Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: ypTmIafSgZFTtpUydXB63D+8mo7xgYzylagHRYi/Vng=
Subject key identifier: 8A:4C:16:FC:39:6C:57:FC:64:03:EA:5F:8A:D1:70:0E:8B:B8:2D:EC
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 019E1CEB8A765F6780C40DB4276DBE0F8C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 16:00:58 +0000
Manifest this update: Tue 12 May 2026 16:00:58 +0000
Manifest next update: Wed 13 May 2026 16:00:58 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: 5SvXrlPT0qNlOccV5M+VrxdiOYzpDOgH4Fl9pF1K7aM=)
2: k6B1HK3NKe6NDCRPO-ofLOtSI58.roa (hash: VsAnfAmolqSFo3sK403a26HeoQZ7z5c7wu+L4SUd2zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:8a:76:5f:67:80:c4:0d:b4:27:6d:be:0f:8c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: May 12 16:00:58 2026 GMT
Not After : May 13 16:00:58 2026 GMT
Subject: CN=8a4c16fc396c57fc6403ea5f8ad1700e8bb82dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:d9:1f:c6:f4:17:31:8e:ff:1c:f6:4d:00:
f5:9a:fb:16:74:d4:39:b0:59:da:10:db:7e:7b:16:
1d:17:52:ce:b5:50:85:cb:93:8f:3c:08:93:b4:2d:
91:aa:2d:ab:a6:dc:20:e7:14:6e:39:d7:f9:71:4d:
93:ea:dc:6e:4b:98:a4:2b:ae:b1:40:2d:82:3b:53:
a4:25:ba:18:15:c4:7e:d6:cb:d5:98:0c:ae:d7:7b:
d6:2b:4c:2b:2d:5a:d1:79:7f:55:db:74:3b:de:28:
ae:b5:42:a9:a9:2e:1d:ab:d6:bd:2b:ae:eb:77:cd:
3c:ca:63:51:53:28:cf:bf:67:0c:f1:03:78:e1:3b:
67:37:08:b5:f7:da:d6:01:a5:09:2e:fe:8c:9d:8a:
53:0b:70:a1:3e:7a:f2:51:1c:72:2c:f1:12:ff:cb:
ba:24:18:df:3b:30:dd:4f:c2:42:8c:8f:87:15:f1:
68:25:8a:ee:90:2c:43:9e:bf:8c:9b:7c:8d:3f:74:
01:be:28:7c:8c:4e:89:06:f9:96:a7:49:51:ff:86:
66:34:77:39:62:4b:80:57:90:71:33:0e:d0:49:8a:
72:18:93:f8:5d:61:a3:a1:2c:2d:ac:42:d3:33:11:
78:56:b0:5c:83:48:37:7d:3c:53:7f:1e:11:89:ac:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4C:16:FC:39:6C:57:FC:64:03:EA:5F:8A:D1:70:0E:8B:B8:2D:EC
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b5:c5:9c:32:b9:2c:21:36:b2:76:31:cc:66:38:f5:29:df:
e0:5e:a5:26:f0:78:56:0d:1c:df:bd:e7:89:63:bf:ff:c4:23:
51:a3:ac:11:6b:2a:c0:b1:4a:ad:d9:47:e6:a0:bc:50:95:f7:
40:5a:28:da:f3:3e:6a:eb:12:a4:d6:f8:ba:bb:89:31:ea:1c:
f1:61:53:e0:43:d0:51:6a:0a:d7:19:18:28:12:de:d7:95:ea:
64:74:6c:4f:a1:7a:2d:52:88:19:4a:46:10:48:e2:71:32:b3:
3b:fe:f2:ba:6e:58:b0:69:9a:33:72:48:61:2f:60:36:f0:41:
22:c5:1c:52:aa:59:56:25:17:84:5d:ea:7d:f5:58:1c:b1:da:
95:12:9a:42:d0:dc:04:f7:20:78:e5:03:fd:b2:ce:2b:45:92:
41:94:be:31:7b:86:f3:58:0c:e5:58:a2:eb:22:0d:f4:ae:4a:
7a:09:dc:a9:4c:75:0e:aa:a0:a5:4f:36:f2:78:66:e2:e8:e0:
36:a4:e8:65:50:0e:2b:68:2a:cd:9e:c4:aa:56:6a:e3:86:9f:
05:4a:17:34:ad:4b:df:f3:c4:b2:e0:b7:88:8e:74:bb:d2:5c:
ca:6e:03:0d:5f:8f:3e:73:ae:ce:4d:7e:f1:c8:a8:52:ff:a7:
2c:0f:80:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:18 2026 by rpki-client