Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: p3LRMYFLeAGjtCj5qDqTbjeUi4Be+hq8lzW1iJXveEM=
Subject key identifier: 89:0B:7C:E4:58:5F:01:FD:FF:A8:A8:50:F6:EA:C2:57:A8:42:AC:00
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019F8FEBD1EE952F07C70BB24CB1BA8895C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0FB3
Signing time: Thu 23 Jul 2026 17:00:24 +0000
Manifest this update: Thu 23 Jul 2026 17:00:24 +0000
Manifest next update: Fri 24 Jul 2026 17:00:24 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: O5OEGzcDlFk2NzSbLdA/eFV/imNsdZis8oSLq2/Ayc4=)
2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:d1:ee:95:2f:07:c7:0b:b2:4c:b1:ba:88:95:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Jul 23 17:00:24 2026 GMT
Not After : Jul 24 17:00:24 2026 GMT
Subject: CN=890b7ce4585f01fdffa8a850f6eac257a842ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:be:cf:e3:95:eb:d0:a8:62:5c:f1:44:96:
52:0f:fb:fc:7c:a7:0a:54:58:30:c2:7b:75:29:0d:
fc:0d:07:96:82:da:dd:1e:6a:42:61:f9:9c:20:fa:
57:50:f5:f3:ce:f6:2b:36:2e:6b:80:0c:71:db:09:
de:fe:e3:26:a7:73:71:13:2e:45:bf:dc:5e:31:b3:
c1:8a:f9:5b:16:61:04:40:3b:df:c5:09:70:5b:fd:
37:93:f4:3f:63:df:eb:f5:55:0e:34:c7:50:d1:87:
99:8e:1b:b9:1a:e6:1e:bf:81:f1:5d:a6:cc:92:65:
87:fb:4d:5f:4e:e7:0f:70:37:7a:b8:0b:90:5b:0b:
bf:3e:2b:5d:23:c7:8e:4d:2a:28:fe:c5:a0:de:35:
46:f9:67:11:ce:d1:c0:44:65:d1:60:f3:b2:18:84:
71:0c:23:94:d8:d0:85:49:a5:df:b6:92:1e:bb:b5:
d8:92:b5:bf:4b:b4:12:6e:ee:68:7d:fd:73:26:9b:
5a:38:7d:0a:b1:10:9d:13:34:c2:1c:97:51:5e:0a:
00:c8:ac:5f:0b:8d:82:dd:e3:cb:0e:bf:3b:c9:cd:
4f:c8:d5:01:e4:94:9a:c0:e6:17:c1:f3:a6:02:64:
59:bf:ae:bd:24:e9:ac:6a:92:e5:56:26:70:34:44:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0B:7C:E4:58:5F:01:FD:FF:A8:A8:50:F6:EA:C2:57:A8:42:AC:00
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c1:58:e7:77:61:f6:72:f1:25:46:a4:5c:49:5e:d3:d5:1a:
12:df:f8:6d:39:32:e9:36:04:46:13:5d:1d:10:fb:d1:51:af:
3b:b3:b1:df:bd:2e:1c:2a:15:83:1a:92:4b:33:73:6c:59:82:
04:d0:ec:83:61:db:2d:0b:a7:05:6e:03:28:80:4d:67:3c:75:
0a:42:ad:38:0d:fe:ca:cd:ff:17:b6:f1:e5:11:db:d6:b0:0b:
3e:31:f9:6d:5f:7d:8c:42:ab:11:30:0d:2b:a0:c6:3f:a1:35:
1a:90:b6:f8:31:e3:2d:b6:e5:1a:06:dc:5b:b1:4f:da:bd:d1:
c4:bc:ca:d7:24:8c:71:fa:ac:27:4c:74:fe:be:41:ee:ab:21:
dc:7b:d5:c3:81:43:25:bc:5c:68:77:d0:e0:e9:a1:49:ea:df:
65:3a:6f:c2:13:32:dd:25:fc:cc:02:08:22:69:eb:d0:03:02:
fc:f3:07:44:9b:65:ab:fa:dd:dc:44:a1:31:55:54:76:fe:38:
73:ad:ec:20:e7:2d:e3:f0:c7:d3:f9:cb:1c:0b:92:7e:52:a6:
95:4a:64:13:5e:a6:63:cf:c5:d4:1d:64:73:0f:92:f5:56:70:
68:0a:7e:b5:00:b7:df:7d:d7:72:68:e4:61:2a:bc:f0:a1:f5:
05:ba:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:20 2026 by rpki-client