Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: IOKkQuxDPHKdVbna7fT+U5MhpzCtrulx8Va+6jayGuQ=
Subject key identifier: 9C:19:A7:AD:04:61:E6:53:0B:2C:CB:E7:08:8F:6E:CA:D5:9C:ED:5A
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 019D27A926A18ED22BCB7B8D7D773C307139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:30 +0000
Manifest this update: Thu 26 Mar 2026 01:01:30 +0000
Manifest next update: Fri 27 Mar 2026 01:01:30 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: HLQ6VuBbDO0LtyLxODr5bMkIXAkxt0T7bxEaPrqyzhY=)
2: k6B1HK3NKe6NDCRPO-ofLOtSI58.roa (hash: VsAnfAmolqSFo3sK403a26HeoQZ7z5c7wu+L4SUd2zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:26:a1:8e:d2:2b:cb:7b:8d:7d:77:3c:30:71:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Mar 26 01:01:30 2026 GMT
Not After : Mar 27 01:01:30 2026 GMT
Subject: CN=9c19a7ad0461e6530b2ccbe7088f6ecad59ced5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:b4:05:62:12:76:74:e9:f4:c8:e0:ad:c9:
52:3e:b0:fa:96:a6:15:14:85:ff:b2:f3:e5:61:9f:
00:21:bd:cb:2e:ef:fe:f5:68:c7:dd:a2:47:9c:5a:
ab:ac:9d:7e:91:d9:28:6f:0a:32:83:c7:b0:e7:8b:
83:b0:c9:15:a0:c6:e4:28:ea:47:58:b5:7b:cc:24:
07:44:e9:fa:87:51:5c:4a:0f:f5:b7:78:c2:ec:9b:
c6:db:2e:35:7b:9e:cb:27:bf:8a:55:16:aa:e9:57:
68:70:c7:fd:94:7a:ba:56:f6:88:5e:cb:d0:2d:10:
d5:b4:3a:5c:67:8b:5e:b0:38:95:57:b5:73:04:46:
18:e4:b8:12:ea:e5:88:bb:b8:c1:fa:9f:dd:3b:98:
31:ee:5f:21:3f:f5:a1:c8:db:40:2c:82:86:91:a8:
ad:12:6a:6e:23:a6:78:40:d6:ec:4e:1f:63:d5:1f:
4d:8c:1f:d6:b4:37:b7:1d:dc:48:d7:47:45:ce:61:
e4:42:ee:ac:db:69:28:0f:6e:07:8b:9e:fe:1d:27:
50:76:42:92:4c:51:63:35:62:ee:75:0e:36:99:0e:
60:6e:09:82:aa:a2:44:e8:ed:f6:9f:d7:ec:4e:45:
d1:5d:f8:55:78:a1:81:d6:03:ce:bc:ba:1c:f6:9f:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:A7:AD:04:61:E6:53:0B:2C:CB:E7:08:8F:6E:CA:D5:9C:ED:5A
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:2e:04:a8:56:e6:0d:1d:18:2d:c5:bc:5d:79:1e:ff:48:
a0:a0:be:ea:5f:d6:a3:d3:5a:8d:e4:05:d2:5c:7b:89:be:33:
5c:0e:e0:57:e5:01:a3:26:b1:c9:a8:e7:f6:bd:86:77:70:4c:
fc:87:e6:85:2d:c5:20:78:12:1a:f3:0e:46:d2:d2:9d:eb:43:
3e:8f:7d:b5:28:2a:db:09:49:34:9b:f7:64:f9:dd:af:6e:0d:
63:21:3c:06:01:f2:63:06:86:d1:c3:6d:2e:3a:5d:42:dc:bc:
b2:7c:d4:da:55:bd:23:a0:a5:88:ab:d7:25:1a:a1:22:27:fc:
69:c9:ec:51:5a:b7:40:50:4c:f4:a0:6e:18:35:d0:6e:78:82:
0a:37:21:c8:af:05:08:9e:50:07:23:13:d2:b1:99:11:fb:0b:
2e:6a:c4:f7:cf:cb:b2:ee:87:08:fa:9a:3a:6a:14:c0:ce:3a:
25:ef:d1:0b:9a:33:ef:45:5f:0f:42:5a:e3:cc:77:37:da:51:
6e:4e:7d:5d:c0:ef:36:03:ab:84:68:b6:1d:b8:ab:d5:71:7e:
42:f8:f1:db:fb:d2:a7:19:21:f8:01:9b:43:45:43:ec:84:eb:
d5:0a:80:52:1a:9c:64:6a:14:1d:13:da:f3:ee:1a:dd:5f:8a:
b7:de:35:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:56 2026 by rpki-client