Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
File: lMhsmzXXghFrLNhYOifOtAO49ho.mft (raw, json)
Hash identifier: zcug4Z3m0lmeuOfLMOE+2I7SnA3Ak8NTDXYZ0sf+hF0=
Subject key identifier: 94:F9:CD:62:F0:14:2C:12:78:0E:0E:EF:00:33:86:5D:11:E9:10:2A
Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Certificate serial: 01A17E17BFBFBE7A9E282A2BE3EE4D6486DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 16:00:47 +0000
Manifest this update: Tue 27 Oct 2026 16:00:47 +0000
Manifest next update: Wed 28 Oct 2026 16:00:47 +0000
Files and hashes: 1: lMhsmzXXghFrLNhYOifOtAO49ho.crl (hash: nv7LO/L1akIg2X0mj7CmHz5hz336Y3x2j/HEQT+aNbE=)
2: tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa (hash: WI+TvaMT1Y9cC04iUl0U1l9xEwrwqSAkBoEDvp55Sj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:bf:bf:be:7a:9e:28:2a:2b:e3:ee:4d:64:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Validity
Not Before: Oct 27 16:00:47 2026 GMT
Not After : Oct 28 16:00:47 2026 GMT
Subject: CN=94f9cd62f0142c12780e0eef0033865d11e9102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fa:35:c9:c9:24:f8:73:08:07:a0:38:bd:f8:
56:1c:57:63:9b:38:89:82:7b:b0:80:81:74:d6:d1:
ec:02:82:83:13:4f:ea:97:9e:5c:cc:c9:47:e4:f2:
99:e0:30:82:8f:02:62:37:8b:18:7a:a3:2f:4b:b3:
c8:c6:52:e3:c4:55:22:9b:ac:2d:62:18:18:f9:8c:
5a:82:6b:42:21:27:47:ed:da:fc:cf:79:fa:ba:76:
c6:8f:98:32:e9:94:a6:21:8f:a7:38:5e:58:98:54:
4d:25:e2:f5:95:bd:d5:aa:fd:20:f1:14:68:26:bc:
2e:19:ee:c4:8f:97:f4:13:67:e4:1d:23:24:e7:9d:
ab:33:b4:74:ba:e2:f7:50:be:a6:c3:af:ca:b5:c6:
19:01:f9:e7:3f:21:19:99:ff:09:9d:16:b8:80:dc:
07:e0:63:f2:8e:0e:d7:91:b5:c7:df:dd:98:0f:ff:
01:40:c7:42:2a:3e:3e:e7:59:d3:a4:99:91:25:03:
66:fa:c4:3b:0a:44:51:d4:b1:25:14:56:07:13:bc:
86:01:8c:06:f8:dd:0c:e5:07:88:de:68:64:d8:ce:
72:17:80:e9:f1:88:53:5c:b0:9f:ab:a1:ef:bb:4f:
f8:fa:c0:28:2d:6d:21:c5:55:21:60:8f:db:aa:35:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F9:CD:62:F0:14:2C:12:78:0E:0E:EF:00:33:86:5D:11:E9:10:2A
X509v3 Authority Key Identifier:
keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:67:50:39:f9:3a:65:e1:97:42:1e:62:61:06:4a:e5:b2:56:
6e:e4:0f:f4:27:a4:1a:f5:71:a2:a5:bb:6c:40:3d:2c:ee:b9:
9c:86:67:98:78:9a:24:75:44:6e:ee:b0:60:98:eb:7f:c9:7d:
a5:6c:ed:43:f8:90:b9:52:96:dc:2a:0b:ba:47:da:07:2c:ae:
51:1d:0d:fb:b6:c7:14:69:11:4d:6c:35:fa:cd:6d:86:67:fa:
67:ab:e3:1f:bd:92:da:a4:8a:73:8c:88:ea:e1:f3:3d:7b:ce:
2a:60:9a:e2:44:d1:23:14:c4:ab:4c:ba:3b:75:54:4d:8a:90:
45:71:42:87:30:9f:9f:c7:cb:4a:fb:7d:d2:cf:72:48:a8:0b:
34:83:e3:ae:d1:c0:c9:2c:31:e1:ef:48:8c:fd:db:e2:ab:7f:
72:c6:b1:9b:e8:4e:5f:1b:17:1b:ba:d4:4c:44:c5:cd:c3:5c:
bf:48:df:fe:d2:22:ad:bc:3e:69:21:b4:20:f3:df:36:59:53:
88:1a:04:0e:2c:83:ef:82:ce:47:d1:69:c2:b2:cc:a0:91:d2:
af:b1:00:21:a8:ca:cd:a9:09:90:e8:fe:2c:c6:23:f8:f9:a9:
55:5e:5b:71:9c:b4:38:2d:f4:48:10:7a:34:a1:08:3a:f8:3f:
7e:e0:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:35:58 2026 by rpki-client