Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier: szHXfR/eLsgiEwm4YgixcgVGD4qDXK4CtubcAxScr58=
Subject key identifier: 6D:69:79:2D:07:08:E6:DC:F4:E5:38:88:87:E7:84:56:AD:CA:8C:67
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial: 01A0D1C8FE0F2DF00EA6B5C34AEAF798009A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number: 1037
Signing time: Thu 24 Sep 2026 05:00:05 +0000
Manifest this update: Thu 24 Sep 2026 05:00:05 +0000
Manifest next update: Fri 25 Sep 2026 05:00:05 +0000
Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: VC7YCqjmU7dwZf9uNHA0itJUnHSvjcpp91P+h6jRj8I=)
2: SxTqFSaVYKNp7RXjp-9P-WYLFPk.roa (hash: ZmAlezL/eOxIgz3wvBspKHt49atyoUhtEGugoI4vkno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c8:fe:0f:2d:f0:0e:a6:b5:c3:4a:ea:f7:98:00:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Validity
Not Before: Sep 24 05:00:05 2026 GMT
Not After : Sep 25 05:00:05 2026 GMT
Subject: CN=6d69792d0708e6dcf4e5388887e78456adca8c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:13:9f:19:43:82:35:fe:a7:01:1f:4e:ba:
80:57:97:3f:50:c8:9a:3d:0d:e4:d0:cb:82:41:e2:
1e:02:50:a8:6d:3c:d4:27:ff:35:2f:a0:ea:14:cf:
ed:a1:18:d1:d2:ed:cc:e7:09:6f:53:64:5a:0b:a0:
d1:2d:ef:58:0f:d0:48:6d:cc:d7:b3:bb:cc:2c:17:
0b:24:9d:0d:cd:7b:40:ca:1b:73:d1:71:db:15:5b:
ac:7b:af:c4:4b:e3:f0:64:48:5f:49:e5:c8:b0:b0:
80:39:ba:00:7d:af:79:e5:ff:c7:95:ce:8a:51:0b:
6b:04:20:2a:1f:04:a2:a8:07:da:a1:21:7c:8c:bf:
60:fd:52:c7:66:db:63:13:b6:b5:af:6c:0f:92:de:
ed:6d:f8:5f:24:1b:b4:98:99:26:b0:3c:4b:86:3d:
bb:ef:b2:ef:ce:48:5c:45:d8:95:37:ea:87:a3:82:
8d:9d:08:28:c0:89:55:f3:a1:5e:77:f8:ed:be:9e:
9d:c6:0c:6a:60:e4:70:d0:76:dd:1f:99:7f:5a:67:
11:4c:03:ba:12:a6:45:9d:b2:05:af:dc:ef:b1:89:
6a:f9:14:2a:3b:79:55:77:fd:a4:8a:de:9a:3a:42:
9b:d4:67:f0:eb:d5:5f:24:9a:38:0c:81:95:a2:f4:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:79:2D:07:08:E6:DC:F4:E5:38:88:87:E7:84:56:AD:CA:8C:67
X509v3 Authority Key Identifier:
keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:cd:10:93:00:b2:b6:04:64:01:8e:9c:ea:e1:53:e0:63:
62:9b:f6:f1:92:1b:f0:1f:09:a7:b2:fe:59:81:50:23:ee:be:
d0:98:7c:a0:a3:20:cc:9c:37:70:08:57:81:42:b1:60:29:aa:
d8:97:c8:9b:34:92:ca:64:e6:c5:b1:c3:29:7d:9e:24:6d:39:
7b:bf:e3:b0:17:df:d3:a1:43:a9:4c:f5:7e:ea:db:94:cb:a5:
48:56:99:f3:47:ab:7a:d6:88:0d:d4:1e:ba:48:87:de:de:83:
b7:b8:e5:50:cb:16:a6:83:de:5d:5d:af:23:6f:fc:ea:ba:2d:
79:d2:08:e5:4e:ac:00:95:21:c5:b8:59:fb:04:27:2d:bf:41:
85:d1:2c:ca:31:11:24:db:1a:e3:e6:a1:76:b5:82:3b:1c:c1:
64:e0:75:9c:19:cd:e4:85:6a:48:a7:e0:4b:34:73:fc:de:6a:
ab:d7:9f:07:85:76:b5:37:9d:b8:8e:71:af:b3:45:c8:2b:ef:
83:1b:37:f8:a9:25:f3:c1:00:11:49:7a:d1:39:3b:c5:ba:26:
2b:1b:d8:6d:84:b1:60:16:06:5d:23:1a:29:d4:a8:26:c0:27:
85:45:74:83:c0:fb:68:e5:1d:ab:9e:42:d5:e6:58:73:ad:8e:
cd:88:ba:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:00:56 2026 by rpki-client