Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: nxAEhtCdMyuyUymJCJHXSwqsxNqJZjKftsIAFSNtibE=
Subject key identifier: 23:9B:A4:24:01:9D:3A:FD:2D:A5:DA:0E:9A:DC:D9:3F:CC:F5:3D:80
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 01A08B680B737E777CD482DD104BBDFCC9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1A52
Signing time: Thu 10 Sep 2026 13:00:46 +0000
Manifest this update: Thu 10 Sep 2026 13:00:46 +0000
Manifest next update: Fri 11 Sep 2026 13:00:46 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: 7+9ADdYb18GBQMXyHLNUfwNSxBTpSM6ZHHUAN6Fd0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:0b:73:7e:77:7c:d4:82:dd:10:4b:bd:fc:c9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Sep 10 13:00:46 2026 GMT
Not After : Sep 11 13:00:46 2026 GMT
Subject: CN=239ba424019d3afd2da5da0e9adcd93fccf53d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:19:75:de:36:c6:e6:f1:b7:b8:32:8f:4f:
f1:52:8a:87:87:42:f4:26:66:86:8e:57:0a:d0:87:
62:e5:ba:cd:78:9d:3a:8e:4e:18:04:6f:a8:4f:51:
d6:70:91:a8:62:e3:0e:ed:fa:86:a0:02:12:4c:8f:
86:2b:c4:32:69:dc:2d:46:2e:72:88:92:b0:b4:ef:
f2:34:ad:11:62:20:8d:d1:f4:77:ad:35:fc:1d:1c:
34:8d:56:c7:10:0a:4b:68:ee:1f:fd:cf:77:77:99:
3d:50:94:ab:04:d0:0e:90:3b:68:c5:29:24:48:1b:
40:de:4b:f5:bc:aa:5b:c0:57:65:b6:2d:09:ba:cd:
84:b1:86:18:fe:4a:94:9f:8d:63:3e:db:4e:bd:8f:
0b:a0:a2:16:d3:24:68:b3:2f:4a:b8:5c:db:63:31:
76:4e:39:c7:ff:01:65:35:0c:ef:9f:ef:d2:f1:f9:
25:cd:91:71:5f:bb:cb:f0:fb:47:10:33:b4:18:98:
77:bf:b8:77:3c:f5:a7:42:0c:73:c3:a7:9d:91:8c:
8b:f6:de:5c:ae:3b:e6:8a:f9:1c:e1:78:ec:b9:2b:
30:32:88:b4:8f:22:7e:a5:51:50:88:0a:11:8f:74:
fb:61:98:fd:eb:94:f6:36:95:00:15:75:39:86:c3:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9B:A4:24:01:9D:3A:FD:2D:A5:DA:0E:9A:DC:D9:3F:CC:F5:3D:80
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:85:2a:17:e1:af:ee:92:fb:8d:1a:df:0a:fa:a7:f5:7f:92:
15:ca:a2:3d:18:9a:9e:80:47:e7:7a:69:a8:6e:ef:86:1a:83:
08:dc:a8:3a:b1:f9:dc:9d:63:34:f1:ce:ab:be:a1:df:62:ad:
fa:5c:10:b0:0e:25:07:98:7f:b4:e4:c3:94:b9:ce:e9:ac:70:
ba:41:25:0f:e4:be:ce:a8:7d:db:af:ce:4d:66:36:c3:78:10:
c1:42:a7:36:2e:89:25:6e:21:05:bf:69:01:db:ad:17:a9:7a:
75:2a:2f:d1:e4:b1:1a:c2:e4:79:04:b2:4d:3e:4c:4b:09:ee:
04:e8:e9:6d:d7:2b:ad:b4:6b:3c:3b:c1:aa:cb:49:c3:b6:2a:
19:af:6b:94:1b:3a:d8:b6:d9:55:c5:58:53:42:61:1a:79:40:
9a:ad:a3:f6:e5:ad:c4:cc:ec:97:3e:e2:d8:a7:c8:54:b7:83:
43:7c:5b:d6:48:52:bc:c3:d7:f7:c8:45:1b:e2:a5:2b:7d:be:
83:f1:ba:cd:d4:fc:e6:7f:8a:72:8e:cc:ce:1a:4c:3e:2a:9e:
f6:02:bb:9b:7e:36:5e:0d:b0:54:83:a4:78:f0:54:26:b0:b0:
59:23:ae:48:45:84:9b:7f:2a:34:da:e2:5b:ab:65:e5:2e:af:
24:1e:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:24 2026 by rpki-client