Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: JNC324VYSR3YHALzxLBt2eyzQ2seQx3P6n66bNmDWCQ=
Subject key identifier: 26:30:E4:12:43:C4:19:EC:41:5A:64:38:CC:40:5C:F3:D2:DA:BD:12
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 01A17CCE4CFC6C7CB08E8EC03CD7E8DE5C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1ACF
Signing time: Tue 27 Oct 2026 10:00:57 +0000
Manifest this update: Tue 27 Oct 2026 10:00:57 +0000
Manifest next update: Wed 28 Oct 2026 10:00:57 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: 2hy163kduD7aszJ256xRYWNu+qF01xjqtoAvN0f5L0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:4c:fc:6c:7c:b0:8e:8e:c0:3c:d7:e8:de:5c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Oct 27 10:00:57 2026 GMT
Not After : Oct 28 10:00:57 2026 GMT
Subject: CN=2630e41243c419ec415a6438cc405cf3d2dabd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:db:18:77:76:12:7c:e8:0c:c6:a6:1b:76:
dc:ca:5a:01:82:af:da:28:ab:da:e2:0b:5f:af:a9:
72:86:32:be:17:94:60:00:52:57:5e:b4:55:60:cf:
96:ec:e9:2d:f0:4a:b2:c1:71:8a:4c:db:a0:d6:bf:
46:9e:42:6b:72:37:da:4e:e1:6c:d7:ff:fc:c7:0f:
e5:22:43:7a:41:f8:23:1f:5c:53:f4:17:f6:6a:97:
3b:0f:c4:9b:43:5f:c0:3a:a7:06:90:18:2c:2d:be:
24:76:d0:36:78:06:b1:1f:81:b9:9c:60:95:90:ec:
c1:36:e6:bb:51:5c:a1:b7:08:5a:21:4c:d0:c9:3e:
57:73:1f:3c:f2:a2:19:7c:27:56:e8:b8:08:04:d4:
b9:8a:c8:2b:80:9f:7c:7a:56:8d:47:51:78:03:b0:
14:57:30:6b:41:40:bb:f0:fe:f0:a9:a0:14:3a:f2:
24:9f:e3:66:22:dc:b7:d3:75:97:c0:48:0d:e5:b3:
79:7d:d0:36:3c:f4:60:75:2c:d2:d4:5e:ed:64:ef:
b4:df:1c:cb:c9:ca:61:b5:2e:25:0a:ac:cb:f6:30:
2a:91:de:07:f8:53:ca:d7:18:31:73:45:92:34:2f:
0a:4e:a8:d5:d4:a6:53:60:80:65:df:a5:41:4b:32:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:30:E4:12:43:C4:19:EC:41:5A:64:38:CC:40:5C:F3:D2:DA:BD:12
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:51:84:c4:84:41:aa:b7:a1:1c:82:19:5b:ff:10:ed:5b:15:
8c:d4:76:05:eb:98:33:47:79:6f:2a:70:d3:0a:dd:ef:00:ac:
f2:1b:1e:e5:51:79:20:8c:88:16:22:98:57:44:e4:ec:1f:5d:
c4:55:92:49:15:7b:03:b3:f3:e6:03:0d:55:2f:e1:3e:80:55:
cd:2b:c7:b2:ee:50:1f:14:17:1b:13:f2:05:cc:b8:b6:2d:74:
ab:0b:b8:03:75:cf:d8:c8:48:8c:a5:53:c6:2b:ae:41:4d:6a:
08:07:61:6e:7c:97:5f:b6:7c:15:b1:60:91:8f:a7:13:5d:7a:
89:ac:e1:64:d6:d6:80:5e:f3:31:b8:75:63:69:ea:2f:03:03:
77:20:9e:7f:5d:5b:d2:db:e6:e8:82:8b:ac:e1:cd:0a:82:c1:
45:9b:05:40:a4:8a:a4:a9:0e:ee:1b:69:35:2f:93:74:4b:ad:
03:90:c9:f0:91:8e:6d:bf:66:a7:00:8d:0c:30:b5:58:e7:82:
b5:ae:5b:1a:b2:36:e3:86:a6:70:d5:e5:73:2e:4c:65:a3:04:
34:10:a4:27:9a:95:23:c7:67:81:6f:4d:5c:d0:d2:ae:10:4e:
d9:db:f8:65:23:26:ac:d4:b5:ff:08:3c:d4:b3:93:67:64:29:
90:6e:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:59 2026 by rpki-client