Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: EiVmsmeZVf0aqf3Iphv19XFfNKpnoMcn3dhKNXG3gjs=
Subject key identifier: 70:EA:9D:9D:8A:A4:CA:D8:20:77:A0:B5:BD:D0:0A:32:89:81:06:58
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 019D270401316ABD6910277E1B2994236AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0BF4
Signing time: Wed 25 Mar 2026 22:01:07 +0000
Manifest this update: Wed 25 Mar 2026 22:01:07 +0000
Manifest next update: Thu 26 Mar 2026 22:01:07 +0000
Files and hashes: 1: MD2XknW8QXUXX5zjYirvLatDz1U.roa (hash: 57ZBGDriQ05ex2sQRZeUkWVivCM8pRal2i0bg/3JG3E=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: jZjrqOlRlqirKzt+yNMzuHjAelKjPpvEZ67L+dMxcGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:01:31:6a:bd:69:10:27:7e:1b:29:94:23:6a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Mar 25 22:01:07 2026 GMT
Not After : Mar 26 22:01:07 2026 GMT
Subject: CN=70ea9d9d8aa4cad82077a0b5bdd00a3289810658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:50:95:d3:41:0e:f3:f8:28:3e:c8:eb:85:
a2:ad:e9:eb:0d:e0:43:a7:15:e4:9e:12:f1:ca:94:
d7:f8:0a:2a:9c:1e:d1:2a:21:44:fe:47:7f:31:d1:
ba:98:f6:e4:18:77:79:cb:77:d0:ce:26:6d:09:04:
75:c9:0c:23:c6:1e:54:c6:86:b9:29:5e:0c:d5:08:
b0:3f:c4:85:4d:06:7d:0e:30:10:d1:ca:94:4b:b6:
89:5b:1e:27:f3:94:7a:5f:d2:46:be:3b:5f:65:9b:
f7:18:e4:ba:39:59:34:8d:10:ba:b4:25:21:1e:bc:
5f:a1:60:f7:c8:5e:5d:b8:a3:ce:96:31:cf:6d:47:
03:cc:48:d2:06:7c:99:c4:77:4c:85:dc:11:f0:2f:
22:75:1c:9e:ed:ee:55:2e:ed:7e:be:49:d5:76:a6:
c2:29:9d:df:19:78:a5:17:85:ce:64:96:d2:e7:ed:
40:20:03:48:6a:1e:8d:b6:5c:50:bc:50:12:88:62:
9b:a3:67:4c:53:a5:76:3c:bd:90:58:df:19:e0:e7:
7a:a1:a0:7b:01:e4:2f:ec:ec:1d:76:bf:49:f0:70:
b8:f2:d8:b3:3b:ac:26:c6:2b:5b:e4:3d:e0:70:83:
8f:10:aa:a6:77:c9:8c:08:21:74:5f:a9:0f:91:bd:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EA:9D:9D:8A:A4:CA:D8:20:77:A0:B5:BD:D0:0A:32:89:81:06:58
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6c:91:94:76:f8:95:93:dd:16:57:5c:b5:89:b3:d1:1d:f4:
6d:cf:fa:c0:45:d4:a1:b0:3d:4a:5e:55:bb:0a:06:69:b2:31:
57:bb:a8:a0:45:a3:fb:fd:b9:7b:16:fe:d5:6f:ab:90:eb:d2:
bc:5b:4a:5c:f6:a9:6b:c1:1f:89:be:48:24:80:05:93:d0:85:
db:f6:d0:98:32:e5:b1:38:18:6c:26:c6:26:23:94:d2:9a:d5:
b4:44:41:8d:c9:4e:29:e3:f5:9f:d4:bd:8d:96:e8:73:99:47:
64:54:bb:64:ff:8d:36:c0:0e:49:ce:dd:a0:21:43:f3:c8:b9:
d8:f4:94:69:ed:78:cf:ca:31:52:5a:52:01:72:32:99:73:d9:
a8:40:f1:80:63:09:7a:93:3c:27:a6:b1:2d:30:0d:7e:1d:e5:
93:52:9c:bc:01:a9:41:de:ad:95:a9:f7:2f:56:d6:be:77:e7:
86:b4:e3:26:54:8e:fc:67:00:3c:5d:4a:1b:9b:e3:1a:4b:e2:
f4:e6:76:ae:e0:c4:4a:1f:0a:8f:e3:7b:07:f0:4c:1a:7b:88:
f0:b9:8e:3c:11:6e:55:53:9f:19:08:71:f9:07:6b:f9:cb:f5:
95:03:c4:80:16:74:84:e6:a2:7f:01:06:66:83:46:28:9d:96:
9c:44:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:55 2026 by rpki-client