Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: ocagZgh7TwYELUKmY3I4sBoORW7oCRweNZLwCuCxIKQ=
Subject key identifier: 4B:42:04:11:A8:04:B5:17:4B:BD:E0:8D:31:0D:1A:51:D3:39:E2:6E
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 01A117869EA16047A1B020804A6CBEDC7619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 18D9
Signing time: Wed 07 Oct 2026 18:01:00 +0000
Manifest this update: Wed 07 Oct 2026 18:01:00 +0000
Manifest next update: Thu 08 Oct 2026 18:01:00 +0000
Files and hashes: 1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: Diew3r5MrQDvQrXnhsvbDkQZzWjOJu4Lr7TQFKflodw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:86:9e:a1:60:47:a1:b0:20:80:4a:6c:be:dc:76:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Oct 7 18:01:00 2026 GMT
Not After : Oct 8 18:01:00 2026 GMT
Subject: CN=4b420411a804b5174bbde08d310d1a51d339e26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:dd:9d:62:f0:a3:e9:97:5d:22:5b:03:f6:
a5:2f:8c:e9:c9:d1:99:f7:69:d9:d6:38:21:26:ae:
06:f9:ab:b2:64:ee:37:43:a6:73:cc:0e:6f:e1:1c:
b4:38:23:0e:03:64:e2:fd:27:2c:cd:a7:f8:be:77:
2c:b8:28:f0:5f:1a:30:70:e3:cc:eb:8c:f5:87:aa:
7f:ea:fe:72:30:4e:81:29:78:45:a9:d4:87:25:91:
94:0c:99:b4:75:01:b3:71:6e:3e:0c:85:29:13:5d:
6a:17:1e:f3:90:45:17:a9:15:24:61:76:8c:84:88:
5c:62:22:88:d5:d0:09:c6:62:ed:3d:eb:e6:fc:f2:
18:a1:4b:13:84:ef:c3:a4:f4:48:ae:45:a7:a8:00:
b7:01:18:8f:cc:f9:cc:4d:17:8f:8a:44:3c:11:89:
d8:1e:b4:a0:69:48:28:2f:1f:3f:9e:93:21:15:b5:
b7:1b:af:ad:92:7e:6c:0c:82:9e:2e:16:80:5d:6b:
12:6c:7f:b7:1b:54:23:4e:e4:92:0c:a3:82:73:5f:
8d:ea:cd:4e:d7:8a:90:38:25:db:72:eb:86:ab:34:
52:d8:79:81:5b:ab:9d:b3:49:2f:53:99:1c:9b:79:
88:d7:01:00:34:62:84:28:c4:0c:3f:0d:df:72:be:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:42:04:11:A8:04:B5:17:4B:BD:E0:8D:31:0D:1A:51:D3:39:E2:6E
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:74:8f:a1:4a:2f:0e:f9:34:6d:70:f2:fe:41:6e:ba:97:36:
64:ed:6f:38:c8:03:29:e8:2f:44:72:d4:84:f5:f5:e9:1a:0e:
df:ce:9b:11:ba:30:c5:ad:53:4a:8f:18:b7:95:5b:54:e5:17:
29:72:0e:9e:57:ae:61:f2:10:82:d6:6e:83:d4:38:7f:b6:39:
a6:8b:4e:ff:b2:03:30:88:aa:2a:51:cd:a4:1e:62:f5:71:d1:
0a:de:d7:42:b4:ab:17:7f:1f:7d:af:8f:6e:2b:2f:49:f9:7c:
b3:be:77:82:b8:b2:84:45:91:eb:06:14:82:76:4a:86:95:f5:
2d:d8:bf:a1:ea:26:d3:ed:b4:2c:9b:96:79:46:7f:64:da:a4:
1e:2b:6b:34:99:0b:cd:74:4e:b8:36:a7:6b:d8:65:8d:7a:59:
8e:03:36:52:2f:15:41:59:bc:8f:d4:38:af:ad:76:84:4c:1a:
b4:db:ed:26:ea:0b:8d:29:a6:b6:15:ce:c8:1d:e7:1a:53:2f:
83:af:a1:ec:79:90:3c:48:52:05:ba:83:d1:a2:e1:48:e2:dc:
34:91:63:4a:2e:e7:8b:6c:98:e8:23:b9:aa:b0:0f:5a:4e:9a:
6a:2b:28:c8:de:c8:b8:f8:96:52:de:ec:b5:1d:fe:93:d0:0a:
7a:8c:3d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:05:26 2026 by rpki-client