Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: zGFAWOAbFhivc9HWgVsEBPQJiW6EI8PiZwaCJco/S8w=
Subject key identifier: B2:73:36:8F:7D:2F:F1:B9:B0:A9:E0:3D:55:46:55:15:7B:57:2B:93
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 01A0D45D79A08AA45AE505E4586384935C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 105B
Signing time: Thu 24 Sep 2026 17:01:30 +0000
Manifest this update: Thu 24 Sep 2026 17:01:30 +0000
Manifest next update: Fri 25 Sep 2026 17:01:30 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: RkaZaSn4HmTBc3UVVGwvEYf6BgZHuM20cgAV49upAQY=)
2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:79:a0:8a:a4:5a:e5:05:e4:58:63:84:93:5c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Sep 24 17:01:30 2026 GMT
Not After : Sep 25 17:01:30 2026 GMT
Subject: CN=b273368f7d2ff1b9b0a9e03d554655157b572b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:b6:24:e4:01:cd:35:6f:c1:3a:9f:f2:28:
64:79:7a:47:50:36:c9:e0:ba:5f:7a:b8:6c:e1:1f:
3e:a3:93:2e:41:1b:f6:aa:16:24:d8:47:9e:4a:00:
0e:98:04:f0:b1:b7:b3:c6:8d:a6:e8:e0:fd:ce:90:
67:6f:f4:5f:c1:5d:c1:78:7f:e2:12:5c:48:3f:8d:
a7:f0:ff:b1:20:ac:04:e6:b4:58:b4:cb:fb:b7:d6:
40:03:21:00:d0:fb:69:bc:71:b5:82:b0:b5:6e:60:
07:8b:3b:68:a3:0a:4c:04:44:24:07:28:54:71:97:
1b:29:e0:36:ec:6d:d6:42:2a:40:4a:ea:e3:b4:ec:
20:d9:cc:f3:ca:19:f4:fa:2e:84:84:f1:6a:7b:27:
84:0b:79:ea:ed:2a:45:c4:14:4f:77:33:a5:60:17:
6e:7d:dc:b9:8f:69:1c:80:5c:c4:91:26:1a:76:54:
57:f6:e1:53:0f:c6:f2:d5:b1:2d:ae:7d:f8:75:d9:
3a:aa:18:f5:8a:11:92:33:1c:82:51:50:49:b9:4b:
51:ed:eb:b5:64:44:0f:65:8a:42:81:bc:b5:8d:49:
82:43:6d:6c:91:e5:ea:80:08:33:fd:90:4d:86:4b:
b6:6a:c3:8d:2f:1f:25:07:d6:0f:b6:12:e0:f1:17:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:73:36:8F:7D:2F:F1:B9:B0:A9:E0:3D:55:46:55:15:7B:57:2B:93
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e5:48:87:cb:70:ba:d4:5e:1f:c8:78:e4:0d:b4:8f:dc:8e:
e4:51:ba:46:43:52:3d:3d:b8:23:a5:f7:25:c0:24:9c:df:11:
20:7c:fc:05:ab:98:91:6a:fb:f3:a2:cc:15:30:11:3f:cd:ea:
ed:fe:f3:11:73:d2:6b:da:8d:5d:cd:aa:bc:d4:0e:67:4f:11:
0f:ae:21:49:1c:cb:b5:32:2c:43:43:a6:44:e1:23:69:9f:76:
83:48:0b:24:1d:48:d8:0d:b4:0f:7a:d2:df:02:08:11:bf:95:
c0:40:be:13:a2:fb:40:2b:3d:d2:e2:66:5d:28:60:d5:c8:82:
b8:36:1b:e8:02:37:94:6b:e1:03:50:70:15:59:c2:2a:4e:15:
94:3b:e5:47:7a:7e:31:31:6b:5f:7c:84:40:f3:d3:54:71:be:
99:e9:84:33:29:da:4f:3a:ec:e5:71:72:e1:d8:df:d4:62:a6:
cf:09:a4:8b:61:04:60:42:47:54:be:14:d9:91:ac:01:07:6f:
d0:ba:7c:a3:9a:eb:58:b9:de:f3:d2:dc:89:20:c6:d1:89:7a:
e0:57:99:77:17:d1:62:9b:61:09:69:d0:1c:03:e9:aa:6f:5c:
07:5e:45:aa:ac:1c:97:18:50:f9:05:f3:09:28:28:b1:19:a7:
5d:f5:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:17:14 2026 by rpki-client