Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: V1NbNUNlr+mnC1beBP1U5MUit6xnAs6MI1am+cPULBM=
Subject key identifier: 57:D6:1F:C8:39:15:42:D8:98:74:51:19:44:22:72:30:F2:69:3F:1F
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 01A174A6B40A73966CE55FAEF7E58367AD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 1ACC
Signing time: Sun 25 Oct 2026 20:00:44 +0000
Manifest this update: Sun 25 Oct 2026 20:00:44 +0000
Manifest next update: Mon 26 Oct 2026 20:00:44 +0000
Files and hashes: 1: 6p89_xCOKbaLA_nTNaPhKFJdz_c.roa (hash: 8QYHiVGLqfMhZfw5m6z2kE4Wp9ZlKeYZXiQifht1XBw=)
2: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: 0p3m3Cgov2QUeA4zVf0aCgIx3GcR22UmUK0R3ey5h4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:b4:0a:73:96:6c:e5:5f:ae:f7:e5:83:67:ad:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Oct 25 20:00:44 2026 GMT
Not After : Oct 26 20:00:44 2026 GMT
Subject: CN=57d61fc8391542d89874511944227230f2693f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:04:d3:bd:b1:6e:68:a5:43:f5:f0:b6:3e:
d2:4a:2a:b4:72:00:92:e7:e8:c8:32:0c:55:5a:35:
9b:7c:f3:c8:61:62:c2:23:ff:1a:ce:04:c1:f1:a1:
f4:b6:77:a2:10:08:a0:46:44:15:48:3b:97:e7:9d:
23:b4:bd:91:f1:4b:4b:27:fa:1b:cd:8b:5c:38:f8:
6a:c6:a0:22:29:46:d5:03:8c:81:fa:44:0a:d3:cb:
3b:2a:34:19:de:d3:43:20:a2:e3:98:d8:33:a0:47:
d9:8f:c5:4b:1d:67:0b:0e:ca:bd:5c:72:fa:34:54:
75:1e:41:33:cc:e7:6c:eb:e7:35:c7:89:ae:ec:94:
96:04:86:8b:df:2a:d9:9b:f5:9e:e1:e8:0f:ca:5c:
d4:65:6c:54:69:88:bf:38:68:d6:29:97:46:fb:29:
e5:82:1a:3a:47:f4:f3:d7:ce:6e:34:62:0a:4c:dc:
f1:91:ae:46:7f:0e:6b:fd:5c:b0:99:fe:f0:77:a5:
08:f0:dd:1a:00:49:c0:55:e5:82:ef:6a:1c:16:b4:
0b:96:e5:de:b3:c2:ac:41:98:4c:da:02:8b:2a:e5:
0a:a8:ba:ae:71:87:02:65:4e:d8:0c:c8:39:0b:ac:
11:59:fa:ca:2f:db:9c:32:d5:c2:3d:34:a9:7e:5e:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D6:1F:C8:39:15:42:D8:98:74:51:19:44:22:72:30:F2:69:3F:1F
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7e:3d:22:0e:86:31:e1:47:90:6f:de:3c:87:78:34:8e:bc:
ed:7d:fa:26:ce:6c:97:b7:d2:de:89:b7:e6:4a:7c:d6:6c:cb:
e0:d0:69:c1:b9:ae:25:ee:a5:68:9d:ec:a2:bd:04:3c:a6:80:
b0:8d:e3:bd:91:fa:49:ea:ca:c5:8b:1d:46:d8:a8:ce:60:97:
2d:7f:01:cd:4a:38:fe:c8:fe:7f:35:18:67:73:77:ec:f3:ad:
cc:19:71:30:75:03:b8:e0:5e:d6:42:21:3a:d6:d9:60:e1:4a:
c2:cc:d5:cb:33:56:9e:39:5f:86:bb:07:5b:5e:f6:67:5f:19:
7f:71:04:bf:05:59:dd:79:37:14:08:d1:2b:f5:3f:96:f2:fd:
73:09:20:15:ea:1e:d8:af:6a:ee:25:af:7a:5f:20:13:8a:fa:
d7:07:14:35:80:24:a8:f5:23:38:f6:13:28:e0:64:8e:14:e1:
90:20:e5:43:64:58:01:7b:f0:98:0d:8e:52:cb:3e:8c:df:fc:
9e:15:cd:0d:db:19:8b:da:6b:e8:ed:30:55:4d:76:80:05:0c:
b7:28:b3:5c:0f:75:44:c4:9b:90:a6:e1:bb:8a:b2:66:47:e1:
d7:5b:6b:b5:43:9c:7d:36:3f:0e:ce:4a:51:14:99:6b:0e:47:
a1:ad:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:41:43 2026 by rpki-client