09:01:36 +0000
Manifest next update: Sun 27 Sep 2026 09:01:36 +0000
Files and hashes: 1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: 5tWIyB1L+ppONtF2cEn2OChzvsL6XZ0mPpOVvyQ4YsE=)
2: GT8HhSbeb_3esKlX1octkP1xuGA.roa (hash: osq6NafXIn3g0iTu717OFvhm5sqA/xI35v+FmjAzOiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:d3:ca:c2:91:6f:b3:73:c8:b8:d9:cf:6a:6c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Validity
Not Before: Sep 26 09:01:36 2026 GMT
Not After : Sep 27 09:01:36 2026 GMT
Subject: CN=a0c9b1dd8725cb5a9d4149e2182be463fc84f159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:ee:45:94:8d:fc:98:6e:27:11:3d:90:19:
0a:43:86:2c:ee:c4:86:83:b7:f0:e5:63:11:9e:c7:
f7:bc:5e:82:e0:72:0c:96:ec:08:ad:6e:f4:ad:21:
b7:aa:bf:35:c7:58:17:07:c3:26:97:18:55:58:2e:
34:c2:54:f4:82:b5:ec:ef:ee:1e:a0:06:98:2b:7a:
07:41:03:39:88:0a:88:1c:61:f2:8d:25:90:29:bd:
08:8a:3f:ac:99:05:23:38:f5:10:5e:1a:95:ca:7b:
40:4c:91:5a:a7:3c:06:20:7e:49:bb:68:38:46:37:
3b:90:48:f9:b2:8d:5a:2b:cf:a6:ed:e2:39:83:f9:
28:87:3e:d7:bd:6b:2b:66:9e:45:82:54:a4:0e:96:
0b:38:bf:70:e8:34:dc:6e:6a:dc:2a:41:e6:15:40:
cd:26:55:5e:1f:d0:a8:e7:3b:db:72:f0:27:c9:e9:
e4:8a:23:4e:45:d4:d1:ed:45:0f:fe:df:b9:61:db:
89:22:7a:2f:77:62:95:a4:64:11:5d:a9:16:85:0e:
d9:e7:ff:f1:eb:6f:2e:08:ea:b6:f6:fb:6f:a8:5c:
66:3f:1a:69:d0:4f:39:ba:3a:24:72:31:36:4e:92:
98:c1:85:c6:e5:eb:8c:89:c7:de:8f:88:c3:4f:05:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:B1:DD:87:25:CB:5A:9D:41:49:E2:18:2B:E4:63:FC:84:F1:59
X509v3 Authority Key Identifier:
keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:80:b0:19:d1:95:10:16:b8:17:86:d4:75:2a:00:96:30:54:
f0:aa:59:9b:14:ac:85:f8:b5:e1:60:f9:23:43:d3:a3:b5:ad:
25:99:dd:63:69:ac:ec:31:cb:9d:ef:fa:37:32:d3:49:7f:7f:
a3:80:74:da:4f:f0:4f:e7:e0:24:b1:61:5d:69:c1:57:94:eb:
7c:b5:c3:64:b1:3e:ca:f3:45:d5:cb:95:34:3a:8d:71:a7:25:
a5:03:0c:09:d2:94:90:9e:1d:9a:6a:09:98:bb:56:46:6c:d3:
cd:a3:f5:86:48:ad:aa:9b:d9:a9:1d:3b:16:81:90:2e:bc:00:
24:86:52:02:b9:b2:ec:46:61:6e:97:a6:48:14:ac:a8:41:67:
de:98:4c:97:d8:98:43:00:f9:55:67:80:1e:75:c0:3c:00:5e:
3d:12:b7:04:d5:2e:46:42:48:4d:0a:f3:7d:5e:3b:0e:00:48:
2a:c5:f0:65:6c:56:29:59:46:4c:3b:10:99:52:f4:b2:d2:13:
af:38:61:c0:38:55:37:fd:e0:3f:96:ce:41:31:e7:ba:da:ab:
e0:64:96:ab:4b:30:01:08:43:5a:c1:e5:50:6c:d4:d6:01:6b:
ee:29:0e:47:89:fc:bd:e6:db:8c:e9:b2:01:df:30:89:11:54:
06:cb:fb:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8tPKwpFvs3PIuNnPamxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjkwNGRmNWVlYzIyMTZiMzQzMDE2YzVjYjI0YmI5MGE0
M2QzYTQwHhcNMjYwOTI2MDkwMTM2WhcNMjYwOTI3MDkwMTM2WjAzMTEwLwYDVQQD
EyhhMGM5YjFkZDg3MjVjYjVhOWQ0MTQ5ZTIxODJiZTQ2M2ZjODRmMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkXuRZSN/JhuJxE9kBkKQ4Ys7sSG
g7fw5WMRnsf3vF6C4HIMluwIrW70rSG3qr81x1gXB8MmlxhVWC40wlT0grXs7+4e
oAaYK3oHQQM5iAqIHGHyjSWQKb0Iij+smQUjOPUQXhqVyntATJFapzwGIH5Ju2g4
Rjc7kEj5so1aK8+m7eI5g/kohz7XvWsrZp5FglSkDpYLOL9w6DTcbmrcKkHmFUDN
JlVeH9Co5zvbcvAnyenkiiNORdTR7UUP/t+5YduJInovd2KVpGQRXakWhQ7Z5//x
628uCOq29vtvqFxmPxpp0E85ujokcjE2TpKYwYXG5euMicfej4jDTwUNEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDJsd2HJctanUFJ4hgr5GP8hPFZMB8GA1UdIwQY
MBaAFNC5BN9e7CIWs0MBbFyyS7kKQ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUt
NDFhODRmNDE5YWM1LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUtNDFhODRmNDE5YWM1
LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4CwGdGV
EBa4F4bUdSoAljBU8KpZmxSshfi14WD5I0PTo7WtJZndY2ms7DHLne/6NzLTSX9/
o4B02k/wT+fgJLFhXWnBV5TrfLXDZLE+yvNF1cuVNDqNcaclpQMMCdKUkJ4dmmoJ
mLtWRmzTzaP1hkitqpvZqR07FoGQLrwAJIZSArmy7EZhbpemSBSsqEFn3phMl9iY
QwD5VWeAHnXAPABePRK3BNUuRkJITQrzfV47DgBIKsXwZWxWKVlGTDsQmVL0stIT
rzhhwDhVN/3gP5bOQTHnutqr4GSWq0swAQhDWsHlUGzU1gFr7ikOR4n8vebbjOmy
Ad8wiRFUBsv7Ew==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:50:05 2026 by rpki-client