Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: gwXi9BVFY/wWRXBCfbuLrmH90SZHywk6Dmu4n1Dcsus=
Subject key identifier: 6A:2A:B6:1A:F1:0C:60:6E:AB:AC:12:A0:CF:5C:65:71:46:8F:08:E4
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 01A17D05CB1C287E145E26ED7AC002DB4EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 0552
Signing time: Tue 27 Oct 2026 11:01:34 +0000
Manifest this update: Tue 27 Oct 2026 11:01:34 +0000
Manifest next update: Wed 28 Oct 2026 11:01:34 +0000
Files and hashes: 1: FMdfV4nkPXYjOT-AFl4Xp5RkC9M.roa (hash: OGRtgq+HhCARMlMAH6aYfG5S29jUfJNp4DytBHG5EeA=)
2: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: vbuUmxtQiHoV6y8R6AHjfJyJYRr3G2OkS5afFSFZY0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:cb:1c:28:7e:14:5e:26:ed:7a:c0:02:db:4e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Oct 27 11:01:34 2026 GMT
Not After : Oct 28 11:01:34 2026 GMT
Subject: CN=6a2ab61af10c606eabac12a0cf5c6571468f08e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:72:58:df:6e:6e:d3:42:bd:31:51:dd:03:
73:3d:3c:2a:9e:03:f5:60:d9:90:e4:25:2d:c6:28:
cf:7f:1b:ab:de:f5:6a:b3:c2:76:a3:c4:e4:cb:65:
04:fe:5c:9a:ee:5b:11:50:58:7a:82:9f:ca:f7:cc:
a7:dc:93:27:9c:ea:47:b3:3f:8e:3f:ad:c1:10:49:
0e:f6:25:d3:b8:99:08:0f:de:04:df:c0:0a:a5:00:
b7:17:f8:06:53:89:e4:35:8e:8a:b0:13:4e:2b:5a:
19:a4:b0:ad:de:8b:95:16:e2:b4:2f:a2:c1:91:09:
d9:a7:e8:93:ea:39:da:81:b1:7b:e8:04:3c:ed:a2:
4d:01:67:9b:fc:ef:56:61:44:e7:be:e3:d4:83:10:
d6:8a:0f:95:41:32:b5:35:db:2e:5f:c9:df:e1:7f:
1c:95:d9:9a:69:fe:72:4f:1e:d0:33:ce:2d:78:2d:
87:31:0d:19:4e:03:26:83:91:68:1d:5b:bc:c3:4d:
e1:80:2b:f5:01:9a:0a:f6:44:62:35:c2:4a:c7:20:
37:91:f7:68:5a:7d:7a:7c:01:f0:6b:d6:df:1b:66:
6a:a3:c1:9e:53:09:54:a1:1b:97:9b:a9:89:8c:ba:
ff:8e:3e:ce:51:f4:94:95:68:30:95:96:d8:63:22:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2A:B6:1A:F1:0C:60:6E:AB:AC:12:A0:CF:5C:65:71:46:8F:08:E4
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:85:4d:c0:51:93:93:da:fd:d1:bd:91:e7:52:ca:a9:22:29:
c8:e8:6f:54:75:a7:5a:6f:70:fd:b9:46:00:59:ac:02:41:f1:
29:2d:8b:34:2d:87:ae:ed:e3:09:a6:1b:0b:dc:1b:83:9e:91:
19:00:28:8b:4f:99:4c:f3:c5:cc:5c:f6:e2:a8:15:4d:0c:91:
4e:54:b9:18:01:61:78:d8:90:de:5f:4e:4f:e4:8a:32:e5:02:
e1:be:23:70:78:e4:f5:18:8c:33:f4:15:5e:6e:58:be:20:74:
61:54:9a:03:4e:82:86:df:75:9f:cd:e5:16:f2:c7:d5:7b:e9:
00:21:3f:67:11:1e:ea:c5:b5:7d:db:d3:d9:df:b1:7a:c2:88:
69:26:03:91:ce:9d:4b:c0:3a:55:e3:e2:cd:bb:c6:d4:c2:41:
d5:86:33:8e:8e:8e:d2:83:87:41:5a:fa:70:28:84:de:57:c3:
69:7e:ff:01:79:7a:e3:1b:a3:db:6e:4b:69:be:45:64:54:e6:
9c:9b:fc:e5:ea:de:96:64:72:f6:9f:ca:a4:bb:ed:04:8d:27:
50:49:94:f6:1e:d8:bf:d3:43:81:e1:c1:3f:25:61:f9:a0:74:
2f:c4:a5:ef:91:a4:d3:95:be:33:52:46:f7:e9:10:42:bf:6f:
46:76:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:56 2026 by rpki-client