Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: uNl7MECfMbejMZBQu+K3EZtCaBxGmp9Qj4URkXHgvkc=
Subject key identifier: B0:AD:72:14:CB:66:7A:47:B9:EB:43:68:4D:FD:3F:AD:82:DD:AB:F5
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 019F8FB528E04A6A8EAD961AF10A01292162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 16:00:42 +0000
Manifest this update: Thu 23 Jul 2026 16:00:42 +0000
Manifest next update: Fri 24 Jul 2026 16:00:42 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: fhTUkWEJYDQT8nwZm2IJQ2xWyAVN1Rl4PjYRme1U06s=)
2: k6B1HK3NKe6NDCRPO-ofLOtSI58.roa (hash: VsAnfAmolqSFo3sK403a26HeoQZ7z5c7wu+L4SUd2zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:28:e0:4a:6a:8e:ad:96:1a:f1:0a:01:29:21:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Jul 23 16:00:42 2026 GMT
Not After : Jul 24 16:00:42 2026 GMT
Subject: CN=b0ad7214cb667a47b9eb43684dfd3fad82ddabf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:6c:59:e1:5f:a7:7d:ed:7a:bb:be:c8:cc:
26:83:7b:78:48:6d:32:72:b1:98:56:91:3b:4b:f9:
49:16:0b:e3:f5:92:43:ef:2e:57:e9:d0:d3:d1:92:
cc:d3:ea:ed:49:e9:0a:d6:e6:93:2b:88:cf:ec:9c:
e9:f6:f7:ec:62:43:91:ce:3e:88:a6:64:ad:15:08:
17:dc:78:ee:ed:fd:24:78:8e:bc:79:df:ff:a1:79:
50:a6:52:cd:5f:3e:02:6f:89:ec:00:c2:f7:9e:b1:
9f:ed:e0:a6:c9:b2:31:41:e5:d1:d8:94:bd:64:00:
bb:f5:9e:d5:ba:8e:97:54:46:e3:11:ad:c3:a3:ae:
dc:c5:6d:15:98:48:4c:ee:f3:08:87:c2:9a:42:e0:
49:09:87:2e:ff:6b:e3:4f:79:d4:3f:e4:8b:3c:fe:
91:46:26:16:df:52:0c:d5:03:0a:a8:5a:98:5c:f9:
fc:0f:55:3a:b6:c7:e0:1d:8b:7b:26:f3:c5:f7:80:
b2:2b:10:1d:76:8e:e3:b9:6c:fb:2e:f5:11:e1:d4:
cb:77:8c:c1:8b:10:d3:5d:5f:85:97:bd:29:f1:d1:
0b:32:8d:46:37:8a:ce:4b:4e:42:0b:75:11:6d:bc:
4d:31:c9:e6:10:6b:54:c1:09:1d:f5:fe:3c:cf:01:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AD:72:14:CB:66:7A:47:B9:EB:43:68:4D:FD:3F:AD:82:DD:AB:F5
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d3:a8:a4:83:0d:aa:03:93:23:63:d2:39:19:28:08:f0:e4:
ea:09:8e:9e:d1:6f:fa:63:16:44:44:34:4a:df:3c:3b:6d:18:
5a:4b:45:84:63:d9:d8:12:12:c5:d1:2e:b4:17:0d:ab:d3:fe:
c4:ff:1a:9d:e8:93:55:59:e3:b6:63:25:1a:d3:ec:a1:77:77:
65:6a:02:c4:87:e5:df:ae:32:7a:ed:b3:05:eb:6b:d9:3d:f7:
1e:f4:45:c6:cc:2b:8a:5e:55:29:b1:9b:f5:6f:f8:33:6e:dc:
ee:88:53:f7:ad:e3:27:83:01:97:99:d6:09:53:22:47:75:df:
1f:46:fd:63:61:d0:54:b7:b0:2b:c3:fc:16:89:57:8f:ca:c2:
99:ac:c5:30:c0:75:8d:56:2a:95:f9:df:11:a1:41:bd:f7:50:
06:71:11:6d:f8:c8:fd:9a:a3:bb:48:ea:c6:dc:84:06:72:2e:
85:82:90:80:7c:90:ff:77:c2:d2:55:d2:60:4b:f0:19:f9:0c:
8d:da:cb:04:af:d2:1d:aa:24:cf:87:f5:2f:23:9a:18:bd:b9:
13:eb:79:06:8c:95:57:77:14:c3:83:96:7a:5c:e6:0d:66:cd:
9b:17:42:74:eb:0b:43:66:ba:dd:85:1d:06:7d:0b:5f:87:fd:
b5:11:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:32 2026 by rpki-client