Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: yUFm7+Pt4DIcbqSJ9/UzMGQcD67uwhtH5AJ6+n/OX04=
Subject key identifier: 4F:F4:C4:7D:AD:FB:06:DC:9A:86:10:0D:D9:97:E4:16:F8:3F:15:78
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 01A1249D3254D396F3E15CF0CB71603B06DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0E05
Signing time: Sat 10 Oct 2026 07:00:44 +0000
Manifest this update: Sat 10 Oct 2026 07:00:44 +0000
Manifest next update: Sun 11 Oct 2026 07:00:44 +0000
Files and hashes: 1: MD2XknW8QXUXX5zjYirvLatDz1U.roa (hash: 57ZBGDriQ05ex2sQRZeUkWVivCM8pRal2i0bg/3JG3E=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: ZcR9suAd+BmuDbLvA2B0SCqodwPRAAtipsyygO/8daE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:32:54:d3:96:f3:e1:5c:f0:cb:71:60:3b:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Oct 10 07:00:44 2026 GMT
Not After : Oct 11 07:00:44 2026 GMT
Subject: CN=4ff4c47dadfb06dc9a86100dd997e416f83f1578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:ae:7b:c0:a6:3b:a2:4e:91:e5:58:6e:72:
51:8a:3c:4b:ca:06:b6:3a:32:7c:49:fe:98:db:ab:
5a:92:14:90:af:de:f4:56:59:6f:4c:a9:a3:e5:a6:
71:07:75:20:e3:45:d4:62:0c:36:0c:61:04:7e:05:
cb:82:df:9d:9b:e8:7e:2e:26:7e:1a:e0:10:3b:08:
7b:68:20:5c:7d:f2:c2:16:a6:b1:16:2d:64:25:38:
55:58:94:7d:40:8a:7e:51:bf:5f:47:ad:3d:4e:3e:
93:3a:e7:01:cb:fd:b5:b7:8e:b9:44:86:00:05:4f:
5f:43:41:bd:4e:a0:e6:33:6b:97:99:18:fc:3f:d0:
13:e2:ae:eb:f6:e3:45:b1:b1:37:27:ad:58:6e:d9:
ff:f6:9d:91:97:a5:6e:a9:97:de:a4:b6:f5:64:1b:
80:ee:3b:bc:d5:5e:f5:d4:7c:17:d2:fd:0f:e2:af:
a3:a0:31:a5:22:86:36:05:69:d7:39:6d:f0:24:21:
89:0f:91:be:c9:ce:28:8d:9b:54:78:b6:49:bc:c2:
ad:9f:9f:22:b2:83:de:43:ae:23:bd:eb:8f:d5:a0:
8a:8c:05:c2:7f:b1:27:e2:9c:cf:e3:fc:5d:c2:c4:
49:34:0c:33:72:37:d7:86:84:6d:82:91:23:06:db:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:C4:7D:AD:FB:06:DC:9A:86:10:0D:D9:97:E4:16:F8:3F:15:78
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:76:94:93:10:d4:c3:a3:0b:11:36:09:7d:45:26:87:53:7e:
a4:be:9e:ef:64:bd:df:43:a6:d5:00:95:31:2d:38:b0:21:4e:
35:32:a6:b2:26:c6:29:3c:6e:a4:f8:6f:37:57:f0:76:8c:3e:
ec:e8:20:2c:39:8d:e2:74:36:7b:70:0f:a5:fd:53:68:8c:b4:
2e:92:8a:ce:7f:74:05:01:ed:ab:09:ab:17:36:ac:5e:6a:93:
69:b4:e6:00:dd:9b:c5:01:9f:82:d0:d7:61:db:9f:b2:29:10:
31:af:3b:ee:eb:c6:9e:42:e4:f4:bc:ee:9f:33:a0:fa:75:7d:
d4:c4:63:2b:cc:a4:44:1f:ac:bc:45:cc:f8:59:57:cc:c2:fd:
ea:e7:36:f6:5b:00:43:a1:05:f9:9e:bc:40:66:da:33:2c:58:
0a:f7:35:5a:a2:ab:ec:fa:3f:4c:54:6a:3f:8b:60:17:cb:38:
19:f6:09:f0:88:04:d5:d6:85:20:43:bb:44:94:e9:20:68:bb:
bd:65:a9:ff:03:5b:ac:5d:8a:8f:f6:e9:df:4a:ed:54:07:5b:
65:20:ea:76:fd:2d:9d:a0:f4:49:43:e3:5d:1f:0b:d2:de:19:
e4:ea:8d:10:81:f3:84:a5:17:cf:d0:73:82:ed:11:9f:28:42:
b6:d2:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:57:05 2026 by rpki-client