Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: uVShrdng58eJGa1w+cwex+UrOLIWrdQhqGcn6iq9lgU=
Subject key identifier: 27:FD:11:5F:07:C5:11:DF:4F:18:A0:29:7E:39:32:9A:F0:10:C7:04
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019D25F1C7E68B8003B7753FE9AA11F556F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 02A0
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: c25ncgOpj3rlS8B5Vv9gB6tqj5V5Z2NA5uLjfsC1XFM=)
2: cSeWyBS9AzYXBpViYHa1BylGQ6s.roa (hash: PrBtaBiVH3j3v9lcfh2nnshhHKh443GU9s9mrNx3uY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c7:e6:8b:80:03:b7:75:3f:e9:aa:11:f5:56:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=27fd115f07c511df4f18a0297e39329af010c704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:e3:de:21:0d:15:ef:0b:2d:33:fb:db:c9:
c1:0b:f5:cb:7a:9d:46:e9:09:d1:e6:0d:3e:38:aa:
14:15:bb:37:1f:b0:dc:5a:4c:de:b5:eb:6e:b8:d9:
fb:61:64:16:c5:0b:87:0f:e8:67:01:7a:3e:c2:31:
3c:38:50:15:2c:71:bc:df:52:92:c5:4e:71:4c:c3:
85:05:01:51:c7:cf:57:58:5f:12:d4:fd:74:02:d3:
71:55:df:00:d2:0e:e9:d8:20:6f:45:cb:9d:08:27:
bb:cd:72:68:b6:ef:bb:e0:b3:b9:4a:ee:79:d8:18:
ba:75:6a:a0:7c:a0:21:9b:a9:d2:64:dc:04:14:0e:
a5:8f:0c:e1:88:0d:2c:2c:d7:df:53:2b:18:bc:1b:
19:63:0b:55:73:b3:4b:4e:57:b2:7c:98:25:f8:bd:
79:14:aa:db:f5:47:5f:18:cb:34:f1:66:be:24:4e:
bf:6c:29:fc:46:78:43:52:f5:ad:21:54:03:88:af:
62:a9:e3:7d:0c:f4:04:db:cb:0d:34:d7:28:03:77:
cf:99:09:57:68:1c:6f:ed:43:6c:b7:11:3d:21:cc:
c5:4b:49:d4:91:20:ed:5d:2d:a6:39:6d:9c:6f:51:
5c:a2:fa:70:ef:4f:af:2d:5a:dc:ba:75:b6:09:e3:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FD:11:5F:07:C5:11:DF:4F:18:A0:29:7E:39:32:9A:F0:10:C7:04
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1e:43:09:2e:fe:6d:71:9d:8d:cb:17:53:77:ab:51:30:8c:
b1:87:36:d4:c7:d7:96:d1:7f:c0:d1:8e:0e:f4:23:6d:94:8f:
54:55:08:68:5b:24:3d:f9:dc:25:4f:d4:4e:c7:b2:c5:6b:b2:
d9:6b:4d:c7:bb:8b:33:37:92:b3:1c:f0:c1:ab:b9:66:7a:be:
a3:fa:91:74:9c:56:26:04:ae:67:e1:0d:b5:41:12:53:87:1f:
5f:5c:ca:72:33:5e:7c:7d:4b:d1:28:66:79:66:42:86:d0:9b:
99:86:e6:14:4f:1b:00:0d:ef:39:d6:4d:2e:8a:d2:5a:6e:bc:
f7:d5:3d:da:1f:fa:d7:ca:30:db:03:7b:ff:cc:3a:25:73:99:
be:a6:a7:73:43:d2:37:31:79:0e:4b:b8:7a:c7:91:4c:d4:68:
81:fe:0e:1e:56:f6:5f:fb:1d:38:66:d2:60:30:96:f9:ab:d8:
ee:92:4a:73:e9:ca:b9:9d:50:e6:79:97:31:cb:97:1b:2a:f0:
4d:49:88:bd:94:18:12:64:e5:8c:bc:2a:6d:94:92:7a:29:bb:
e8:1a:6c:33:bc:c4:bf:15:39:a9:cb:8f:2b:12:da:8b:af:92:
f9:b0:e9:0d:99:b2:ca:9d:5f:c9:bb:c4:4c:e3:a4:bc:a0:dd:
c3:66:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:44 2026 by rpki-client