Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
File: lMhsmzXXghFrLNhYOifOtAO49ho.mft (raw, json)
Hash identifier: 4LwmT6iNmfdU7lNAFsd8gGESF0WJjoIo9ZztmXKI45k=
Subject key identifier: 1D:8A:E5:11:B6:A8:59:B9:A8:A6:B1:AE:65:BF:E3:3D:AE:00:84:9E
Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Certificate serial: 01A08AC3046191C3A9DE5E5A9D927D4CFE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 10:00:31 +0000
Manifest this update: Thu 10 Sep 2026 10:00:31 +0000
Manifest next update: Fri 11 Sep 2026 10:00:31 +0000
Files and hashes: 1: lMhsmzXXghFrLNhYOifOtAO49ho.crl (hash: GSfeT1OfPkKCW4NF51FhyVmt+p4pdytaL/z92Hx2jFU=)
2: tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa (hash: WI+TvaMT1Y9cC04iUl0U1l9xEwrwqSAkBoEDvp55Sj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:04:61:91:c3:a9:de:5e:5a:9d:92:7d:4c:fe:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Validity
Not Before: Sep 10 10:00:31 2026 GMT
Not After : Sep 11 10:00:31 2026 GMT
Subject: CN=1d8ae511b6a859b9a8a6b1ae65bfe33dae00849e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:9b:55:b2:5d:df:a5:b4:9c:4d:d8:bf:13:
ae:04:6a:ad:78:09:9d:f5:72:13:76:7b:79:82:11:
d0:fd:52:e4:36:04:a5:85:75:6a:26:3b:6d:44:d8:
39:19:0f:53:96:e9:67:30:78:e3:01:be:33:27:6d:
5f:a8:22:93:0e:cd:64:f7:22:93:1d:88:d7:69:73:
05:b7:9a:b5:df:f0:9e:db:7e:76:d9:4d:cd:df:ba:
9e:92:fe:14:44:e0:0f:08:f8:4f:5e:4d:15:d7:13:
bb:d8:ce:9a:dd:ea:1f:d9:98:5d:ac:4b:5d:2c:09:
a8:a7:e3:4f:65:72:99:89:6f:a1:d8:f0:7d:f0:78:
5a:9e:8e:a0:59:94:20:3a:1a:12:ed:94:73:61:7e:
62:6f:d5:1c:a0:20:da:e6:90:5a:d9:3c:2d:3e:6b:
25:07:21:28:f9:99:30:8a:77:81:1c:70:3d:21:93:
b3:5c:01:fb:fe:05:70:32:f7:56:83:33:f3:3c:f9:
d7:d7:5a:1e:c4:f6:31:4a:88:fd:b8:4c:01:9f:8c:
c4:2e:60:11:b3:27:66:b5:30:86:24:d2:53:d2:43:
23:aa:77:64:66:d8:87:4c:75:25:74:6f:92:41:49:
8c:f2:3a:2b:7d:62:62:13:90:ce:d7:d8:97:30:2c:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:E5:11:B6:A8:59:B9:A8:A6:B1:AE:65:BF:E3:3D:AE:00:84:9E
X509v3 Authority Key Identifier:
keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:14:0a:75:7a:50:db:0c:23:7a:79:47:83:87:9f:7d:89:88:
48:ec:6e:52:a5:b8:a6:ae:cd:88:96:0b:c6:a4:00:45:33:e9:
a6:ef:10:72:30:7f:f5:37:38:92:f7:c1:c1:2e:55:09:78:3a:
40:48:a8:0c:a4:ca:60:ae:ca:8c:54:a4:ca:00:9f:41:1f:e3:
76:ce:7e:49:5d:2d:e8:93:eb:75:9d:b9:d9:28:05:59:d8:fa:
50:4c:5d:89:77:3c:44:06:bb:63:83:43:d0:87:3d:81:c6:99:
7f:14:45:59:c7:c3:53:ce:a3:88:c3:61:4c:f6:8a:63:36:53:
02:1c:01:9e:13:79:5b:a0:70:1f:ad:47:88:90:2b:45:a3:cd:
21:f9:96:80:00:96:8b:e8:62:c6:f0:58:ca:85:1c:43:90:ef:
fd:d3:0e:fc:97:05:7f:70:68:3d:f2:ac:5e:15:c0:6f:12:b1:
0b:34:65:96:76:72:16:d2:7b:3c:8f:7f:bc:98:64:ac:8f:ef:
a3:d2:57:53:05:dc:a6:b3:52:db:dc:37:fa:74:cc:b1:7c:57:
e9:89:ec:47:da:e9:1e:70:90:66:6d:8d:23:b0:ab:a9:79:33:
39:90:54:05:01:13:0a:1b:1e:f5:97:9f:1e:6f:a9:c0:12:50:
a6:19:3d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:49:06 2026 by rpki-client