Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
File: 1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json)
Hash identifier: L3PshCqEMyr5/uVqNAEpkTOEvrhd81K3KH5piqNPYAA=
Subject key identifier: DC:EA:0D:88:F1:54:EB:DF:F5:3A:78:19:A4:16:6A:7E:AC:F3:87:68
Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
Certificate issuer: /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Certificate serial: 019D26CD2C5437CD9B4A15B1CD6DDC37AB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
Manifest number: 0130
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: kmByBwotwwJcjBsS0C3bVMzc9KxBsr4/+GxjRkwy9Xo=)
2: iYN0utCjOjCIPINNJfjhuG0vjOg.roa (hash: 7Wnyb9CGOm4TN0ey7ufrrNiIF/X3LDz9AlFMHrkszjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2c:54:37:cd:9b:4a:15:b1:cd:6d:dc:37:ab:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=dcea0d88f154ebdff53a7819a4166a7eacf38768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:d9:00:1a:27:ce:28:17:5d:4d:ed:85:ee:
1f:50:bb:e2:0c:28:9a:3d:a4:f6:c5:c8:2e:80:3a:
ad:4a:34:99:07:fc:f6:d8:41:20:70:b4:c2:54:af:
05:c1:57:83:db:58:00:d2:6a:f2:d5:83:87:56:1a:
f2:04:cb:4d:be:ea:67:be:2c:ac:bc:b2:7b:22:c8:
0c:2e:96:b4:bc:70:c7:2b:2a:7d:e7:46:b6:a8:59:
88:dc:ec:f7:74:a5:1b:db:a9:08:bf:46:37:19:91:
5d:33:70:b4:be:57:73:27:3d:fa:6f:d9:3d:ce:58:
fe:eb:0b:63:8e:46:e0:90:f7:6a:d0:94:f1:93:8e:
90:bb:1c:93:60:e6:dc:4d:93:24:38:68:59:53:08:
df:4a:4f:0c:fa:15:66:8f:4f:b2:10:91:ed:30:d5:
83:cc:20:a7:fd:48:41:e7:2e:2d:b2:39:df:af:f2:
22:34:52:cc:bb:25:e5:c3:7c:81:3c:39:03:11:9f:
93:b3:34:91:09:9e:3c:bd:a8:e7:a3:5c:28:81:65:
5e:76:d6:c1:22:7a:d6:f1:80:32:bd:9e:31:d9:ba:
32:4f:06:46:2e:e1:02:a0:00:9d:98:15:52:7d:0e:
fb:26:5b:b9:64:0a:49:58:f0:86:d9:a5:37:f5:0b:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:0D:88:F1:54:EB:DF:F5:3A:78:19:A4:16:6A:7E:AC:F3:87:68
X509v3 Authority Key Identifier:
keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:31:4b:7a:58:4a:7f:85:a3:3c:f9:88:82:89:58:ec:5c:
c8:56:88:ea:80:55:c8:d4:91:7c:64:7f:96:9a:8d:f4:9e:61:
c8:83:79:d7:7c:49:60:f4:55:e6:f0:72:64:0d:20:ee:7c:c8:
15:78:34:9b:9f:4c:b3:8c:03:88:46:3b:c1:8f:22:6a:20:60:
08:2b:89:43:f6:4f:8c:61:37:09:1c:48:1e:86:a2:da:5c:e7:
67:e2:39:ee:c9:aa:b2:43:32:86:8a:06:95:ad:6f:17:03:4c:
f9:54:72:45:a8:a8:5c:c9:83:9b:2d:03:28:d4:a9:6d:14:29:
76:72:cb:db:16:ff:2f:12:7e:a9:76:1e:e3:ba:a0:3a:6a:73:
34:86:e9:8e:0e:43:1f:2c:cf:b7:ef:d6:86:76:99:fa:f3:47:
6f:60:6a:50:13:4e:38:6c:f2:2e:91:89:19:45:4d:ac:bb:b5:
32:fe:90:9e:e4:6b:79:ff:e4:21:e3:0c:4e:4d:1b:c4:15:c1:
40:f6:be:07:d2:3a:54:04:5e:eb:7f:30:d1:ef:36:10:22:97:
df:51:ac:cb:83:04:0c:49:57:df:06:12:53:d8:df:64:d9:ef:
7c:db:f8:29:d9:3b:a5:09:9b:d7:9f:7c:f5:31:fd:f0:7d:47:
8d:27:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:43 2026 by rpki-client