Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: HT4/qMyQBlntt1Ck7Dfg3pRqoOdXhYI8lU25zr50k7k=
Subject key identifier: 88:1D:F1:6C:D5:79:FE:03:B1:8A:CF:01:12:C5:6A:10:50:2E:EC:7B
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019F932434E4BEAD868730B3074FE82B6551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 03E2
Signing time: Fri 24 Jul 2026 08:00:51 +0000
Manifest this update: Fri 24 Jul 2026 08:00:51 +0000
Manifest next update: Sat 25 Jul 2026 08:00:51 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: qLb7l8Zq5p2Kyw8Eon/5tkozaXwuZkkuRPTLMqiQPX0=)
2: IjCH-sqDG187PVVmJq9UXUG58Q8.roa (hash: ZeryMWfiqlc876G1je4RBD22AenRdJNuu5lhGxbMfeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:34:e4:be:ad:86:87:30:b3:07:4f:e8:2b:65:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Jul 24 08:00:51 2026 GMT
Not After : Jul 25 08:00:51 2026 GMT
Subject: CN=881df16cd579fe03b18acf0112c56a10502eec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:86:8f:29:d7:64:dc:6d:93:85:72:14:a1:
f5:06:ca:66:8f:2d:c2:6e:32:7f:e3:07:1d:a7:5a:
3e:6a:c8:ce:a1:b3:ac:1d:9a:3c:66:c6:65:b5:60:
51:a9:a6:1f:83:de:e5:9c:6e:cc:46:d8:e5:90:e6:
b8:c9:d4:c5:35:a2:a7:ec:b3:ad:db:c9:c7:ff:41:
2e:65:d3:2f:5f:94:82:4e:b3:a9:26:88:4d:d0:28:
49:79:0f:d6:87:08:8c:8c:5a:e8:6b:d6:b2:b9:7f:
7d:78:93:6d:8d:57:39:d5:5c:34:57:99:84:a6:7e:
8a:18:59:a8:e5:94:9a:74:6d:86:bb:a9:87:c1:0b:
9b:aa:42:f4:7c:3d:21:b5:f0:bc:a0:1b:bc:ff:d9:
ab:82:a7:b1:01:12:7a:4c:de:e1:3c:00:0b:9f:b4:
47:81:90:ff:5a:78:08:20:b9:24:05:33:fe:73:07:
fc:66:cb:53:d1:a8:69:e1:e7:aa:73:ce:a0:27:92:
a3:b1:a9:6a:00:24:cb:08:71:a2:ed:2b:52:83:d1:
a3:ce:db:53:d7:fa:ad:8f:9c:e0:53:72:66:bf:1b:
b4:ef:d6:ff:71:2e:d6:4e:fb:02:fd:5d:ed:0f:be:
ff:76:16:3e:08:ff:63:b9:2e:14:b6:f2:ca:f2:3f:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1D:F1:6C:D5:79:FE:03:B1:8A:CF:01:12:C5:6A:10:50:2E:EC:7B
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:ab:f3:04:62:5c:da:0c:65:1b:99:38:20:05:b2:f4:dd:
64:95:d8:d8:c2:37:4c:7e:06:e0:ec:82:b9:52:80:ea:cd:53:
a6:98:94:a7:ac:e1:08:22:30:d7:56:6d:42:9a:40:46:ad:f0:
f8:71:6c:e5:19:ec:fe:44:94:39:8a:61:82:01:71:52:9f:ca:
b0:a1:43:92:97:ff:2f:1e:d9:14:51:75:f6:32:c2:54:bf:ab:
a7:2c:eb:ef:5c:03:b8:98:b2:ca:61:d6:01:96:27:8c:80:2b:
6d:53:b8:66:f7:2e:6d:55:79:27:4c:42:82:64:37:58:0d:4f:
87:00:9f:6c:3b:d6:02:c1:47:36:72:90:53:9f:69:d8:6f:99:
da:f2:de:de:ee:4b:cc:85:1e:99:9d:76:a6:3c:1a:2b:2f:e9:
60:55:fc:ee:4b:b2:4e:12:d0:78:7b:43:ad:b9:b5:5a:d7:21:
1e:a9:5b:28:00:f2:14:c4:71:a0:1f:78:5e:22:2f:1d:1c:d0:
6a:e7:83:37:2b:8b:b8:e8:cb:c0:97:0a:ed:5d:4b:4f:0e:43:
6d:d3:6b:e8:55:99:d3:dc:52:09:05:2d:69:2c:6d:1a:8c:6e:
16:bd:94:39:81:40:d8:c5:9b:ce:56:0f:8a:3d:ee:1d:4d:80:
5c:bb:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:14 2026 by rpki-client