Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: O7q3eg/xlQj0ff0fR85LBQajsDISkkEAu1y3Wl3zTJ8=
Subject key identifier: 4C:98:C1:ED:DA:B4:20:B8:B3:76:32:CD:25:34:97:AB:D2:2A:69:31
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 019DCD86FB261ACED3C8122A7607E2E5CACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 0A0C
Signing time: Mon 27 Apr 2026 06:01:08 +0000
Manifest this update: Mon 27 Apr 2026 06:01:08 +0000
Manifest next update: Tue 28 Apr 2026 06:01:08 +0000
Files and hashes: 1: NvHVcOuHPgyc57kdkgknLviy86E.roa (hash: y99G00GU2pSghDNIsvoE0LPbq8qsxNZ2XK//ZEAFwIQ=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: 3UeCmoEtKxdrruXELpEgGd4wsyZJe6QOf6ktN7mtdNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:fb:26:1a:ce:d3:c8:12:2a:76:07:e2:e5:ca:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Apr 27 06:01:08 2026 GMT
Not After : Apr 28 06:01:08 2026 GMT
Subject: CN=4c98c1eddab420b8b37632cd253497abd22a6931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:77:41:a3:74:c3:e2:bd:73:cb:42:0e:aa:
48:dc:4e:cf:fc:3a:6d:d1:5b:70:0f:6b:51:aa:0f:
20:6c:92:78:3b:d9:52:7f:08:b9:23:78:50:41:10:
8d:eb:ef:5e:c2:24:94:e7:56:02:4a:b5:98:08:a8:
de:7b:ff:8c:67:54:af:58:df:56:1a:e1:d2:20:dc:
f4:df:f2:28:b7:c1:ac:61:06:bf:15:80:6d:75:af:
07:8c:24:0b:27:16:5a:e4:d5:81:72:0d:db:6f:64:
4a:57:11:76:44:0a:e8:99:19:9c:6b:4e:c6:8e:3c:
dd:62:e4:bf:4a:57:73:61:ed:22:7d:5e:cf:46:7b:
c8:25:07:c1:dd:e0:03:e6:a4:e2:54:a9:5a:a5:68:
b0:69:a5:36:60:c6:3f:d4:8c:ea:7e:12:84:58:5f:
d2:e3:f9:e3:e2:a1:dd:34:a8:cc:9d:c5:fc:90:6d:
05:8d:28:45:cf:1c:42:ee:ce:a9:55:a5:3d:f4:30:
ea:8a:c9:21:63:e5:11:74:00:93:34:a5:af:70:96:
21:66:e3:ab:99:ca:d4:ad:69:96:80:df:c4:81:c9:
88:29:77:2c:ea:ea:6c:95:38:a5:4e:a5:38:d5:fb:
b5:c9:61:9f:aa:9d:b5:1f:d4:dd:7d:b9:17:39:41:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:98:C1:ED:DA:B4:20:B8:B3:76:32:CD:25:34:97:AB:D2:2A:69:31
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a2:1e:18:0d:0c:0a:34:c0:4a:d4:af:7b:d9:36:2d:51:ff:
87:15:2b:5a:12:9a:4f:67:a1:e9:2c:09:ed:40:1b:33:cb:64:
f7:9e:09:0b:91:35:29:40:87:9b:4e:6a:4a:d2:5c:0d:47:c4:
3e:f4:4b:5b:ab:37:0f:dd:f7:4b:c5:91:f8:90:bd:6e:70:8e:
71:f2:07:84:2a:32:6d:36:80:36:0b:ae:ce:8b:e3:61:c8:a1:
ae:a6:96:1d:60:21:3e:c3:6d:2e:e9:f3:98:ee:b2:3e:c4:fb:
d7:0f:7a:5e:d1:ec:df:c2:f7:3d:de:91:c1:98:e7:e7:eb:e2:
73:2c:e8:4f:ef:90:dc:a1:7d:b2:2f:8b:46:41:b4:fe:fa:cb:
11:9c:78:21:6e:eb:11:f4:a8:af:85:8b:fd:f2:a8:7d:9d:9d:
17:fc:98:06:70:ab:6b:2d:f2:3e:34:56:81:45:7c:5a:41:02:
99:45:ab:13:02:65:ea:fb:49:cd:7f:43:3e:6f:90:25:be:9d:
bc:7b:82:17:71:2c:94:86:1d:7b:f4:8c:d4:56:69:0b:74:d8:
5c:e8:f1:12:c1:2f:c4:fc:af:2f:b6:05:6e:1d:e5:83:af:60:
0d:ea:a2:6f:6b:af:8a:ec:d3:89:4c:56:a9:cc:c7:d7:4d:2a:
f2:b8:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:35:11 2026 by rpki-client