Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: ocMiMEGouSLyJwP5YmdJ2Jn/LD0veXSuxo55zgOh6pw=
Subject key identifier: 3B:24:15:D0:84:DF:A0:93:BC:68:9B:B5:B9:32:AD:05:D1:DB:79:74
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 01A0D727A93C23E0E196E6C126E2C19DA2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 06:01:35 +0000
Manifest this update: Fri 25 Sep 2026 06:01:35 +0000
Manifest next update: Sat 26 Sep 2026 06:01:35 +0000
Files and hashes: 1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: ukqBnfrpvIVXz4CanJFBwH9jtIPdOiHyK31yNBgNGeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:a9:3c:23:e0:e1:96:e6:c1:26:e2:c1:9d:a2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Sep 25 06:01:35 2026 GMT
Not After : Sep 26 06:01:35 2026 GMT
Subject: CN=3b2415d084dfa093bc689bb5b932ad05d1db7974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:07:1f:7b:50:1e:f9:47:d9:51:08:3f:31:
19:bb:b4:34:37:1f:ae:28:33:a1:15:b2:a2:3e:d9:
5f:30:13:64:f4:36:b1:8c:62:3f:a0:75:d8:52:bb:
49:7b:20:53:85:a8:c5:13:f4:25:bf:56:db:5d:38:
a0:49:58:cf:04:60:11:fa:7d:d4:c3:c8:4e:02:f6:
da:7b:7b:cf:70:a6:d7:06:74:8d:f6:88:29:06:fd:
f8:5c:20:f4:53:d0:08:ab:8e:54:0c:61:d2:34:84:
63:ba:12:dc:d0:09:16:e2:71:f8:8a:67:54:b8:e7:
2d:5e:03:0b:d8:3a:d9:e0:35:8e:dc:06:4c:96:a4:
fb:a8:28:62:3c:71:1b:47:f7:80:ab:9b:f0:39:d0:
7c:fa:c8:a6:51:ee:dd:41:8d:4d:d9:04:22:de:3b:
e9:cd:7b:ce:f4:ac:70:34:a3:2e:c3:e5:49:a2:de:
85:ba:8a:82:8d:51:89:a6:4e:65:02:5c:e8:1f:a7:
90:a7:46:31:35:fc:e1:ac:14:31:dd:a9:25:d2:62:
e6:29:e7:c9:5c:a4:14:9f:eb:df:a4:c3:14:3a:7e:
40:04:11:71:21:5e:8e:5b:84:a4:0d:7f:ec:4e:43:
d1:10:9a:ec:91:3f:2c:9d:44:e1:eb:4a:8a:d0:36:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:24:15:D0:84:DF:A0:93:BC:68:9B:B5:B9:32:AD:05:D1:DB:79:74
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:00:d9:74:f8:3f:51:66:91:88:dc:50:95:f7:25:1a:4c:6f:
f0:a6:c2:39:a0:62:50:b7:7a:c6:8a:86:17:41:8f:ad:c9:55:
2b:40:f0:a6:28:91:bd:6d:7e:7a:ec:0c:1d:80:24:a7:f5:7e:
82:30:9d:7a:ad:79:cd:3a:27:41:fe:4e:8a:0e:20:87:89:9b:
a2:d1:d0:af:9f:0d:2f:50:96:d3:53:61:85:fc:b3:41:f5:e7:
96:1b:b4:cc:46:5c:b9:3f:27:24:b0:1e:0f:af:f8:7f:50:85:
31:79:bd:05:c5:b8:fc:a3:34:89:46:a5:a8:d9:e6:76:7c:4e:
df:68:05:23:7d:42:15:e2:4d:f2:25:f9:ef:fe:f6:3e:7c:1e:
bc:3d:47:e3:76:d2:ad:67:b0:3d:90:ff:e1:b4:0c:e2:a7:38:
7a:65:cf:22:19:94:5d:59:f1:d7:ec:92:e3:f7:a7:1c:b5:43:
41:97:ed:7b:62:bf:36:1a:c8:e6:c7:37:e6:5a:19:fc:63:59:
ea:26:07:88:51:2f:86:83:ad:28:71:db:3e:22:b9:d7:78:3f:
f9:01:96:c5:63:f0:f5:ba:76:9e:bc:c8:0d:7e:06:d5:a2:24:
93:6c:e2:75:b2:59:c6:af:6a:fd:d9:40:9f:ab:9d:91:4e:29:
03:af:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:15:24 2026 by rpki-client