Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: J5BEeNVtkWlTx1xxQrWz5pyJOyqtxXYqGQWinnzM+Y0=
Subject key identifier: 38:23:3B:1F:20:8C:E4:EE:4B:8B:1E:CA:7E:E5:A9:F4:60:7E:1F:CE
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 01A17FCFE82EFBF5802E2B10A83A115F4E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 0BF6
Signing time: Wed 28 Oct 2026 00:01:34 +0000
Manifest this update: Wed 28 Oct 2026 00:01:34 +0000
Manifest next update: Thu 29 Oct 2026 00:01:34 +0000
Files and hashes: 1: NvHVcOuHPgyc57kdkgknLviy86E.roa (hash: y99G00GU2pSghDNIsvoE0LPbq8qsxNZ2XK//ZEAFwIQ=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: uhtdDWtO0rk4FvanoR8CenKgPMygwpDEZbExI7XVWSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:e8:2e:fb:f5:80:2e:2b:10:a8:3a:11:5f:4e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Oct 28 00:01:34 2026 GMT
Not After : Oct 29 00:01:34 2026 GMT
Subject: CN=38233b1f208ce4ee4b8b1eca7ee5a9f4607e1fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:1f:17:d2:e0:ca:9a:26:d2:13:12:85:94:
a5:ea:1b:3d:3d:35:11:4a:c5:c1:37:05:83:a1:dd:
de:16:3c:64:db:19:1a:9d:32:f3:5d:16:2b:1d:cb:
53:13:52:48:6f:2e:a4:20:8d:26:f5:69:74:c6:84:
4e:c1:56:5c:81:56:ac:f1:84:8d:6b:ed:24:9a:f0:
e6:c9:d2:c5:de:39:2b:b6:a7:ab:32:cf:9f:b0:e6:
f7:22:37:3f:d1:ab:ff:2c:0a:7c:30:66:a3:e3:91:
21:7f:b0:24:5e:02:74:c3:e3:db:cd:4f:60:12:52:
ea:15:4b:0f:89:da:c4:16:d9:bf:61:ba:60:30:00:
18:d4:ac:de:9a:94:c0:a4:ed:71:52:95:b8:1d:cf:
c6:ab:a4:f7:3b:18:8f:b2:c6:02:dd:ec:87:3c:f0:
3e:fc:14:20:66:bb:0c:b0:3d:03:ff:b7:d7:3f:98:
45:64:79:33:1b:7d:f2:7e:7a:ec:1e:0a:df:1a:b1:
34:c3:47:74:cd:98:41:bd:41:7b:2a:aa:ba:1a:40:
e6:99:5a:9b:97:f4:3d:cc:43:06:f2:45:a7:55:ca:
91:0d:28:9a:12:60:1a:bc:ea:af:3b:ec:fe:de:26:
5e:eb:1e:95:f5:4d:bd:05:fe:65:de:9a:28:1e:79:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:23:3B:1F:20:8C:E4:EE:4B:8B:1E:CA:7E:E5:A9:F4:60:7E:1F:CE
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5a:1d:61:aa:6b:cf:83:6c:9e:ec:e0:dc:dd:75:a9:c7:2c:
fb:a7:e7:49:34:ae:43:de:f8:d8:39:88:38:4b:02:c2:da:61:
ec:52:fd:d0:0d:59:4c:f3:8b:f6:aa:86:b3:39:99:22:0b:34:
c9:59:b1:c1:a1:e3:43:99:3b:1a:50:20:6c:84:07:ed:bd:94:
41:9f:de:ae:1e:48:22:28:b5:02:61:59:98:21:73:75:17:66:
59:ce:b3:db:0c:06:d0:40:b6:6f:58:c0:27:91:1f:2c:de:bc:
b7:a6:ad:1c:a3:ea:4c:43:52:95:a1:1a:12:8f:20:f3:f9:8b:
f9:51:26:78:40:88:90:60:02:55:b6:e0:47:f6:5b:6a:42:02:
96:07:f9:54:5c:b8:b3:a0:e9:12:45:a1:82:2a:89:33:ba:da:
14:a4:c3:43:a5:d5:ec:21:b9:d0:d5:c5:ae:10:5f:62:2b:18:
35:5d:48:f2:91:03:8b:e7:1a:32:53:b9:23:41:f3:4e:6b:27:
aa:25:7c:48:e7:13:66:8a:cd:5e:52:b6:ef:47:ce:39:e3:2b:
62:0a:66:ea:1f:d5:6a:ff:57:63:2d:7b:2a:a9:6b:7d:f8:f3:
34:9e:58:df:ec:c3:e5:55:3a:0a:e7:4d:af:ac:14:c2:72:40:
25:96:5e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:27:47 2026 by rpki-client