Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: JEyGqnhbdGpbrL+FOxJIDWXzp02VpB+Is3J4Oy/pCUs=
Subject key identifier: 2F:DE:8C:A2:89:85:50:19:D3:91:08:FC:7C:F2:28:63:D9:75:55:F6
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 01A0D1C91227598AF6547EE58E8F79BD227C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 05:00:10 +0000
Manifest this update: Thu 24 Sep 2026 05:00:10 +0000
Manifest next update: Fri 25 Sep 2026 05:00:10 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: ZSV0IsHrWrsQ4x6uJFtkdRhahoBqbGRGiY4IBhs60rA=)
2: m0oKdcSNV-cSKH7tgVrl_MXsI3E.roa (hash: E8GDwRTv3+qdGdGj3xjkdxl47KDWNgRWU6Jc+RCaCnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:12:27:59:8a:f6:54:7e:e5:8e:8f:79:bd:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Sep 24 05:00:10 2026 GMT
Not After : Sep 25 05:00:10 2026 GMT
Subject: CN=2fde8ca289855019d39108fc7cf22863d97555f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:94:bf:e4:f1:20:e9:e5:00:9a:f7:a6:d8:
c3:ea:db:9a:5d:17:c1:a5:97:23:d5:ab:6c:1b:c8:
f4:49:90:77:02:f0:f0:13:c2:3a:d8:d3:e6:f8:bf:
21:95:b8:cc:a7:46:40:6f:09:3b:bf:4e:01:a7:35:
3f:c6:23:be:89:9e:d4:cb:93:f3:89:08:4e:26:83:
1e:8f:9f:17:ab:55:9d:e8:32:0a:a7:dd:69:c7:48:
23:03:b8:0e:dc:02:5a:e5:ba:07:87:12:e6:04:81:
6f:c4:54:bd:ff:95:cb:51:9a:e4:99:55:dd:c1:f5:
00:fe:93:12:89:fe:0a:93:69:a9:a1:44:66:01:a6:
09:ff:2c:8d:8b:15:4a:b5:d2:2b:52:4a:d3:3c:d9:
1c:05:17:4c:5d:36:8b:94:9f:fe:91:b3:d1:ae:2f:
7d:1f:3f:f2:e6:b9:d7:a6:64:77:0d:02:1f:e7:74:
26:8e:ee:ff:69:c4:76:46:47:5b:12:46:64:77:78:
78:fb:5e:8a:a5:8f:59:b8:e8:fa:64:2e:81:06:9a:
98:e2:34:86:69:24:98:69:30:06:6a:53:37:a2:43:
03:d4:28:39:92:72:27:76:1a:76:a9:1a:15:9c:5f:
dd:18:43:b5:eb:6c:a2:4e:45:65:e1:1b:da:90:a6:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DE:8C:A2:89:85:50:19:D3:91:08:FC:7C:F2:28:63:D9:75:55:F6
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b1:05:65:85:73:a8:da:e2:1b:5b:00:e7:ca:da:78:e2:68:
88:7c:ef:bb:6d:27:5c:c0:b4:4d:5a:e9:81:be:fe:79:32:8e:
17:6d:91:cb:4d:16:63:2f:f3:f5:32:aa:95:e5:97:0a:b1:7b:
f0:9b:0e:38:bb:24:ce:bb:a7:78:a2:3a:80:06:4b:c9:32:ab:
c3:8c:1b:82:8c:68:3c:10:25:90:ce:23:85:72:55:31:32:50:
bc:ea:a9:45:e0:bb:dc:23:58:38:72:ba:88:2e:97:01:c3:f8:
e1:9d:a6:bd:71:45:c7:bb:b7:8e:54:c9:9e:a4:f3:4c:74:0c:
a6:76:c0:1e:1a:0e:2f:52:93:c6:d9:44:78:6e:69:7b:ee:bc:
78:e8:13:94:09:29:68:0f:91:7c:88:4c:47:a8:90:62:af:d2:
7c:a2:0c:ff:5c:45:a1:d5:5c:ac:9d:c4:36:f0:93:49:24:82:
1f:3f:33:c8:fb:e1:ea:16:49:cc:96:32:5e:b7:70:11:60:32:
c7:9f:0b:41:04:01:28:e7:a8:0a:52:50:3a:88:5d:f2:27:f1:
9f:90:8b:a3:28:59:7a:2f:09:eb:71:f2:92:45:3b:f7:7b:25:
c9:19:b7:d0:11:74:d2:65:c9:32:bd:1f:05:79:78:55:62:e6:
9e:f0:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:46:19 2026 by rpki-client