Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: rGdoOwtFAPVRmDwRRv1QEiHtC3ag4THZZJBX2ZtgNvE=
Subject key identifier: 99:36:89:85:4F:AA:FE:2C:4A:0F:AB:80:29:43:44:0E:C7:C0:9B:77
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 01A10437AB4FD13D43CF59CADF20265E2025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 1A8D
Signing time: Sun 04 Oct 2026 00:01:59 +0000
Manifest this update: Sun 04 Oct 2026 00:01:59 +0000
Manifest next update: Mon 05 Oct 2026 00:01:59 +0000
Files and hashes: 1: 4_C_LH1nSyQOu16AzrkH56R6Qco.roa (hash: PB9D6OuMlpeu2fl0ur5FRGNivh90riiacfurkWgTaH0=)
2: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: /xpf/1CKX8llG8QBrzx9VRBSWa4V4ar/aJLfyy6PpQU=)
3: ytydS8iceftOnYaB5-5LVqpPFZo.asa (hash: DW5PX1MGoo1+t2QgyExciwvbXJdSvCnWIToame1qzqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:ab:4f:d1:3d:43:cf:59:ca:df:20:26:5e:20:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Oct 4 00:01:59 2026 GMT
Not After : Oct 5 00:01:59 2026 GMT
Subject: CN=993689854faafe2c4a0fab802943440ec7c09b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:f2:e8:31:ef:1e:53:b9:0f:2a:51:7f:41:
9b:56:d0:82:55:98:34:aa:9e:19:3e:a4:cf:fa:3c:
dd:c5:73:ab:9c:3e:01:f1:c5:44:b3:a1:6f:a8:13:
d3:a3:3c:46:6e:d7:8c:ce:dc:36:ee:8e:ab:9e:16:
df:30:70:33:40:fa:e6:6f:57:ce:05:b1:17:a1:6f:
36:7b:cc:19:50:cb:86:62:49:c0:07:47:f6:b0:8b:
ee:b8:75:99:8d:4d:3c:5e:dc:d8:2d:61:7e:d3:d6:
ea:0b:5b:df:92:77:88:82:b7:47:03:6c:fd:ba:2e:
e6:15:28:46:5f:48:95:af:82:0d:28:1d:fe:86:d4:
8c:31:04:96:71:da:4b:0d:0e:75:b7:3d:b0:7f:7c:
ef:b7:a0:67:b2:10:b0:7b:a5:5e:44:ca:a8:5b:8a:
e1:ff:3d:3e:94:e8:be:28:05:3e:02:2d:85:f6:51:
f7:5c:1b:31:b2:98:04:18:2e:b7:b6:e7:a7:d8:00:
3f:69:57:1a:b2:01:8e:c2:2a:68:5a:fd:9a:9d:f9:
52:88:4d:58:62:bb:96:ce:29:82:12:cf:eb:79:f7:
9d:9b:65:45:4f:65:79:75:a9:5f:08:ef:27:30:a4:
56:f9:30:10:73:6c:89:97:ed:61:c6:a7:f8:2d:56:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:36:89:85:4F:AA:FE:2C:4A:0F:AB:80:29:43:44:0E:C7:C0:9B:77
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:4b:1f:c3:3a:1d:67:11:86:eb:54:67:8d:55:a5:39:9d:8a:
89:db:7c:27:5b:2b:d4:54:b0:9b:51:66:0f:5d:d6:90:1f:27:
ef:88:26:7f:88:fd:6f:9a:a9:45:c1:b0:96:31:ef:cc:28:84:
9d:28:36:f6:cb:99:59:27:bc:32:10:cf:30:e2:51:31:21:bb:
a4:02:96:17:94:f6:7a:be:b4:7b:07:6e:50:87:77:9e:22:3d:
84:ef:57:a9:51:81:27:4b:a2:c7:c1:51:59:dc:de:49:da:ca:
35:4c:c4:39:67:ff:64:82:aa:4b:8f:33:45:2d:8e:f8:69:92:
91:9c:ab:e9:00:43:09:e8:05:f4:8e:1d:df:da:ea:f4:77:54:
75:60:3f:4d:36:bf:29:44:9a:ae:5c:c6:f8:56:ff:66:73:9f:
42:20:20:1f:f1:87:32:44:fa:34:38:f8:49:86:f2:62:72:c2:
fc:00:27:81:a6:af:2e:20:7f:1c:a0:67:0f:1c:cd:88:58:59:
41:2e:89:fd:d2:cc:3b:90:4a:d1:57:19:99:fd:14:82:d1:b6:
d9:61:f5:98:3a:5d:29:9a:1d:dd:29:f7:56:ae:1b:dd:f5:d2:
a0:47:5e:aa:04:05:dc:69:bc:08:79:bf:7d:36:df:e5:c9:30:
b3:df:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:40:17 2026 by rpki-client